Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20121D69D3E11F0A4E71DD2DAE4EC9C.roa
File: F20121D69D3E11F0A4E71DD2DAE4EC9C.roa (raw, json)
Hash identifier: bGd5kN9NvSAzwYFWBWGmrt+6C13++Q95sixz8bJJ1QU=
Subject key identifier: 71:39:EC:B4:9F:94:A1:29:14:A3:05:62:D4:44:AF:9C:B3:BB:57:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20121D69D3E11F0A4E71DD2DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 14:16:53 +0000
ROA not before: Mon 29 Sep 2025 14:16:46 +0000
ROA not after: Tue 28 Oct 2025 14:16:46 +0000
asID: 48031
IP address blocks: 156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97725 (0x17dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 14:16:46 2025 GMT
Not After : Oct 28 14:16:46 2025 GMT
Subject: CN=68da94d4-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:1a:80:89:f7:2f:4e:c3:33:dd:4a:56:66:
b4:92:bf:b6:2b:75:58:7d:ef:75:de:f1:ec:b1:8f:
9a:67:89:7c:d5:b3:d1:d7:9c:df:7a:4d:a6:4e:ee:
97:3c:b5:89:8c:1d:4b:c8:46:2e:64:dc:c7:51:e1:
ee:48:cb:ed:3e:d0:53:03:0b:e2:bf:e9:e5:f4:c6:
93:50:b3:01:c9:b0:a2:a6:9e:8f:a2:e5:b5:a8:25:
d4:c5:0f:c1:fa:69:ce:8f:ad:a3:11:23:0b:d5:d6:
d1:ad:46:a0:d2:60:9f:6e:df:c7:2b:84:97:f1:c4:
05:1c:51:19:c1:d5:b5:2c:e0:ef:7e:5b:f6:5f:84:
7e:e1:3b:79:4f:90:e4:4c:f4:ee:3b:71:dc:95:b4:
57:a0:11:ce:72:b8:b7:22:ec:6f:e9:9c:14:7e:d9:
54:72:26:7a:57:98:48:c1:d2:66:44:af:c4:63:62:
9d:78:30:b7:d4:60:43:62:61:3e:63:cb:bc:5d:18:
7f:ce:e7:29:ea:f7:67:36:a9:e2:91:7d:5b:f8:5c:
e5:5c:0b:50:5e:58:60:97:aa:1a:53:7b:12:ef:29:
be:ad:05:36:ae:df:ed:93:27:4a:c5:ef:5a:a2:08:
e9:af:45:3b:d5:54:1f:d1:3f:b0:a1:5f:e9:a3:dc:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:EC:B4:9F:94:A1:29:14:A3:05:62:D4:44:AF:9C:B3:BB:57:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20121D69D3E11F0A4E71DD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.130.0-156.246.149.255
Signature Algorithm: sha256WithRSAEncryption
69:fd:6c:f0:33:bd:c1:03:29:f9:c3:bd:b3:9f:90:cd:2e:82:
fa:a2:60:bd:d1:d9:30:28:41:4c:49:c4:6b:88:bf:52:91:dd:
2a:c3:eb:5d:4b:07:e1:8e:89:80:27:3d:f8:60:62:a0:c3:e2:
a4:16:0d:ab:48:00:4d:33:ab:c6:ac:ea:ca:10:d5:1a:29:dd:
7b:7f:58:e9:5e:0b:ee:5e:02:41:bf:a5:c1:14:91:d2:74:7e:
26:76:4a:90:66:46:ec:ca:b0:cf:03:42:8c:eb:11:38:92:5d:
16:ce:9b:ad:2c:1e:4d:3a:e2:dc:20:03:08:16:22:38:f6:f1:
57:4f:f7:b9:28:eb:d9:16:72:59:c6:66:49:30:5e:59:6e:b2:
73:e9:ee:ef:bb:0d:32:0a:9b:3d:c9:25:6d:69:58:97:43:37:
40:c7:b6:8d:68:44:83:ca:44:ea:f9:66:06:bf:7b:cb:21:a2:
2f:a7:19:be:ac:c1:32:f2:03:7e:8e:e6:78:0c:46:56:06:1f:
57:5a:1c:e9:c6:04:9b:68:99:cd:31:58:80:70:d7:0d:8e:8c:
e4:c6:58:51:ed:a6:ec:3e:00:8d:7b:36:5e:2f:90:02:f3:ea:
80:53:3e:71:89:7d:67:f7:20:a8:84:33:5f:47:2f:2d:44:42:
7a:27:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:25 2025 by rpki-client