Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9BB09D3611F0AE6F989EDAE4EC9C.roa
File: FA4D9BB09D3611F0AE6F989EDAE4EC9C.roa (raw, json)
Hash identifier: OLRHIptZD18umCo2j13eIIqOMCZwY7rMNGlNzRFKUQY=
Subject key identifier: C1:0D:74:D3:6E:A3:5B:36:36:29:27:04:D8:DB:49:D9:D9:6C:38:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9BB09D3611F0AE6F989EDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 13:19:51 +0000
ROA not before: Mon 29 Sep 2025 13:19:46 +0000
ROA not after: Tue 28 Oct 2025 13:19:46 +0000
asID: 44559
IP address blocks: 156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.174.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97713 (0x17db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 13:19:46 2025 GMT
Not After : Oct 28 13:19:46 2025 GMT
Subject: CN=68da8776-f977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:1b:fa:83:8c:b4:dc:fa:51:52:45:a1:b9:
e0:3f:34:f6:dd:65:77:29:2a:3e:ac:3d:00:7c:75:
20:dd:4e:a2:24:d3:66:77:eb:9e:a5:84:60:72:8e:
23:2f:3d:c4:da:e3:f5:5e:4e:f1:15:4e:c2:01:55:
a4:d8:99:39:d9:c9:d2:f7:0e:80:8e:37:ca:94:f7:
de:54:17:72:26:c9:8d:4b:3d:d7:cc:1b:61:c9:cf:
a4:ea:81:33:05:93:37:99:e5:28:fc:d1:ad:b3:38:
2c:f6:f9:70:06:58:31:f0:49:78:e7:97:c5:22:d8:
31:37:a4:8a:0b:4e:38:1e:f4:da:08:50:10:f0:87:
d8:f8:38:8d:9e:d9:cd:94:b9:3b:e8:24:fc:87:76:
1b:ac:7d:b6:3e:64:ad:2e:d9:50:5d:5e:40:89:a1:
49:a3:e0:cf:a0:f7:73:93:b6:8a:b4:00:73:d8:11:
27:e3:e9:77:f5:01:aa:c1:0d:c1:40:83:4e:39:e9:
65:db:20:b1:36:d6:91:ba:09:24:f0:b9:30:98:2b:
84:dd:a3:74:74:cb:e0:22:6d:b4:07:7c:f7:1a:b9:
57:89:9b:44:9c:a6:ec:a7:fd:7e:f8:78:83:14:a6:
27:1b:3a:d8:9c:04:f9:02:a1:12:d4:7b:4d:31:e5:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0D:74:D3:6E:A3:5B:36:36:29:27:04:D8:DB:49:D9:D9:6C:38:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9BB09D3611F0AE6F989EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.154.0-156.246.160.255
156.246.166.0-156.246.178.255
Signature Algorithm: sha256WithRSAEncryption
48:1a:82:98:ae:5f:51:5d:25:da:52:ea:60:73:b3:85:5f:f4:
90:c2:b7:e3:ef:89:0d:bc:89:cf:74:ad:d4:a2:99:ed:d4:bd:
b1:5c:52:9f:e5:2d:00:4f:1f:86:2e:72:4b:70:bc:a3:8c:0c:
9d:19:d8:d6:f3:3e:79:7a:99:31:a1:e3:06:86:b4:46:a9:71:
54:9e:6f:1d:61:f6:ea:d3:f2:87:59:78:45:5a:77:87:dd:04:
07:42:8d:b6:37:a4:8a:64:31:2b:00:7b:02:9d:aa:98:15:6c:
00:4b:b2:f6:5c:72:a8:52:ba:11:50:d8:cd:dc:ea:2f:86:b8:
85:2f:e7:2f:54:34:51:73:a3:c7:be:ad:39:83:79:0a:31:ac:
14:d0:99:50:be:b7:6d:04:e2:3c:65:7e:19:fd:82:d6:73:d2:
68:6a:ec:9b:f3:6f:7c:59:a6:89:14:41:9f:a7:03:e4:0a:3c:
b3:ee:93:82:8f:d8:43:be:f1:ee:d9:c2:bb:29:00:dd:65:eb:
fd:b4:35:a2:5b:b2:0e:d0:79:b3:c7:c4:7b:c3:cc:51:a4:40:
d0:a7:90:57:29:f5:d2:21:4f:5f:20:72:c1:07:ba:3a:f0:eb:
79:87:2d:d3:32:68:4e:12:ce:b1:5a:fe:36:d7:e7:5f:ac:4b:
f7:f3:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:22 2025 by rpki-client