Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C0FDB27C2311F093331781DAE4EC9C.roa
File: 02C0FDB27C2311F093331781DAE4EC9C.roa (raw, json)
Hash identifier: 4zYMinqEhXaa6B/V2lmO7Fqdm8RpoUfnsyEnvIe5NrI=
Subject key identifier: 4C:55:73:FF:D9:EE:EB:51:20:EF:3F:D4:FE:C7:74:AB:C3:49:BC:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C0FDB27C2311F093331781DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 11:03:46 +0000
ROA not before: Mon 18 Aug 2025 11:03:42 +0000
ROA not after: Thu 23 Oct 2025 11:03:42 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 32
156.247.32.0/24 maxlen: 32
156.247.33.0/24 maxlen: 32
156.247.34.0/24 maxlen: 32
156.247.35.0/24 maxlen: 32
156.247.36.0/24 maxlen: 32
156.247.37.0/24 maxlen: 32
156.247.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93159 (0x16be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 11:03:42 2025 GMT
Not After : Oct 23 11:03:42 2025 GMT
Subject: CN=68a30892-030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:dd:bd:14:ea:d0:74:d8:da:f5:ec:da:ee:
70:4f:6c:21:6a:ba:5a:2f:1e:b2:3f:c5:a3:30:96:
af:e7:46:72:bd:1f:d4:50:b7:c9:2c:3a:61:19:d8:
69:5a:f8:61:7f:1c:5e:37:05:6f:f9:37:61:16:99:
f4:8b:9b:ab:00:45:a9:69:ca:f0:b5:3a:57:30:2f:
7f:fc:ba:ca:8b:9d:0b:44:db:c6:68:4c:4f:e1:f1:
e2:16:0a:25:95:05:57:21:bf:70:3d:97:7a:b9:a7:
db:98:4c:7d:c0:c6:a7:d6:90:15:20:e5:88:15:2f:
6f:7e:1a:10:7b:51:05:51:5c:6e:78:a5:70:99:8f:
af:39:82:f5:07:0f:15:50:43:12:e8:22:0e:28:18:
41:ed:14:88:e2:fb:c6:06:10:38:d6:e9:bf:83:36:
24:a5:a5:19:bd:bc:d5:71:56:17:d6:56:11:c3:4b:
ad:94:fd:77:64:90:7d:71:b2:a9:3e:96:7c:c1:1e:
7b:0f:6a:2e:9c:d1:fb:6f:d3:27:24:10:41:00:8d:
a6:9e:b4:3c:11:fb:bd:ae:6a:6e:7c:5e:7f:5d:61:
27:9c:c2:31:87:39:67:3a:55:81:2f:2f:d5:c2:f6:
02:ac:13:f0:f9:fe:59:df:1d:bc:51:cb:7a:2a:a8:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:73:FF:D9:EE:EB:51:20:EF:3F:D4:FE:C7:74:AB:C3:49:BC:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C0FDB27C2311F093331781DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
27:cf:99:ed:61:7d:df:62:c0:f8:48:b2:3d:35:13:e1:d8:61:
a2:d3:7b:7e:14:77:bf:b2:da:5a:44:f5:95:a7:ef:09:5d:b6:
57:a3:80:e5:a4:01:f3:a5:99:ab:68:f1:46:df:91:8d:db:58:
f6:e7:e2:d7:cc:df:1c:c6:9b:8a:d8:83:1b:c4:2c:04:bc:23:
37:04:09:2e:ff:92:51:a0:ef:95:4b:df:49:f6:92:04:df:9a:
67:34:2d:20:0d:db:2b:93:b7:03:91:04:5e:c5:48:82:4a:b5:
9a:e0:9f:5b:cd:20:5c:3a:88:b1:64:46:14:0c:2f:a7:35:75:
94:06:93:a7:ca:88:6e:c0:8a:0e:98:46:78:a3:09:76:9e:a3:
97:67:41:4e:c7:d8:b6:27:c5:11:5b:8b:10:cf:78:f6:fe:c7:
96:0e:9d:eb:34:fc:4b:71:4f:7a:40:fd:12:6f:ab:65:f7:51:
48:91:f3:85:14:db:80:8e:26:a6:b6:bd:e1:cc:2e:8d:80:7d:
ad:b5:c0:7a:e2:4b:2c:72:4e:fb:3c:e6:fb:0a:1c:f0:b7:7a:
85:19:24:d7:f2:49:23:81:f8:cd:f3:68:d1:d8:5d:4e:93:84:
5a:36:1c:0b:2c:a2:78:f4:a6:81:66:a5:9e:c3:eb:8a:d7:2b:
86:68:3f:4a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWvnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODE4MTEwMzQyWhcNMjUxMDIzMTEwMzQyWjAYMRYw
FAYDVQQDEw02OGEzMDg5Mi0wMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxMzdvRTq0HTY2vXs2u5wT2wharpaLx6yP8WjMJav50ZyvR/UULfJLDph
GdhpWvhhfxxeNwVv+TdhFpn0i5urAEWpacrwtTpXMC9//LrKi50LRNvGaExP4fHi
FgollQVXIb9wPZd6uafbmEx9wMan1pAVIOWIFS9vfhoQe1EFUVxueKVwmY+vOYL1
Bw8VUEMS6CIOKBhB7RSI4vvGBhA41um/gzYkpaUZvbzVcVYX1lYRw0utlP13ZJB9
cbKpPpZ8wR57D2ounNH7b9MnJBBBAI2mnrQ8Efu9rmpufF5/XWEnnMIxhzlnOlWB
Ly/VwvYCrBPw+f5Z3x28Uct6KqhgawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFExV
c//Z7utRIO8/1P7HdKvDSbzpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMkMwRkRCMjdDMjMxMUYwOTMzMzE3ODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQAnz5ntYX3fYsD4SLI9NRPh2GGi03t+FHe/stpaRPWVp+8JXbZXo4DlpAHz
pZmraPFG35GN21j25+LXzN8cxpuK2IMbxCwEvCM3BAku/5JRoO+VS99J9pIE35pn
NC0gDdsrk7cDkQRexUiCSrWa4J9bzSBcOoixZEYUDC+nNXWUBpOnyohuwIoOmEZ4
owl2nqOXZ0FOx9i2J8URW4sQz3j2/seWDp3rNPxLcU96QP0Sb6tl91FIkfOFFNuA
jiamtr3hzC6NgH2ttcB64kssck77POb7Chzwt3qFGSTX8kkjgfjN82jR2F1Ok4Ra
NhwLLKJ49KaBZqWew+uK1yuGaD9K
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:11 2025 by rpki-client