Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF12A2AE870F11F0A5148CDEDAE4EC9C.roa
File: FF12A2AE870F11F0A5148CDEDAE4EC9C.roa (raw, json)
Hash identifier: gOxnWi2BdvgO4kwNG0WIgjcUe6+d7N1FiIX/sFvLFAQ=
Subject key identifier: 97:A2:5A:57:9B:37:8C:3E:24:C2:9B:04:C1:BA:EA:89:B9:1E:F5:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017500
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF12A2AE870F11F0A5148CDEDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:45:23 +0000
ROA not before: Mon 01 Sep 2025 08:45:18 +0000
ROA not after: Mon 01 Dec 2025 08:45:18 +0000
asID: 399077
IP address blocks: 156.240.204.0/24 maxlen: 24
156.240.205.0/24 maxlen: 24
156.240.206.0/24 maxlen: 24
156.240.207.0/24 maxlen: 24
156.240.208.0/24 maxlen: 24
156.240.209.0/24 maxlen: 24
156.240.210.0/24 maxlen: 24
156.240.211.0/24 maxlen: 24
156.240.212.0/24 maxlen: 24
156.240.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95488 (0x17500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 08:45:18 2025 GMT
Not After : Dec 1 08:45:18 2025 GMT
Subject: CN=68b55d22-ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:c5:94:24:9d:70:15:02:cc:5e:ab:32:e5:
5c:4c:4e:20:41:e7:69:74:c8:f5:3c:21:f0:51:ac:
4d:23:a0:e1:08:ba:91:f5:b5:5a:90:24:8b:f4:43:
78:72:95:95:ab:af:16:76:0d:ee:9b:94:6b:b4:9a:
5b:17:c4:c3:40:5f:59:34:0e:25:a5:b9:5f:90:1a:
9d:dd:f7:7d:2f:85:fc:b8:cd:68:97:61:b7:4f:9d:
65:2d:16:a2:5d:93:0b:1a:e6:79:fd:03:5c:53:23:
c5:93:ab:3d:d3:ac:e0:cd:77:a1:22:7a:c5:c9:e6:
09:da:d2:a3:6a:18:7e:6d:0c:a0:dd:e8:0b:4a:ba:
77:59:1f:bb:c4:00:b4:5e:af:8d:91:d8:ee:02:63:
e1:d6:0f:87:2f:fc:85:c5:12:34:2e:94:bb:98:fe:
67:4c:84:0c:3d:b9:a8:95:74:56:44:b1:46:90:f6:
19:be:ae:fe:10:a1:c4:64:d6:d7:69:e9:ab:33:54:
02:d2:78:44:13:a5:95:3b:8c:25:59:a4:48:0d:85:
d5:2b:e3:71:be:21:67:64:fc:f9:80:7b:94:d4:29:
f9:00:35:a2:ee:54:88:a9:08:7d:f0:a0:5d:4f:81:
f3:92:1a:64:fb:53:33:99:46:bc:4d:a0:be:ee:47:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:5A:57:9B:37:8C:3E:24:C2:9B:04:C1:BA:EA:89:B9:1E:F5:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF12A2AE870F11F0A5148CDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.204.0-156.240.213.255
Signature Algorithm: sha256WithRSAEncryption
14:12:bd:dd:63:09:74:1e:4f:2a:72:da:7e:66:1e:3f:27:0a:
fa:4d:bc:6b:36:30:1b:7a:0b:53:0d:02:01:a5:9e:52:4a:c5:
7c:b9:a8:e3:a4:1d:55:01:a8:a1:8d:64:c6:f7:0e:e3:82:99:
c1:a8:e8:a4:07:4e:d4:c8:d5:50:7e:74:61:a6:71:1f:65:b5:
73:06:15:a1:dd:a7:cd:47:70:47:20:d4:c1:84:90:e0:ed:1f:
ee:de:e8:a0:e3:04:1b:b3:96:a2:91:7b:63:cd:12:2f:54:38:
cf:43:87:a6:f0:e9:4f:23:72:6e:a8:e1:a9:92:3e:3b:58:8f:
a3:21:82:17:96:4e:9a:49:f1:f8:e6:f1:eb:e9:8c:03:0d:ab:
1f:97:e9:33:a4:ae:e4:38:b3:e3:0c:e6:94:17:c1:a1:57:0a:
cc:4e:53:85:03:37:c7:11:8b:16:00:0d:31:d0:1d:90:ac:53:
ec:2d:1d:50:5b:d4:d9:54:d7:df:fc:6f:2b:a5:1c:43:26:48:
0d:f7:ac:63:28:cf:ed:45:ff:d3:1f:c3:25:ba:2e:fe:c6:bb:
68:66:62:ad:7c:ea:de:54:a3:83:fb:22:a2:9d:13:3e:0f:53:
d8:5b:b0:6c:d6:4a:b0:2b:4d:2c:cd:f9:b6:ce:1b:bb:83:c3:
11:cf:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:15:29 2025 by rpki-client