Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03626EE837111F0A39DDDB4DAE4EC9C.roa
File: F03626EE837111F0A39DDDB4DAE4EC9C.roa (raw, json)
Hash identifier: vd7o6ZD4DL4BSlQBqpuwjrK6JHL0o8ZUirSMMTFGgy8=
Subject key identifier: BA:09:AF:7A:4D:3F:CF:36:16:CB:9C:71:50:FB:C0:B0:CC:C3:DF:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03626EE837111F0A39DDDB4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 18:16:24 +0000
ROA not before: Wed 27 Aug 2025 18:16:18 +0000
ROA not after: Sun 26 Oct 2025 18:16:18 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.115.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94705 (0x171f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 18:16:18 2025 GMT
Not After : Oct 26 18:16:18 2025 GMT
Subject: CN=68af4b78-cace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:52:e9:b3:6d:a9:67:8d:4b:ac:8f:dd:33:
ab:e6:21:1b:38:f6:04:18:95:0b:c6:df:7e:34:cb:
b6:33:43:aa:3f:30:2c:be:1b:be:c4:bd:5e:bc:cd:
cf:9c:6f:e2:fc:cb:23:1c:20:c3:f0:9e:6a:fa:63:
c9:60:cf:17:9e:cc:7b:a4:a0:0c:82:52:11:11:7b:
61:3d:7b:5b:69:8c:47:6a:d2:54:30:60:7f:ce:c8:
df:56:ac:98:a5:82:4e:79:b3:90:33:95:77:38:91:
af:5c:a4:6c:84:06:31:02:72:67:d1:8d:b7:e0:a0:
34:66:48:3f:89:88:db:03:9b:30:69:72:a2:79:ca:
cb:9f:65:d1:bc:a3:c7:2f:86:b6:13:24:1d:29:69:
bf:ff:d0:f6:b6:1b:24:74:cc:57:50:a4:71:e2:f6:
0b:6f:05:dd:eb:ce:14:40:35:93:b3:f1:ee:b1:fd:
8c:5a:8d:52:73:99:7c:d0:b1:0b:a0:26:86:73:5f:
06:9c:93:59:03:94:2d:7d:ad:99:53:86:1c:68:79:
3b:4b:e9:33:b3:40:02:7f:6a:15:15:b9:3a:b5:05:
fb:69:c3:a6:f0:39:36:e5:31:d3:c6:f1:d6:88:e2:
a4:40:29:07:11:1d:39:9e:fc:d3:e0:91:c2:c3:8b:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:AF:7A:4D:3F:CF:36:16:CB:9C:71:50:FB:C0:B0:CC:C3:DF:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03626EE837111F0A39DDDB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.120.255
156.225.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:48:e4:93:d8:da:4b:0d:69:8a:4c:f1:1e:19:6d:d5:90:3a:
90:6d:94:87:84:4e:a0:cd:5f:7f:81:bc:60:48:e1:40:df:ea:
bf:69:10:74:63:f2:34:a8:b5:0d:e5:3b:49:d7:e4:4e:65:5b:
e0:ff:7b:47:ef:a6:f2:2f:b7:73:7a:38:19:bc:6b:93:d3:ee:
15:be:50:bb:32:8a:a3:65:9d:18:13:55:ca:46:d1:5d:c2:af:
be:ff:5a:9d:58:6f:5d:a0:de:f5:62:2b:8c:e4:bd:db:6a:0d:
df:50:1b:63:aa:b0:75:57:e2:ba:3d:6d:43:2a:b1:a1:d5:09:
f3:3e:c6:a4:2c:94:5e:e7:bb:15:c7:61:b9:ca:ac:27:4b:34:
77:e4:04:90:5a:d2:a7:a8:ae:92:2f:a6:53:81:dc:6e:7f:34:
43:73:02:b3:5c:22:e2:c2:3a:37:87:65:e4:8c:6b:1a:ea:44:
6d:f7:9f:d2:52:c4:30:68:36:6f:7d:27:f9:50:49:aa:96:c2:
2f:80:85:93:ec:8b:1a:2d:dd:53:35:bf:34:cc:19:b4:80:f1:
ce:fd:be:d2:da:ff:ca:be:53:2e:f2:da:db:cd:c3:79:4a:96:
4d:0c:3d:43:13:1f:91:c3:bd:cf:b0:98:29:aa:8f:28:c7:23:
79:3d:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:47 2025 by rpki-client