Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46FFDCB69DCD11F09A11D9F3DAE4EC9C.roa
File: 46FFDCB69DCD11F09A11D9F3DAE4EC9C.roa (raw, json)
Hash identifier: SNoXM1hmVhFGAjegRcsSfUa7SvAP2arP+GXDgNIrRrw=
Subject key identifier: FE:69:FB:D9:10:23:AC:B1:72:97:16:77:49:74:3C:91:BC:14:8D:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46FFDCB69DCD11F09A11D9F3DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:15:44 +0000
ROA not before: Tue 30 Sep 2025 07:15:39 +0000
ROA not after: Tue 28 Oct 2025 07:15:39 +0000
asID: 44559
IP address blocks: 156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97807 (0x17e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:15:39 2025 GMT
Not After : Oct 28 07:15:39 2025 GMT
Subject: CN=68db83a0-d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:79:ba:a3:a6:0d:d1:53:c4:61:63:8b:ad:
ce:5b:17:46:1c:b9:f8:b4:9e:71:59:60:2e:86:f2:
47:9a:44:38:90:cd:4f:92:0e:3c:f5:42:4d:97:7d:
4f:dd:f0:c4:05:9e:dd:ad:ad:d5:9d:2d:96:12:29:
ae:b8:91:67:d2:32:53:4b:bf:d2:ed:39:fe:d3:e1:
a7:57:e3:7f:0f:e3:52:f8:0e:94:cb:6b:a3:f5:af:
aa:6e:d1:0f:b1:93:95:13:68:05:7d:6f:89:ed:52:
70:e4:08:fa:31:73:ec:4f:04:5b:21:ce:05:df:89:
a0:c9:1a:02:e1:19:dd:f9:5e:a8:a0:f6:8c:80:c9:
02:4a:70:54:78:48:31:fd:19:56:d9:a9:b8:dd:a4:
d0:30:38:99:fd:91:d9:3e:8b:23:31:3b:e4:42:c7:
b1:3c:2c:bb:56:01:c7:13:0b:27:4f:dc:1a:07:52:
d1:7c:2b:3d:cb:74:c5:e1:51:fe:65:62:72:45:0e:
be:3d:22:20:0c:6d:6a:4f:62:cc:1f:dd:22:2b:f1:
93:46:0a:0b:f2:43:c9:97:4e:4e:a1:82:4a:fd:37:
32:91:b0:35:b2:4f:74:da:fb:ef:03:37:ea:07:74:
45:d9:a4:8e:c4:5c:d2:e0:49:66:ce:88:c1:f5:95:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:FB:D9:10:23:AC:B1:72:97:16:77:49:74:3C:91:BC:14:8D:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46FFDCB69DCD11F09A11D9F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.239.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
28:3c:b4:f5:b7:cc:f4:d3:d7:a9:1b:da:ce:00:fb:2d:db:db:
8a:b8:23:87:93:3f:49:d4:97:29:4a:42:8f:be:f3:ee:22:3a:
b0:a2:66:ab:ea:16:e6:f0:e0:d2:80:c9:48:44:4b:8d:1c:d2:
8c:1e:f2:ea:98:d5:1f:dc:9e:65:35:06:6c:ac:b6:76:2a:f7:
97:6f:0f:93:e5:72:5e:ab:7d:99:20:44:4d:c8:f8:0a:c1:99:
de:01:70:4f:32:7b:c2:39:ea:4f:d8:05:78:41:94:69:4a:44:
81:aa:d4:0d:e8:4c:bd:98:b9:e9:51:16:17:6a:4c:49:d3:fa:
6e:bb:2d:e3:60:83:6b:29:15:4c:d0:9e:e6:38:13:5a:64:16:
4a:59:38:bd:4f:d8:d2:6d:38:c0:e2:4d:52:a6:46:cf:c4:9e:
03:f7:02:35:de:8e:13:85:44:f9:dc:51:ae:b4:52:7f:fe:1b:
bb:f4:b8:62:5c:4a:e2:cf:03:41:8d:56:ae:8d:ef:05:3a:7a:
7f:07:a3:3e:61:74:8c:75:47:36:ca:b1:12:df:d6:56:ea:af:
f5:cf:18:24:51:b3:d1:9d:dd:56:c2:73:af:0f:de:87:bf:be:
3e:6a:c2:38:e4:21:3f:f1:68:fe:ff:b8:e0:54:7b:fe:f7:c2:
ba:ee:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:49 2025 by rpki-client