Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B322C6E47E7211F0A496CCA1DAE4EC9C.roa
File: B322C6E47E7211F0A496CCA1DAE4EC9C.roa (raw, json)
Hash identifier: /uvq8VDKVftnhspfil4wKoZF1tDU8M9Svlh4onb0a3A=
Subject key identifier: ED:1F:C3:2C:FB:AD:33:8F:17:16:1C:BD:41:D3:4A:89:04:5F:1A:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B322C6E47E7211F0A496CCA1DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 09:39:15 +0000
ROA not before: Thu 21 Aug 2025 09:39:08 +0000
ROA not after: Sat 08 Nov 2025 09:39:08 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93674 (0x16dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 09:39:08 2025 GMT
Not After : Nov 8 09:39:08 2025 GMT
Subject: CN=68a6e943-c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:d9:73:04:e2:cf:1c:fe:9f:05:ff:6b:a3:
66:24:27:db:c6:bc:ee:ee:9c:c0:81:f5:d5:3c:06:
59:1d:9b:43:2a:35:43:bc:07:e0:79:03:a1:a8:33:
a7:46:13:83:c5:ba:5f:cc:40:d8:f3:95:7d:b4:ab:
a7:90:03:73:94:d9:55:b8:37:ac:3f:d8:93:7b:de:
a9:41:f9:5f:cb:c4:cc:3f:39:28:62:6d:8d:ef:51:
7f:1b:7e:bb:ef:5d:27:78:02:6c:b0:02:7b:3f:a8:
a5:d3:7a:78:a9:74:05:33:10:52:f6:4c:f3:fc:ae:
cf:af:99:89:59:44:ea:26:54:91:7c:f6:17:28:ab:
09:5a:c6:3e:b2:2a:40:df:a2:57:94:b4:df:32:8a:
11:2a:49:e6:96:0d:eb:1a:af:96:a1:a0:8b:82:c5:
ca:88:49:4b:fd:44:cb:2b:a4:17:b2:db:e2:f8:cb:
e4:c9:88:39:45:7e:42:6b:6b:c7:26:ad:a8:22:b9:
b5:c3:cb:8d:e5:61:3c:63:99:f1:91:31:a5:79:62:
c7:c1:5a:13:39:36:16:bc:2a:b5:f4:cd:3c:41:13:
1a:8d:ec:a4:d2:1d:58:83:f6:12:70:c1:61:4f:26:
27:d4:2d:27:02:81:0e:ef:8b:5e:dc:e3:b2:7c:02:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:C3:2C:FB:AD:33:8F:17:16:1C:BD:41:D3:4A:89:04:5F:1A:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B322C6E47E7211F0A496CCA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
61:78:c1:63:3e:96:98:a6:e5:4b:ae:19:b7:a8:44:a8:f0:33:
6e:51:1a:d1:66:b4:d6:80:55:0d:7d:fe:16:44:fc:0b:06:ee:
c9:66:14:90:af:e1:7f:81:f8:3a:55:42:83:01:25:11:74:8e:
ad:62:0c:33:14:08:3e:b7:5d:5c:e3:d9:b1:92:17:c9:ab:bd:
b0:4e:55:e6:4b:17:4f:d8:e4:50:fa:36:b4:a3:fc:3b:3e:28:
0a:b1:b6:8b:e7:d0:02:59:4e:16:0f:25:e5:0b:e6:b5:3d:7c:
ee:40:d7:e4:a6:e4:00:5a:3c:8b:75:5e:84:46:0e:4a:f9:91:
aa:3b:71:cb:2f:3c:cf:4b:f8:e8:26:6b:eb:aa:b2:17:51:bf:
58:e2:ec:a7:41:05:c4:54:f4:9b:81:68:9a:48:59:36:70:11:
11:43:1a:f0:6c:b8:7d:72:a8:97:5f:81:6a:b2:8d:7e:ae:16:
50:85:7b:41:1f:2e:c6:3f:c0:cf:97:d9:b3:76:3c:1e:31:dc:
c0:12:b7:85:78:98:9b:df:46:d4:08:0e:fb:94:bf:11:da:83:
ac:ff:34:11:a1:23:f1:bf:76:54:70:25:a4:50:97:c5:cd:dd:
33:22:8b:17:29:f6:75:bd:1f:12:56:b4:e9:79:a1:ea:a4:64:
6d:77:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:00 2025 by rpki-client