Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FA04500B8C911F0B8E2E4C8DAE4EC9C.roa
File: 5FA04500B8C911F0B8E2E4C8DAE4EC9C.roa (raw, json)
Hash identifier: +91EpzSaVeH/GBHuoE78rgYdl2pf0TEJI9ZPNxt5pwI=
Subject key identifier: 4A:D9:16:92:D5:AD:4F:5F:95:2D:57:9F:09:62:01:87:89:B9:55:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FA04500B8C911F0B8E2E4C8DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 15:25:48 +0000
ROA not before: Mon 03 Nov 2025 15:25:42 +0000
ROA not after: Thu 06 Nov 2025 15:25:42 +0000
asID: 133748
IP address blocks: 156.225.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99509 (0x184b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 15:25:42 2025 GMT
Not After : Nov 6 15:25:42 2025 GMT
Subject: CN=6908c97c-f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:05:cf:2c:65:23:6e:21:ea:03:2e:1a:a8:
ae:e7:8d:c5:c3:96:21:f1:61:b4:2d:c1:b0:d0:67:
88:95:8b:5c:fd:ff:83:5d:f7:5c:ac:60:9d:2c:75:
f0:e4:3e:f1:81:96:e6:06:29:42:61:87:c7:b9:9b:
e1:65:5d:4c:65:b4:d1:c7:67:95:f2:28:0d:d4:34:
df:e5:51:40:09:af:1b:f1:e0:9d:37:c8:a0:96:17:
c4:d9:de:46:00:76:b8:cc:b1:e7:e4:f3:8a:95:c4:
36:8e:9e:fb:fe:31:85:37:3d:86:83:63:de:68:68:
04:6f:36:8b:82:6a:fa:8b:f6:80:96:97:5e:e5:33:
b4:a3:5a:bd:5e:34:63:79:74:c8:0d:58:a9:c9:4d:
04:7b:88:08:82:d6:9f:41:78:44:8c:6e:90:2c:75:
ad:4b:e9:55:a5:b5:df:13:3a:de:e0:dc:0b:0a:0e:
7c:fb:83:17:40:88:a8:62:dc:4d:9d:9d:ff:a1:dc:
4e:b7:b9:ad:5b:db:82:b4:73:24:28:03:07:c7:a2:
a0:cc:10:f6:11:60:83:f1:d0:d7:28:46:2a:b6:80:
b9:78:71:c0:3f:c1:16:be:2b:93:ff:7c:7d:32:4c:
ae:0b:76:dc:7a:1b:0a:e6:cf:68:a8:72:a1:09:8e:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D9:16:92:D5:AD:4F:5F:95:2D:57:9F:09:62:01:87:89:B9:55:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FA04500B8C911F0B8E2E4C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3b:67:5a:b0:54:1c:b3:27:fd:07:bb:24:d2:42:05:2b:f6:
f6:89:13:93:a1:10:27:6d:b9:4a:df:d4:ac:66:e3:30:f8:ac:
0f:c5:b5:b4:98:f8:d0:c7:ed:2c:16:13:db:09:55:35:fe:ad:
f4:4d:a9:60:c7:ad:bc:bb:e2:98:ce:f1:ee:8b:23:8d:d5:d0:
34:57:bc:d1:49:5b:e2:9f:17:78:3d:cc:8a:93:be:a7:7e:34:
89:b3:de:96:f2:06:36:76:a7:2c:f1:ba:74:c6:84:5b:dd:2b:
56:93:b1:e4:be:ac:f3:2f:11:c2:78:79:1e:00:9b:e3:d6:00:
e3:42:f8:9b:8b:54:2d:4d:4b:68:0a:b1:d1:07:4c:3e:31:99:
dd:8a:20:46:1d:c6:82:4a:e0:db:f0:cc:5e:f6:9d:bf:c1:fb:
73:57:e5:9d:b8:b3:9f:ce:27:90:50:fb:80:78:4b:bd:cc:40:
71:be:c9:db:7f:04:8f:2d:d3:c0:58:83:3b:f8:af:b0:63:e0:
39:3a:8d:8d:49:51:e8:5a:8a:ac:37:e1:10:ae:df:b7:d4:7b:
02:ca:a6:4e:f9:30:dd:80:4b:1d:a1:92:9c:14:7b:a4:b9:ee:
f0:1c:f2:a3:18:cd:88:98:40:41:1f:a8:fc:2d:e8:51:aa:c9:
fe:44:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:04 2025 by rpki-client