Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA34C31C76BC11F09C4109C2DAE4EC9C.roa
File: DA34C31C76BC11F09C4109C2DAE4EC9C.roa (raw, json)
Hash identifier: JnVjPA9yn09mUOusV0UppuHqVXrDPQ3+E8073MfzONg=
Subject key identifier: 78:AE:54:04:65:1A:CB:16:00:C5:E0:1D:8B:BE:6D:FB:9B:6C:7F:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA34C31C76BC11F09C4109C2DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 14:09:54 +0000
ROA not before: Mon 11 Aug 2025 14:09:49 +0000
ROA not after: Tue 16 Sep 2025 14:09:49 +0000
asID: 22773
IP address blocks: 156.238.171.0/24 maxlen: 24
156.238.189.0/24 maxlen: 24
156.239.56.0/24 maxlen: 24
156.239.149.0/24 maxlen: 24
156.239.150.0/24 maxlen: 24
156.239.151.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
156.239.153.0/24 maxlen: 24
156.242.0.0/24 maxlen: 24
156.242.1.0/24 maxlen: 24
156.242.54.0/24 maxlen: 24
156.242.55.0/24 maxlen: 24
156.242.56.0/24 maxlen: 24
156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92728 (0x16a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:09:49 2025 GMT
Not After : Sep 16 14:09:49 2025 GMT
Subject: CN=6899f9b2-7bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:33:bc:35:e4:b3:44:e1:72:1b:43:a7:ee:51:
6f:a6:12:98:fc:d9:fc:a8:c7:42:fa:32:bd:33:84:
70:b5:82:18:a3:00:55:39:3b:3d:ab:a8:db:5b:02:
d0:c4:bc:ff:12:4a:64:c8:32:9a:ae:92:14:3b:a9:
32:9b:42:dc:71:1f:82:34:ff:e9:8a:c5:78:f6:fe:
b5:bf:58:dc:12:25:5d:60:30:b8:16:34:10:7a:09:
42:71:ff:44:31:e2:b6:62:b4:71:9d:1f:39:d2:51:
a3:67:9c:2e:61:91:74:64:01:f8:09:97:7e:37:de:
6d:d9:a4:08:fc:b6:ab:e0:06:4a:ff:96:6b:ac:0b:
bd:31:cb:88:c6:42:85:05:0f:d1:40:c4:f9:d0:e7:
7e:27:03:d9:ae:3b:14:05:01:4f:04:90:cc:be:1a:
44:b7:27:63:41:62:1c:85:0c:57:ae:5d:fc:61:e1:
5a:2d:e8:d1:ce:8f:fb:68:be:10:c9:0e:a1:dd:a3:
8e:a2:18:9f:80:ff:51:73:c7:29:63:1a:6f:b0:59:
93:a6:a3:a9:e6:2f:85:6f:b1:9f:c5:57:7b:7d:39:
ae:3c:65:0d:8e:59:34:b8:78:cb:c1:83:3d:6e:84:
f2:e7:61:96:87:46:02:b6:95:d7:34:74:4b:ae:ee:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:54:04:65:1A:CB:16:00:C5:E0:1D:8B:BE:6D:FB:9B:6C:7F:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA34C31C76BC11F09C4109C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.171.0/24
156.238.189.0/24
156.239.56.0/24
156.239.149.0-156.239.153.255
156.242.0.0/23
156.242.54.0-156.242.63.255
Signature Algorithm: sha256WithRSAEncryption
63:c5:0a:78:dc:c1:13:b2:25:3b:8e:c6:49:d3:4c:c5:fc:c5:
59:f4:20:a7:09:03:78:69:fe:45:bd:c9:2c:4d:d5:33:ce:60:
3e:3b:93:87:30:2d:0e:95:c6:89:4d:8c:cd:57:71:03:4b:ef:
ae:1c:c5:e2:f0:b8:0a:81:37:ba:15:90:33:28:c3:d0:5b:6b:
9f:e0:f0:ed:09:74:72:9b:75:e0:7f:be:52:01:5b:aa:53:72:
0a:9c:d7:94:b7:84:64:ee:2e:24:c0:01:b8:77:eb:64:7d:72:
a6:c5:dc:30:25:2a:9c:1a:a0:05:0e:05:c9:4c:e3:cf:92:25:
c8:6e:a4:a6:75:f9:cf:5d:41:e9:3d:03:d1:20:e2:8a:a9:3e:
7d:8d:5e:3d:6f:c6:ac:53:bc:3c:49:aa:2d:57:28:0f:f3:f3:
0e:b2:2a:59:2b:f4:1b:c8:8c:ae:8a:79:a9:da:33:80:df:fe:
4a:f9:07:d0:3b:bf:32:04:71:ab:83:e7:49:a5:d7:b6:81:1b:
9a:f7:16:6f:b3:1f:1e:0f:c5:c0:d6:8f:8e:2e:79:42:08:20:
09:da:1f:ef:67:98:24:9d:ea:c3:b9:85:b4:bc:8d:49:ce:66:
f7:37:42:c8:b3:90:c0:ef:89:d6:9a:93:bf:5a:8d:aa:48:3d:
e1:4b:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:35 2025 by rpki-client