Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E24A3D2A50311F09493CEB3DAE4EC9C.roa
File: 3E24A3D2A50311F09493CEB3DAE4EC9C.roa (raw, json)
Hash identifier: NKZOHQuzefSiRoI6kXUVvMj7nPPWi0Qahw3oMHNla3I=
Subject key identifier: CD:FF:44:9C:41:02:8C:8B:E2:A1:69:7F:81:2B:27:00:62:D2:C4:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E24A3D2A50311F09493CEB3DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 11:29:40 +0000
ROA not before: Thu 09 Oct 2025 11:29:35 +0000
ROA not after: Sun 16 Nov 2025 11:29:35 +0000
asID: 22773
IP address blocks: 156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98251 (0x17fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 11:29:35 2025 GMT
Not After : Nov 16 11:29:35 2025 GMT
Subject: CN=68e79ca4-0bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:df:a9:ad:e6:f3:5f:ab:59:91:b6:b5:01:
a7:e3:ea:16:e5:f8:17:64:5c:ed:64:76:e7:63:36:
6c:60:d0:e7:5e:e4:53:98:ba:1e:c9:5d:7b:9a:3b:
dc:95:a3:93:ab:46:c5:b5:61:be:af:d6:a2:30:be:
9c:22:a1:f4:e9:de:ac:76:bd:a4:36:36:dc:04:ba:
93:21:d0:6d:3f:a2:95:d2:9c:fa:12:41:8f:cb:22:
43:68:2a:36:c7:86:f0:03:e3:df:af:55:0d:5a:a9:
44:85:13:82:44:4d:d3:26:6b:cd:04:34:3d:de:99:
3c:47:6c:7a:70:4c:13:f0:5a:f6:ee:79:44:3f:52:
ed:a4:7e:7b:aa:95:a3:f0:96:ee:ea:c8:a5:5e:4d:
8f:09:16:85:55:89:9a:b6:f6:1d:04:71:52:6e:39:
c7:b9:43:39:1d:9b:b5:e4:63:34:0d:74:7c:f2:98:
a5:88:f9:bf:10:42:88:2b:f6:f2:43:7e:c7:a9:3f:
a3:bb:54:74:ff:78:ea:a9:fe:0b:27:9f:fd:a5:e9:
24:fa:d8:90:3a:34:29:65:77:4f:42:3d:57:46:d4:
46:c8:77:6a:1d:0d:2f:23:6a:3f:d7:7d:83:f6:75:
11:00:7f:44:53:a4:03:84:cb:b1:13:f9:bb:9f:70:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:44:9C:41:02:8C:8B:E2:A1:69:7F:81:2B:27:00:62:D2:C4:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E24A3D2A50311F09493CEB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.23.0/24
156.242.28.0/22
156.242.48.0-156.242.50.255
156.242.52.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:b0:5e:fc:09:19:36:63:ac:10:64:5b:0a:03:32:5f:ea:88:
fc:54:0e:b2:63:5b:32:9c:e4:f1:13:fe:e1:ed:99:9f:fe:69:
a3:27:5a:fc:c0:39:76:ae:26:02:b8:47:97:4c:22:79:d8:6d:
a1:8e:4d:a0:55:4f:bc:dd:7d:d8:60:82:02:38:71:83:ab:38:
3c:17:fa:b4:56:6f:89:95:b8:9c:e2:2d:fd:e9:93:fd:c1:64:
e3:c7:50:f9:cd:88:5e:2c:d5:45:a7:3f:58:37:85:71:94:92:
5b:9b:17:a2:43:60:8f:1a:1e:a2:69:f2:a2:7c:35:f1:10:ed:
54:71:c1:3f:5d:b3:de:ea:e6:19:cf:82:ec:5d:1d:5e:65:f7:
2e:07:95:da:b7:15:da:da:78:54:1b:6f:58:cf:50:37:ab:93:
a8:83:46:ac:05:9b:b9:42:0c:8c:1a:bc:16:f7:d0:04:2e:48:
62:8b:ee:14:c4:0a:2e:fb:ce:4d:4a:04:78:18:07:e6:88:26:
f4:56:53:72:10:62:c5:d3:c9:68:23:3b:f8:ba:53:fd:3d:69:
34:a2:28:57:80:a7:be:ab:1e:26:95:11:6e:6a:78:0a:1c:fc:
60:b9:c6:5b:8f:7c:23:79:55:ff:2f:63:d7:e3:d6:ef:01:41:
a5:8c:06:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:25 2025 by rpki-client