Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7170B42804811F09C61EBA9DAE4EC9C.roa
File: C7170B42804811F09C61EBA9DAE4EC9C.roa (raw, json)
Hash identifier: 8UmtbkDBKRg7WPSlOS1qdCGjZ5m4KUgyNzYc4XHuHtE=
Subject key identifier: 2A:4C:58:31:45:BD:DB:D3:3B:DB:61:55:B3:B5:9F:25:B2:16:9A:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7170B42804811F09C61EBA9DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 17:44:12 +0000
ROA not before: Sat 23 Aug 2025 17:44:07 +0000
ROA not after: Tue 30 Sep 2025 17:44:07 +0000
asID: 9304
IP address blocks: 156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94017 (0x16f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 17:44:07 2025 GMT
Not After : Sep 30 17:44:07 2025 GMT
Subject: CN=68a9fdec-0bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:23:c5:4b:e8:b4:36:f1:eb:d3:54:aa:18:
84:c3:8b:1a:58:a0:0d:54:f4:9c:62:b8:6b:ce:6b:
7c:f7:c9:24:34:82:7b:09:16:4c:77:2c:8c:7b:4c:
76:20:bc:2c:0b:fe:cb:b3:e9:00:68:fc:8b:14:b3:
ab:b3:11:6d:18:bf:3c:cf:8e:12:27:5d:11:97:8e:
0c:dc:32:81:a5:59:0d:30:61:e7:9a:ec:1f:06:f0:
41:7b:1a:a0:49:28:a6:86:b6:72:45:83:82:d7:29:
bb:d0:21:7a:71:b3:10:61:32:ec:e7:34:6d:3e:aa:
07:59:37:91:0a:b3:18:65:c2:45:72:0a:35:0d:5b:
f8:39:d0:a9:b4:ad:0a:8d:d6:0b:31:f4:fa:9c:58:
e4:fa:a8:68:6f:14:e1:93:b1:c7:a9:a4:5c:5e:ba:
9e:8e:f8:eb:ed:44:5a:98:51:77:33:47:b3:4d:69:
04:ca:eb:6e:7c:6d:ca:19:4d:b3:4a:c6:d2:9a:db:
6b:ba:70:35:c4:7a:8f:8d:4f:f7:a1:a8:10:25:45:
62:c3:ef:40:19:df:25:f8:3f:db:c5:fa:23:0e:46:
94:ac:15:ec:bf:2a:1e:4d:c6:d3:19:ba:b2:c0:00:
cf:98:a6:5b:43:52:85:9f:e3:7e:9b:b6:95:0a:8f:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:58:31:45:BD:DB:D3:3B:DB:61:55:B3:B5:9F:25:B2:16:9A:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7170B42804811F09C61EBA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.4.0-156.231.6.255
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.245.211.0/24
156.245.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:69:34:ce:83:12:75:94:50:a8:ba:d0:27:22:6e:69:6b:3a:
19:bf:ee:e9:48:43:4d:de:00:ef:91:22:e5:aa:b8:71:37:78:
e8:a9:de:c5:c5:08:8a:20:34:63:e6:d2:37:36:95:a9:f8:af:
96:7f:1c:08:e9:5c:46:8c:17:18:89:32:c6:da:10:da:37:95:
0e:4c:3e:08:ec:7a:41:28:cf:c1:ca:d0:b0:cc:8c:1e:16:41:
9f:41:a7:1b:4b:64:e4:74:de:6b:bb:69:e6:90:11:f0:bb:d3:
a3:c2:4e:0e:d7:aa:a9:d2:dc:d2:33:a8:1c:33:0c:79:f7:bd:
b4:72:e7:67:59:62:37:f3:eb:a6:88:9d:33:a2:fb:ec:d4:92:
4b:cc:b0:11:10:d3:2b:12:21:5a:6d:2b:89:ce:ca:54:b7:3c:
4b:0c:39:09:67:95:f4:93:64:fc:8e:cc:62:2d:59:79:8a:1a:
dc:1e:3b:90:1c:4f:2a:71:64:3f:4d:aa:46:af:b9:84:8d:50:
65:7e:e3:80:f8:df:ad:4c:2c:57:22:45:a9:e8:84:de:5f:32:
82:27:a3:74:f6:7d:82:ae:13:bc:d7:e4:ad:26:64:af:bf:1c:
d3:06:44:59:82:15:8a:f4:09:3b:05:2a:20:5c:28:b2:73:76:
e0:73:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:21:57 2025 by rpki-client