Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F0A543E7AD311F0A7A056E4DAE4EC9C.roa
File: 5F0A543E7AD311F0A7A056E4DAE4EC9C.roa (raw, json)
Hash identifier: Q6hUTfKvsjDwt/CmhdNUEIAD2p4yWldDc5SCtbF5ZQ0=
Subject key identifier: 0B:25:F4:1C:7A:F6:DC:C3:21:4E:87:39:3D:D9:14:44:46:6F:DB:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F0A543E7AD311F0A7A056E4DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 19:01:10 +0000
ROA not before: Sat 16 Aug 2025 19:01:06 +0000
ROA not after: Mon 25 Aug 2025 19:01:06 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93092 (0x16ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 19:01:06 2025 GMT
Not After : Aug 25 19:01:06 2025 GMT
Subject: CN=68a0d576-45fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:92:13:e9:f6:c0:19:2b:04:f6:fe:24:73:
cc:f1:6c:03:d0:e4:89:93:ae:9a:08:73:ce:74:f2:
c3:7f:b7:4e:57:31:ba:3a:ac:61:3f:b5:c2:f1:d7:
f3:28:9f:10:b5:be:4d:ec:f9:0e:85:13:ff:1c:f2:
50:5f:4f:bb:89:68:69:4d:71:3f:08:6d:02:e1:9b:
01:7e:b8:72:63:a5:24:88:91:8d:0e:9a:a5:3a:66:
6d:28:fd:f9:5e:4a:c9:9d:52:8c:a3:bf:dd:10:e0:
92:47:6a:4f:32:e2:f2:1d:0b:03:96:7c:f0:91:12:
4a:59:b4:9c:53:c7:75:f6:b8:0e:7e:75:96:95:50:
e0:94:b4:16:a5:a5:cd:89:de:69:ba:6c:cb:01:63:
00:f5:9b:61:b3:70:e8:f4:2e:51:6d:bb:31:b8:7e:
d7:fa:1f:f3:5f:bf:75:05:92:aa:5d:48:53:bf:a8:
3f:03:41:15:01:d0:7f:4f:77:61:59:7c:62:e6:75:
98:50:c0:ff:a4:1f:87:15:3d:44:bc:0c:7a:e8:c5:
c4:3a:40:74:a9:6f:85:01:8f:aa:6b:37:63:a8:86:
e4:df:80:85:a0:86:46:de:e2:7e:ea:30:55:87:ea:
16:5f:59:02:57:a5:9f:1f:5e:27:a8:b5:60:a2:b1:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:F4:1C:7A:F6:DC:C3:21:4E:87:39:3D:D9:14:44:46:6F:DB:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F0A543E7AD311F0A7A056E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
88:c5:97:58:66:84:f3:4f:80:08:5f:e8:47:e2:bf:39:a7:1e:
a3:e4:b1:28:09:c7:81:29:b3:7b:b4:1a:1a:a0:2a:30:24:e1:
ba:0f:f6:6a:d8:8f:4d:9b:d5:0b:1b:33:37:74:0d:be:af:03:
20:d9:d7:5c:37:51:c2:46:9d:cc:1f:76:5f:df:4f:37:41:7a:
0d:1e:3b:a3:5a:8f:2a:72:81:c2:25:9c:04:d0:3c:77:1c:7a:
5d:58:c6:b0:c8:d5:e8:f9:f5:fc:53:36:9b:f6:04:ef:df:c6:
6d:5e:9c:71:55:4b:d4:c7:05:2a:c1:fc:fb:02:29:b4:00:ae:
17:68:9d:e2:52:4e:92:d9:35:4e:0e:3a:c5:aa:5b:dc:d9:3f:
ab:2f:5e:62:ff:e7:4a:d8:1f:5c:11:40:a0:ec:ec:a5:52:80:
e8:b6:5c:1b:6c:f9:9e:8a:4b:e3:c2:7d:d6:84:b5:c4:bc:64:
0f:7e:bf:a4:80:dc:9a:48:30:15:2f:9c:f2:93:3c:8d:c4:66:
03:c8:32:0c:59:5e:e6:43:3d:74:6c:c0:d7:54:81:ad:a8:f2:
6c:34:40:d2:8e:99:a2:0c:2c:75:20:f6:f2:49:89:90:f9:28:
cb:2e:bc:3d:5a:0a:71:f9:24:ae:20:88:e4:0a:86:71:df:93:
34:b6:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:15:15 2025 by rpki-client