Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40F5B004B3D811F0BCAAA4BEDAE4EC9C.roa
File: 40F5B004B3D811F0BCAAA4BEDAE4EC9C.roa (raw, json)
Hash identifier: ejveEroPWWqY0fsByZhsp8LNufbeRoplDKhfNso9B4o=
Subject key identifier: A9:9F:C7:9E:85:69:00:5B:F9:D8:C2:1E:75:22:94:F4:97:29:9A:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018357
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40F5B004B3D811F0BCAAA4BEDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:29:43 +0000
ROA not before: Tue 28 Oct 2025 08:29:39 +0000
ROA not after: Tue 02 Dec 2025 08:29:39 +0000
asID: 401903
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99159 (0x18357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 08:29:39 2025 GMT
Not After : Dec 2 08:29:39 2025 GMT
Subject: CN=69007ef7-6c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:83:5b:05:3e:91:ab:f0:66:24:e8:00:80:
1e:b9:64:58:65:f2:77:fb:6f:15:93:42:a3:dd:69:
4d:6f:9b:04:47:8a:35:f5:e4:a9:84:d6:c7:c9:30:
00:21:e6:c9:9e:24:16:b7:e6:af:c1:8b:e2:a1:7e:
8b:7b:4b:39:f1:2d:e7:97:06:98:41:89:dc:f5:f1:
76:e8:0c:87:8a:f7:95:98:ae:1b:23:fd:b1:81:1d:
43:f1:9b:ed:48:fe:63:61:ab:d6:9b:a1:05:1a:9b:
09:5a:ea:bf:bb:ce:fb:a8:73:0d:e3:1e:09:da:17:
fd:92:41:86:06:8e:76:51:64:d6:60:d7:d8:9d:1e:
6b:27:c0:55:a2:01:6b:f9:33:c9:f9:8b:bd:30:b9:
73:f6:1b:6b:b5:37:ff:a0:11:79:ed:79:05:75:1d:
a1:32:2f:b8:2c:e4:49:f1:a4:a9:ba:46:65:4f:12:
c9:29:6a:b9:ec:32:f9:61:c0:87:b9:26:bd:9d:ec:
30:f9:4d:0d:f6:26:0c:c5:56:f5:07:54:b9:5b:11:
eb:1c:96:c4:b2:8e:df:9b:16:6d:0f:a4:a4:7d:a5:
f4:ce:c0:39:5b:13:22:35:0b:d1:bb:56:64:13:59:
71:12:c8:d5:c5:6d:80:2c:24:04:7a:72:51:27:78:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:C7:9E:85:69:00:5B:F9:D8:C2:1E:75:22:94:F4:97:29:9A:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40F5B004B3D811F0BCAAA4BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:aa:98:d2:92:df:03:2a:f2:9f:ce:41:69:3f:e3:f8:9c:a2:
82:cf:29:3f:c6:af:42:43:eb:c8:4e:68:92:39:18:0e:83:b9:
ac:91:45:53:c7:e3:c2:f3:47:63:bb:26:57:8b:e0:00:7b:2c:
a1:43:e0:0b:b2:7d:3f:95:e7:31:ad:7b:6c:a9:59:f2:65:78:
55:ff:16:01:25:f2:f7:88:7b:e6:b0:5d:6a:5b:f1:78:26:13:
a1:61:b0:bc:bc:61:75:32:c7:d5:3d:0f:16:82:19:f7:f5:eb:
f0:77:38:e2:4f:05:74:6c:74:c3:04:7b:fb:15:09:34:54:69:
75:bd:65:a9:9d:e6:74:1e:93:57:b9:d5:b7:88:4f:8a:d0:1e:
f6:3b:a9:d9:c4:e5:72:e6:79:40:d2:a0:5b:b9:2e:4e:b8:24:
3f:f2:a1:93:34:0d:1c:be:d9:10:e9:27:41:2d:00:d1:fb:4f:
e6:62:2a:62:bd:14:4d:fa:da:97:19:85:29:d3:13:d9:fc:b7:
60:8f:61:a3:33:cb:17:c4:fa:bf:0c:32:72:5a:cb:83:fc:47:
27:ca:55:da:ab:ab:65:f3:31:8b:4a:d2:35:3f:f1:d9:b3:ca:
45:88:8a:fe:0c:cf:fb:6e:e6:ca:72:05:6c:88:00:77:28:aa:
55:e7:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:28 2025 by rpki-client