Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/480329F8B91911F092D99EB5DAE4EC9C.roa
File: 480329F8B91911F092D99EB5DAE4EC9C.roa (raw, json)
Hash identifier: NrV1nr9lpt1wQed1EFP1Y0XBAvVbPgcVVEs7YhgKkaM=
Subject key identifier: 40:B0:64:D2:08:24:EC:8C:25:8B:10:2F:75:92:0E:11:EA:0E:AC:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/480329F8B91911F092D99EB5DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 00:57:48 +0000
ROA not before: Tue 04 Nov 2025 00:00:44 +0000
ROA not after: Tue 11 Nov 2025 00:00:44 +0000
asID: 137263
IP address blocks: 156.224.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99513 (0x184b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 00:00:44 2025 GMT
Not After : Nov 11 00:00:44 2025 GMT
Subject: CN=69094f8c-e141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:65:29:92:d7:c2:84:af:b6:61:fe:4e:11:
4b:f9:c4:1c:65:9a:57:fc:2c:94:3d:37:fc:d1:10:
19:87:af:ca:ea:75:36:c4:f4:e5:af:e9:72:4f:c2:
67:f1:6f:73:69:b4:2c:b0:62:f9:bd:f9:6b:61:eb:
fc:b1:2c:40:2b:a4:1f:6b:96:ff:36:36:bb:f6:8d:
9c:a4:c2:4d:59:fb:74:f7:f1:0e:73:b3:3e:e8:a7:
9d:ad:e8:df:18:03:5b:80:87:76:c1:ea:34:b7:8a:
ba:fb:cd:73:20:9d:ff:bf:d7:75:74:2a:aa:3e:ce:
ea:4b:c9:76:4b:5b:0a:1d:65:f4:72:92:6a:d1:7e:
8d:17:24:5a:aa:ea:ba:96:06:c7:9c:41:05:4c:9e:
f3:fd:be:0a:7b:44:d1:58:30:b7:5c:bb:c7:8b:89:
5b:11:89:60:24:e2:ad:32:a1:73:16:8a:55:8f:a2:
9a:6a:de:22:9d:75:00:e1:a4:2b:68:01:6d:11:e5:
d5:e8:ea:6a:02:d2:9c:de:09:ac:4b:f0:7a:ee:00:
01:b2:e9:9b:49:eb:1f:9c:ac:89:59:1d:e6:7e:94:
62:ec:2d:24:80:61:d0:9d:ef:c6:e8:b1:3e:f5:2e:
b1:11:35:54:ce:6c:51:ed:f5:b3:7f:32:f7:fc:e2:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:64:D2:08:24:EC:8C:25:8B:10:2F:75:92:0E:11:EA:0E:AC:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/480329F8B91911F092D99EB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.82.0/23
Signature Algorithm: sha256WithRSAEncryption
44:7c:d0:3c:1e:f2:ba:cc:14:41:d2:6a:67:21:e0:5c:67:27:
cb:43:36:6f:c0:0d:95:bf:d9:06:0e:77:87:19:6f:27:63:08:
98:51:b5:85:20:bd:77:b5:49:fc:12:4d:cc:a6:fa:aa:6d:f9:
54:4b:1f:56:8b:63:7e:bc:89:4a:e9:7c:61:f4:58:d9:59:ea:
3a:72:2c:35:99:61:13:4d:48:4a:66:d7:01:c8:1f:73:7d:2a:
95:eb:72:45:c0:55:70:43:61:08:de:97:d5:8a:9a:1a:6f:6a:
21:73:7f:42:7c:16:89:18:25:9c:3d:d5:00:0f:84:b6:aa:60:
54:22:38:5e:1b:22:83:8d:66:f9:b4:27:02:c4:b6:55:d7:20:
24:ff:d8:43:6a:fb:02:4e:75:b7:3c:f3:a0:59:9a:75:72:ef:
ba:3f:fc:30:3a:9a:b8:cc:0a:e0:1d:db:f0:f4:a4:1f:b6:93:
5e:11:24:c8:4c:01:2d:6e:40:d1:71:d1:89:b3:0a:15:1d:0d:
00:a5:99:a1:2a:59:de:1a:f8:06:29:27:06:42:1f:91:86:6e:
77:23:34:8f:95:5e:10:a5:71:79:97:eb:fc:8c:a1:fd:c7:b4:
d6:fc:c9:d8:d6:fc:77:e1:1f:c3:37:32:a8:18:c7:60:2c:64:
8b:fe:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:40 2025 by rpki-client