Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE08EDCA947311F0BD4C92E8DAE4EC9C.roa
File: AE08EDCA947311F0BD4C92E8DAE4EC9C.roa (raw, json)
Hash identifier: iFtIqY6F0wcPrSZ2OuvYySdBcBFRRpYJ2pHoT2cJejA=
Subject key identifier: D7:2A:60:8A:7E:00:E0:76:C3:D4:72:12:78:53:97:54:06:19:57:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE08EDCA947311F0BD4C92E8DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:41:42 +0000
ROA not before: Thu 18 Sep 2025 09:41:35 +0000
ROA not after: Thu 30 Oct 2025 09:41:35 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97267 (0x17bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:41:35 2025 GMT
Not After : Oct 30 09:41:35 2025 GMT
Subject: CN=68cbd3d5-0f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:47:ef:4c:7c:49:95:bb:00:6d:50:a5:60:
fa:62:59:db:1d:ae:02:84:c4:54:c8:73:ea:18:4b:
20:8a:6f:58:34:31:71:7f:32:8b:01:1b:6c:48:dd:
21:af:34:f3:42:7d:ba:25:e7:12:51:02:a0:c7:70:
fe:ba:c5:6f:82:1c:3a:49:18:7f:c4:d7:6a:bf:91:
35:9b:9b:e5:e3:a3:b0:a3:11:3c:39:1d:85:58:13:
ca:67:4b:a0:b4:71:03:24:47:4e:ac:09:a5:df:61:
b1:da:06:00:20:fc:ed:ad:57:bc:e7:c4:aa:b2:45:
9e:05:6f:05:5e:ae:0c:b4:85:d9:9d:60:56:74:af:
fb:ba:c5:79:8c:3c:d6:42:2a:55:51:5e:4c:e8:48:
4a:eb:85:c6:04:5e:67:2c:b1:14:d3:f0:e8:01:e1:
e7:9e:d9:44:c7:bd:e7:69:20:e2:b6:b2:7f:4e:91:
89:dd:59:39:fa:2d:b5:7b:28:e0:16:08:47:b2:f3:
44:c1:dc:bf:aa:76:64:a4:c9:a3:fe:02:f8:2b:cc:
95:1c:19:62:e9:2f:bf:52:ab:43:b9:4d:ee:6e:9e:
b5:8e:aa:7f:8d:88:b3:13:14:04:7e:99:c5:61:6e:
37:22:73:73:af:8f:af:2e:c5:d9:cf:99:65:e6:3a:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:60:8A:7E:00:E0:76:C3:D4:72:12:78:53:97:54:06:19:57:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE08EDCA947311F0BD4C92E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e2:45:e0:a9:a5:8c:f4:4c:27:29:e6:c8:c3:be:ec:8a:a8:
03:52:3c:28:5e:72:ca:f4:18:6a:4a:db:71:4b:7d:9c:a0:56:
15:ea:28:50:3b:c8:06:a0:4a:67:b2:29:5f:0a:e8:02:97:83:
05:89:8f:ef:81:3d:ea:99:87:f3:6c:76:c9:73:e0:9e:2f:6a:
4c:27:31:08:95:e4:ac:d2:34:1b:db:44:69:93:96:9b:04:16:
b3:d7:3f:36:b2:9e:5c:44:8a:d7:19:a9:3e:29:60:2d:17:f6:
2c:ab:36:fd:6e:99:f4:61:16:5d:ad:5b:e5:d7:41:30:66:30:
31:2c:81:90:ab:d5:e9:a0:52:e5:2f:3d:ed:58:c8:cd:89:74:
db:35:a2:df:ef:e8:62:83:df:9d:40:50:57:d0:b8:18:83:02:
f9:20:7d:cf:c8:90:60:c9:cf:1a:b5:f2:f1:1d:b7:b7:ff:35:
cf:07:3d:f4:8c:aa:26:86:b3:19:1d:4a:04:bd:e0:bb:24:71:
4f:d9:1b:da:a6:2d:2d:8a:01:f9:c7:12:99:75:30:ef:41:0a:
12:f4:72:08:98:10:13:f8:e0:42:89:66:ab:d2:88:d2:fa:0b:
a8:81:ed:ef:1e:3a:bd:5a:d8:bb:37:a8:c7:a2:7c:da:2e:30:
cf:a1:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:29 2025 by rpki-client