Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FDF58E6B2F111F0A21B57EEDAE4EC9C.roa
File: 4FDF58E6B2F111F0A21B57EEDAE4EC9C.roa (raw, json)
Hash identifier: lgnZLpwSVj0BVwAnu97sQztvwKMyvDqeAh04aBIHToI=
Subject key identifier: D1:7A:EE:D0:6F:AE:B9:44:3A:B2:D0:B7:4C:2B:7A:E2:76:46:A6:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FDF58E6B2F111F0A21B57EEDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 04:56:35 +0000
ROA not before: Mon 27 Oct 2025 04:56:30 +0000
ROA not after: Sun 30 Nov 2025 04:56:30 +0000
asID: 32043
IP address blocks: 156.252.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98985 (0x182a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:56:30 2025 GMT
Not After : Nov 30 04:56:30 2025 GMT
Subject: CN=68fefb83-c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:b0:36:c0:47:fb:45:53:0c:16:a8:4e:eb:
6b:2b:58:81:e9:0f:a3:cf:f9:a9:07:ad:bf:39:61:
1c:71:a0:39:78:0d:a8:3f:80:20:c3:a2:02:a4:d7:
b4:e9:6b:f9:09:ff:fa:54:0e:aa:e6:d3:e2:de:99:
96:c8:51:6b:61:a5:6a:12:2d:06:55:90:96:d4:27:
5c:81:1e:4c:8b:b0:df:2a:cc:20:67:d1:8e:2b:bd:
3b:6b:90:70:3a:90:3b:d3:44:b4:36:5a:05:dc:c1:
84:1d:e0:44:28:50:9d:9f:ce:40:3f:ab:63:3b:42:
35:30:be:83:b0:55:0a:b9:c9:46:91:77:ff:cf:15:
a0:d8:0d:cf:6e:d6:21:b8:da:e5:07:17:4e:75:5a:
29:dd:00:cf:a2:35:e1:94:8f:ad:23:ef:43:fb:77:
48:32:79:c9:4b:15:60:11:90:2b:f5:4a:7b:d2:b2:
f3:bb:67:a9:9c:85:59:77:38:77:a6:5a:26:99:9f:
ea:ea:7c:dd:4b:38:7f:25:35:c8:b6:73:21:73:b8:
5e:4e:1a:be:74:fa:67:c6:cf:0a:ea:b8:64:ec:8b:
4b:7b:55:31:b3:d6:1a:bd:e7:cf:60:71:3d:fa:11:
1a:db:09:67:fc:ce:81:83:de:b1:76:e0:c2:9a:b9:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:EE:D0:6F:AE:B9:44:3A:B2:D0:B7:4C:2B:7A:E2:76:46:A6:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FDF58E6B2F111F0A21B57EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.10.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b6:61:dc:18:09:6e:37:40:0c:52:d3:a6:2d:0e:7c:60:9a:
9c:99:95:38:81:24:dd:02:5d:0b:54:9a:2d:c9:61:14:c0:5b:
d6:53:a2:37:9a:cd:6f:97:66:34:c1:3f:4b:96:fb:20:f7:44:
1e:53:a5:c1:7f:8d:08:e6:4f:58:ce:38:73:1e:cc:36:22:73:
bd:81:75:78:f5:db:df:f9:56:ec:b6:c0:6e:38:4c:6f:a1:0f:
51:9a:e3:38:1b:7a:55:d5:53:d1:54:f7:af:46:17:58:58:0e:
bb:31:1d:86:4b:53:0d:26:72:1e:20:7e:59:bd:db:2b:af:46:
dc:d9:4e:b1:5c:f0:72:e8:6d:32:33:08:2f:ba:ff:3d:62:dc:
18:80:15:89:96:ea:9a:92:9e:cb:1f:23:fd:6b:d9:9b:5b:b8:
c1:11:d8:ad:22:f7:93:5a:18:8f:67:ed:22:12:6b:c8:9f:fa:
56:78:4e:c7:fa:84:5e:d9:a2:7e:3c:4e:97:95:ec:7a:26:0e:
f6:96:bb:81:9b:42:a4:9e:5a:08:b5:89:ea:86:06:b8:4b:67:
0f:be:c2:4b:57:e4:e2:9f:e0:69:94:41:20:f0:0a:2a:df:bc:
c0:77:cf:e5:6a:ac:cf:4a:b3:b6:69:b1:18:92:d7:3b:f0:ae:
2e:66:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:10 2025 by rpki-client