Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C06134EB93A11F083146492DAE4EC9C.roa
File: 1C06134EB93A11F083146492DAE4EC9C.roa (raw, json)
Hash identifier: s2Sdk5FgyHW+Oe3aho0OByjRCmSAdpXL8g+OsY3o7IE=
Subject key identifier: 93:88:21:57:5D:C1:23:64:E0:C6:A6:7F:CA:DE:2F:47:C7:77:E8:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C06134EB93A11F083146492DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 04:52:48 +0000
ROA not before: Tue 04 Nov 2025 04:52:44 +0000
ROA not after: Tue 09 Dec 2025 04:52:44 +0000
asID: 200373
IP address blocks: 156.242.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99522 (0x184c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 04:52:44 2025 GMT
Not After : Dec 9 04:52:44 2025 GMT
Subject: CN=690986a0-6dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:9a:0f:b1:d2:25:a0:af:8f:32:b4:81:b1:
b0:80:9b:fc:4b:e4:be:77:a7:fe:c0:a2:e5:11:da:
e2:44:b6:fb:e2:d4:07:17:54:d7:f0:18:18:fb:f0:
92:54:44:b0:a0:98:e0:72:f8:40:0e:a5:48:37:11:
9d:6e:6b:9b:05:e9:f1:7b:94:9f:21:27:1b:b5:8b:
31:84:72:1b:09:dc:56:4c:eb:ff:72:19:91:55:e7:
88:ea:00:60:02:f4:67:60:a0:9d:17:3a:0b:57:93:
12:c6:44:8f:95:c3:4f:c4:36:64:36:30:f5:3b:49:
e1:0b:10:82:f4:19:28:87:d4:b9:20:5a:7d:e4:31:
5e:1f:45:39:04:51:d4:26:30:d0:2c:fa:e5:a2:f8:
22:b9:7e:92:a6:e2:9d:5f:83:f5:03:8f:c5:0e:84:
50:c8:93:81:15:c4:35:a9:81:10:67:29:41:48:e7:
bb:46:81:af:e5:74:d5:2c:3c:51:fc:da:b5:4f:c6:
5c:d6:75:43:5f:93:88:a1:57:44:cb:48:3a:da:53:
69:36:ed:2a:a9:f9:8f:fd:68:53:91:6b:b6:7e:b3:
1f:a6:19:2c:76:a4:13:ea:1c:99:f3:cd:b1:30:0c:
0a:96:49:5e:68:ca:be:de:47:2a:e4:6b:48:0d:df:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:21:57:5D:C1:23:64:E0:C6:A6:7F:CA:DE:2F:47:C7:77:E8:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C06134EB93A11F083146492DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f1:61:a3:70:46:33:bd:d7:5c:9e:3d:a5:79:74:d8:fa:ea:
c0:45:7b:5d:73:28:51:eb:0e:79:4b:3c:a6:a0:53:06:92:3c:
a4:fd:be:fd:a9:99:04:7c:08:c3:de:91:ae:8f:ea:e7:2b:02:
19:13:0d:86:48:e7:a3:4b:8c:27:73:a8:1b:f8:cc:69:56:59:
57:af:3d:9d:ca:92:ed:59:81:81:3f:c7:00:3f:f7:8c:6d:8d:
f7:90:0e:dd:0e:66:93:e3:57:a2:6d:97:64:3f:7c:9b:d6:21:
c2:66:b3:1e:8f:c4:cf:51:32:80:5b:8c:98:a5:ce:22:0b:65:
ee:16:26:06:ce:00:20:a0:f0:4f:93:e0:d6:de:a8:cd:f5:8e:
31:1e:34:8b:0c:20:ba:fd:0d:f8:42:4d:9d:d7:d7:37:a2:3d:
ce:95:ba:9c:6a:c7:7e:98:c6:f9:30:67:22:24:21:5e:a6:c4:
1b:01:66:cc:2f:59:73:44:eb:82:c1:49:39:db:88:f5:36:f7:
fb:0b:96:e4:c7:29:21:29:7c:b3:6d:bd:90:49:e0:61:de:63:
3f:a5:12:47:6e:3e:91:b9:51:9f:18:f6:80:fd:fe:68:ac:59:
8a:74:96:13:71:07:f9:ec:3d:28:96:42:47:37:b1:a2:7d:d8:
4d:17:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:31 2025 by rpki-client