Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D53DC9D47E6A11F094AC37EBDAE4EC9C.roa
File: D53DC9D47E6A11F094AC37EBDAE4EC9C.roa (raw, json)
Hash identifier: PpbJHQAZ2jolcBn/hQI2W8LzWItGRyUAr88HlEJapus=
Subject key identifier: 05:E1:63:8A:C2:6C:98:7F:93:8A:50:57:7C:57:BB:D9:98:5A:E2:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D53DC9D47E6A11F094AC37EBDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:42:56 +0000
ROA not before: Thu 21 Aug 2025 08:42:51 +0000
ROA not after: Sat 01 Nov 2025 08:42:51 +0000
asID: 149014
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93641 (0x16dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:42:51 2025 GMT
Not After : Nov 1 08:42:51 2025 GMT
Subject: CN=68a6dc10-f638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:d9:c2:3a:93:91:87:c3:7a:6a:c9:4c:54:
f7:22:f3:da:3e:c1:7c:f9:c2:7e:eb:e6:b2:7f:0f:
96:3a:b1:17:28:1f:07:ec:49:7f:fb:c4:12:f1:68:
82:c7:ce:8b:66:3a:e2:08:1e:f3:69:3b:7d:f4:dd:
0b:3d:b2:ef:3c:58:94:3f:07:80:3d:2c:df:11:bd:
ba:97:73:21:03:b7:13:3f:fe:48:30:7a:45:82:65:
09:a4:7d:89:f2:1d:4a:59:ac:e0:1b:a4:2c:4a:c7:
e6:f3:98:1a:94:aa:78:3a:30:f8:f3:b7:da:52:30:
2a:2d:6d:0f:54:a7:c0:92:c4:51:13:db:72:7e:3d:
c1:08:38:73:1f:fb:b1:f4:43:3a:d0:10:e0:0c:d5:
eb:02:76:62:1c:43:26:c4:05:d8:0e:38:ab:7c:bf:
cc:55:0c:9a:47:7b:67:4c:4b:ea:1f:33:45:87:0e:
93:63:47:b3:64:ac:28:5a:6b:05:c2:c9:21:e4:b1:
de:62:5d:6a:4c:d7:fd:b5:9b:d7:cb:8f:7b:9f:53:
90:98:6b:e4:ad:b7:7b:68:ca:6a:b4:0c:10:48:d4:
cb:20:4f:40:59:c5:2e:0e:42:c2:b5:de:09:ca:f3:
cf:ad:34:7a:3c:88:af:5d:97:62:95:7b:12:32:8d:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:63:8A:C2:6C:98:7F:93:8A:50:57:7C:57:BB:D9:98:5A:E2:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D53DC9D47E6A11F094AC37EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.116.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c3:c7:3f:61:0d:4a:78:b0:bd:27:0b:a6:7a:00:0f:63:d4:
f0:99:db:3c:ff:91:16:8b:80:84:11:50:a2:ba:63:17:b3:ff:
e6:0c:2b:1d:d4:40:47:56:d2:ec:5f:f2:a9:30:ab:33:88:a1:
6e:d0:66:96:ce:49:51:7e:1c:c1:6a:fc:f6:f4:b7:6b:96:5a:
59:78:9e:f0:be:9c:14:e2:cf:f3:83:c2:b5:3a:e5:cd:6f:31:
ad:f8:77:df:0c:64:e3:26:aa:3d:b8:25:7c:e5:cb:cd:ca:af:
d8:1a:33:8b:59:67:3b:de:aa:88:08:4f:b3:7d:b3:44:af:79:
aa:60:4b:3a:17:a3:25:3e:69:87:c6:29:de:1c:7f:ef:c6:53:
9e:59:e4:98:15:75:c7:28:33:44:ba:2b:81:76:b2:98:b7:6f:
a2:9e:79:de:8f:41:dc:fd:e9:0f:2a:13:6c:d4:10:41:72:ee:
20:59:a7:a0:5c:29:73:bf:e0:c9:06:d0:e8:60:27:d2:b8:56:
4e:87:56:43:db:36:bf:7d:2b:70:59:58:81:dc:4e:61:39:1b:
37:b1:63:af:52:17:9a:49:36:e0:a4:85:5c:9b:ac:e6:aa:da:
7b:53:f5:03:5d:7c:19:45:1d:58:74:2d:80:05:47:fd:ae:34:
da:01:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:24 2025 by rpki-client