Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B913B92B34611F099D2FB9ADAE4EC9C.roa
File: 4B913B92B34611F099D2FB9ADAE4EC9C.roa (raw, json)
Hash identifier: LLdP4EvYpqblX+GHcwYu8mTT72OClQeFSv3L7fXMm3c=
Subject key identifier: A7:DE:8F:8E:21:06:EF:62:93:E4:66:3F:04:DA:91:71:24:FA:88:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018310
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B913B92B34611F099D2FB9ADAE4EC9C.roa
Signing time: Mon 27 Oct 2025 15:04:55 +0000
ROA not before: Mon 27 Oct 2025 15:04:48 +0000
ROA not after: Sun 30 Nov 2025 15:04:48 +0000
asID: 398443
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99088 (0x18310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 15:04:48 2025 GMT
Not After : Nov 30 15:04:48 2025 GMT
Subject: CN=68ff8a17-f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:8f:84:cc:8c:a2:c8:34:17:7a:00:51:60:
e5:19:64:0d:7b:0b:bc:aa:bb:1b:d7:9b:41:93:0b:
ac:30:2a:11:d5:5e:2d:87:54:71:30:d0:62:bc:62:
f3:4f:0c:e5:ed:83:06:c7:d6:8b:0a:3a:32:70:c4:
f2:ea:f8:3a:8d:5b:32:e0:82:1a:5d:4f:6b:1b:18:
13:45:7e:25:1f:4f:dd:5a:9a:a7:12:a6:8f:bb:bf:
72:9a:52:f9:ba:7b:0a:49:88:f8:ef:fe:47:dc:30:
a9:ac:28:06:8c:4b:2e:51:04:1f:ae:6c:69:3e:e5:
f1:a4:f2:94:a0:ed:9b:84:8c:20:de:c9:32:5e:aa:
72:de:26:2b:01:d8:32:6b:45:cb:b5:4c:63:b4:7d:
73:e5:70:63:a2:12:d6:17:c3:7c:4a:4b:dc:b4:4b:
1a:ab:17:03:77:f4:9d:ae:36:d4:e1:35:33:38:0f:
96:e3:50:e7:9d:58:11:85:19:60:df:a9:ab:5d:e7:
00:c4:64:a9:fe:37:17:d6:8a:74:24:4b:b3:8a:9f:
9f:a7:47:84:18:d6:81:a5:5e:d4:ed:40:0f:c6:1c:
99:b3:20:67:dc:ab:12:61:53:f2:de:45:8d:60:87:
ce:a4:ee:6e:88:e4:45:b5:41:0a:34:4f:7e:58:6a:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:8F:8E:21:06:EF:62:93:E4:66:3F:04:DA:91:71:24:FA:88:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B913B92B34611F099D2FB9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
Signature Algorithm: sha256WithRSAEncryption
62:26:2b:d0:5c:7f:20:d5:32:25:83:e8:b7:6b:98:bd:53:84:
8d:62:ac:16:29:af:a4:69:62:26:ff:40:fb:6a:14:0a:23:1b:
f5:ac:59:8a:83:0f:ec:44:c2:5b:de:06:09:2d:43:b0:bf:24:
bf:ed:9a:93:c2:ed:15:dc:ac:b9:69:b0:2b:61:ea:7b:7e:62:
b9:9e:6a:49:53:2a:0a:76:1e:ed:a0:3a:18:d3:2d:86:64:33:
a6:b5:62:6e:3a:05:d2:1a:8b:e8:2b:61:07:f7:66:64:5f:ea:
e6:9e:bb:9a:02:06:f5:e4:a9:1d:07:fe:73:91:11:db:0d:c9:
b9:70:ea:9c:87:05:0d:68:64:e7:ad:4e:f1:93:77:64:28:89:
8f:8a:68:a2:fd:cc:19:72:d4:1f:8b:5d:b9:7a:22:db:ab:a5:
1d:2c:73:08:d6:54:8f:13:bf:01:6b:7d:3b:9c:2a:4b:8e:4f:
50:fe:a4:0f:8c:9c:e0:30:fb:af:7a:5e:52:61:5b:f4:6c:2b:
0c:94:d7:af:3f:ca:20:3c:0f:0e:f9:c7:84:08:35:bb:42:ac:
93:89:14:68:46:7f:c2:a8:25:1b:50:ab:93:84:c3:88:51:05:
66:df:b3:10:88:b5:17:e7:ac:ee:9d:cb:1e:0c:49:5d:ff:4f:
82:ca:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:52 2025 by rpki-client