Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC9CBB06870811F0A29BE5ADDAE4EC9C.roa
File: AC9CBB06870811F0A29BE5ADDAE4EC9C.roa (raw, json)
Hash identifier: vp+Y0YO+B7vQEkwB/4tgWj24uRMe4FBCoRUinfhUJjg=
Subject key identifier: F2:33:76:EE:51:13:30:51:80:44:A4:30:11:68:F6:D2:BC:02:8C:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0174D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC9CBB06870811F0A29BE5ADDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 07:52:58 +0000
ROA not before: Mon 01 Sep 2025 07:52:53 +0000
ROA not after: Mon 01 Dec 2025 07:52:53 +0000
asID: 399077
IP address blocks: 156.251.30.0/24 maxlen: 24
156.251.31.0/24 maxlen: 24
156.251.32.0/24 maxlen: 24
156.251.33.0/24 maxlen: 24
156.251.34.0/24 maxlen: 24
156.251.35.0/24 maxlen: 24
156.251.36.0/24 maxlen: 24
156.251.37.0/24 maxlen: 24
156.251.38.0/24 maxlen: 24
156.251.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95448 (0x174d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 07:52:53 2025 GMT
Not After : Dec 1 07:52:53 2025 GMT
Subject: CN=68b550da-3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:f0:97:99:5c:d5:20:49:2d:41:b0:2c:63:
9f:60:2e:ba:5b:05:9c:4a:a2:e1:bb:f7:bb:9d:c2:
0b:6e:58:0a:4d:23:9f:eb:36:7e:e7:34:5f:6e:48:
8f:ab:ab:8c:31:bc:87:61:59:5a:d5:5a:ac:aa:c5:
38:79:7e:c1:dd:a3:4a:0c:13:0a:7c:0e:5a:4b:ee:
00:d4:a1:c1:06:ef:31:25:df:08:01:63:3a:e7:28:
2d:47:64:c0:06:4b:74:db:10:f3:02:5b:0f:21:91:
93:03:69:eb:74:da:55:06:d9:ee:7b:b7:ab:ce:75:
1b:8e:0e:91:4d:0d:7f:2f:3a:d5:20:2b:00:a6:55:
f8:02:70:09:5d:1e:5c:b2:0b:9b:e5:6e:93:92:95:
b7:29:94:02:0f:8c:99:e9:12:e9:f1:64:33:c1:68:
d9:62:04:50:ff:96:5a:9b:09:cd:ce:b5:79:5a:00:
8c:6f:42:27:7d:b0:b7:cf:33:2d:cf:c9:28:ae:57:
2c:bd:d7:ea:f0:cf:bb:ba:b4:01:f6:43:3b:64:9d:
67:32:58:47:cb:f0:b3:44:4c:4b:74:df:93:53:2b:
8a:74:13:77:88:22:c2:ea:ab:fc:ae:5b:45:4a:58:
c6:93:e6:b9:58:08:a2:a8:df:cd:01:8d:5c:a2:08:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:76:EE:51:13:30:51:80:44:A4:30:11:68:F6:D2:BC:02:8C:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC9CBB06870811F0A29BE5ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.30.0-156.251.39.255
Signature Algorithm: sha256WithRSAEncryption
b9:28:0e:52:05:50:99:27:1c:f5:02:e0:af:d6:71:27:23:43:
07:75:9e:1a:ad:6a:f9:f7:76:34:01:42:fd:bd:81:59:30:c7:
4c:f1:1e:27:17:46:9f:6c:98:67:4d:2f:77:64:05:3b:cc:0c:
fe:7c:0a:8c:1a:ac:8b:25:f3:d0:93:0c:1b:0d:26:17:ac:5f:
37:05:f6:bf:69:94:b5:97:3e:3d:61:83:e0:c0:60:73:30:b5:
36:70:4f:8f:1f:33:22:1c:1f:be:04:81:db:57:78:92:da:37:
66:a5:ef:7b:2c:60:65:97:b5:24:e5:dd:87:d2:96:af:44:1c:
7e:40:14:cd:f4:19:9a:14:7c:4f:e2:47:f0:99:83:7a:37:74:
4b:6f:bc:61:b4:62:7d:71:3c:95:aa:7c:57:b4:da:79:d9:9c:
73:b4:fd:c0:3e:35:72:3d:40:d0:f7:fc:66:7e:76:ae:5e:5c:
64:8c:4e:ee:f3:0f:cb:3c:42:76:8a:36:fc:ca:d1:8c:fc:6b:
4f:82:d6:ee:3b:65:cd:9e:72:37:83:0b:43:34:c0:3b:c1:e8:
de:d7:bd:ef:a8:dc:34:f5:ac:2d:ba:17:f4:a4:e8:2a:62:44:
30:07:14:55:a5:03:16:07:ec:6f:e4:36:36:05:c2:fe:2d:ba:
1d:4e:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:56 2025 by rpki-client