Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0869639EB4F911F09C15F5CADAE4EC9C.roa
File: 0869639EB4F911F09C15F5CADAE4EC9C.roa (raw, json)
Hash identifier: NQNlOwgf9SikhPhqOhmrL07Be4AVOZ5h5GG2ByEwM6k=
Subject key identifier: 69:7D:70:CE:FA:75:66:E5:34:C1:2F:AC:90:85:81:08:D0:D9:94:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0869639EB4F911F09C15F5CADAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:56:55 +0000
ROA not before: Wed 29 Oct 2025 18:56:47 +0000
ROA not after: Wed 05 Nov 2025 18:56:47 +0000
asID: 135377
IP address blocks: 156.229.28.0/24 maxlen: 24
156.229.50.0/24 maxlen: 24
156.229.54.0/24 maxlen: 24
156.229.236.0/24 maxlen: 24
156.229.247.0/24 maxlen: 24
156.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Nov 2025 18:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99306 (0x183ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 18:56:47 2025 GMT
Not After : Nov 5 18:56:47 2025 GMT
Subject: CN=69026377-82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:32:22:29:d9:19:25:dc:72:f1:d4:7f:ff:
43:b5:b2:15:8d:6f:ef:62:d3:bb:8a:36:64:3c:88:
a3:e1:42:10:f2:9f:ad:1d:89:a5:51:d4:ae:ef:8d:
a1:42:a9:c9:06:58:d0:9b:4c:66:5b:52:9c:36:a9:
10:8d:86:1b:5e:d7:bd:7a:7b:9b:1a:33:54:d1:36:
19:11:46:94:db:c3:9b:7e:b4:f8:cc:f2:04:a5:74:
f9:02:43:4b:38:79:53:ba:90:17:bd:e0:37:8f:e3:
13:1e:f7:7e:ba:7d:f0:c2:5e:47:c5:f1:8a:0d:f0:
ac:60:93:5d:dd:e2:91:bc:22:20:03:6c:f5:79:83:
c0:b9:ca:3c:20:3b:79:bd:22:81:89:71:cc:46:ab:
34:35:91:6d:31:40:2a:68:7f:fe:f2:a6:9c:7f:b2:
d9:88:59:83:a2:db:68:5f:79:b7:19:10:78:4c:17:
bd:32:dd:aa:76:a1:a5:b9:01:54:1a:e1:4e:a2:a2:
11:a8:fb:52:ee:41:28:39:70:e5:9c:32:e0:51:b0:
49:70:d0:70:c0:e6:3e:36:0b:0a:ec:06:02:71:0b:
f0:cf:b8:fd:a0:f1:fb:fa:e9:8a:6c:11:d3:13:df:
dc:5c:56:17:8e:c7:61:bb:ef:83:0b:51:11:a3:e1:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7D:70:CE:FA:75:66:E5:34:C1:2F:AC:90:85:81:08:D0:D9:94:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0869639EB4F911F09C15F5CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.28.0/24
156.229.50.0/24
156.229.54.0/24
156.229.236.0/24
156.229.247.0/24
156.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ec:00:38:b0:8e:d7:77:41:3b:3d:2b:41:69:e0:2d:32:52:
22:4f:f7:81:d3:66:b9:26:a0:c6:5d:cd:07:1f:4d:d5:a0:51:
e4:18:82:f0:66:70:05:04:a5:26:43:a8:7f:a6:5c:f6:91:59:
f2:15:2c:97:95:ae:a9:89:06:8d:bb:9e:39:66:dd:1d:d4:41:
5b:3f:a7:22:fc:78:9e:e7:cf:5f:66:6d:18:9a:21:15:1b:3f:
e9:81:3b:1a:04:b2:e4:46:fe:63:3f:31:bb:cd:7d:21:11:98:
28:cf:df:18:cf:90:10:d0:29:8c:0b:d6:4a:52:5b:3e:42:e6:
82:15:b5:ae:1e:17:00:52:32:01:05:ad:5f:5d:7f:c4:bf:cf:
3f:07:78:9b:a9:a3:2c:90:0b:79:6c:2b:4b:ae:8c:89:42:d8:
ac:5f:dc:17:28:09:30:c6:f1:b3:3a:23:2e:20:37:8d:ad:10:
93:a3:b1:72:dd:48:d5:9c:9b:6f:95:e5:a2:65:16:99:eb:e1:
33:83:cc:dc:63:f7:3e:e2:e8:38:de:84:e1:81:aa:f9:0f:81:
01:69:4c:e9:58:fe:22:02:4c:35:aa:37:b5:19:ee:55:e0:c6:
4c:2f:93:20:06:f4:bf:ed:ee:a0:63:01:f1:20:43:04:84:3b:
6c:cd:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:12 2025 by rpki-client