Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DCF4C4B5C011F0B4402CADDAE4EC9C.roa
File: 65DCF4C4B5C011F0B4402CADDAE4EC9C.roa (raw, json)
Hash identifier: N2rZ1CCdNzNUS2Qe8PUuaeXC+wpXdfo7sr9JA1Q/R8A=
Subject key identifier: 03:9A:93:AD:24:2E:6D:ED:17:06:2F:8A:B0:69:16:72:D5:1A:C0:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018419
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DCF4C4B5C011F0B4402CADDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 18:44:03 +0000
ROA not before: Thu 30 Oct 2025 18:43:51 +0000
ROA not after: Wed 19 Nov 2025 18:43:51 +0000
asID: 6079
IP address blocks: 156.239.16.0/24 maxlen: 24
156.239.23.0/24 maxlen: 24
156.239.55.0/24 maxlen: 24
156.253.0.0/24 maxlen: 24
156.253.48.0/24 maxlen: 24
156.253.49.0/24 maxlen: 24
156.253.50.0/24 maxlen: 24
156.253.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99353 (0x18419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 18:43:51 2025 GMT
Not After : Nov 19 18:43:51 2025 GMT
Subject: CN=6903b1f3-7899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:cd:7a:bc:de:e5:12:a8:6c:ae:7e:93:b3:
64:84:5d:46:8c:01:5d:dd:f2:68:b0:da:ae:a2:24:
c7:49:72:80:85:f2:02:ce:d9:29:4b:98:db:a3:ee:
7d:ff:8e:fb:62:4c:a0:c0:fb:c9:16:68:8c:c3:de:
28:28:dd:64:f9:06:f7:64:c8:46:f3:32:e4:33:5f:
ca:6e:ee:b3:45:c2:25:d4:d7:30:ed:f7:ac:27:86:
5f:96:18:29:aa:aa:12:68:8f:46:33:ee:ef:9d:0b:
09:5a:11:9f:2a:bb:9c:68:11:30:93:ea:c7:84:cd:
30:fa:29:2d:fb:83:37:fc:a3:06:3d:98:60:bf:99:
0b:46:f4:98:53:1f:e7:ab:2e:14:63:78:e5:47:9b:
02:a8:14:a6:b2:4c:9d:38:fc:76:55:0e:c8:38:42:
0e:7e:d0:78:a4:bc:77:5d:69:e8:14:87:27:62:30:
13:d1:f5:bb:e1:a9:e7:60:6f:c8:0d:f7:40:7b:a2:
d6:09:c8:0d:db:4b:b0:1b:b9:c3:a5:fd:5d:e6:63:
d8:2b:d1:99:f3:40:ec:e4:f1:ea:8f:60:6a:21:0a:
44:4c:f0:6b:8e:01:45:e1:e8:24:f0:43:f8:77:49:
d5:4a:a9:f6:ae:3a:ed:74:6f:59:d5:12:0e:9d:0f:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:93:AD:24:2E:6D:ED:17:06:2F:8A:B0:69:16:72:D5:1A:C0:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DCF4C4B5C011F0B4402CADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.16.0/24
156.239.23.0/24
156.239.55.0/24
156.253.0.0/24
156.253.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:18:72:d4:c6:45:d3:d4:d5:3a:51:e2:80:c0:c3:cd:54:a7:
0d:3a:05:98:49:71:6c:98:e6:47:82:03:80:2c:3c:cc:19:d5:
0a:ec:61:91:93:37:17:11:f7:74:77:29:bd:8f:ef:a0:b5:86:
33:35:fb:f2:6f:c0:a9:db:dd:fd:af:82:fb:84:4b:aa:64:ba:
d8:ac:49:a3:bf:c0:c7:24:87:5f:ce:a3:3b:37:c6:eb:16:fe:
58:28:bb:51:8c:23:b4:d6:6b:40:83:41:79:4e:ac:00:d2:94:
49:28:c0:40:1b:8f:a1:d3:de:fb:90:ef:80:25:b5:65:23:ef:
de:0b:08:37:b3:59:72:2a:ef:69:d1:dd:cd:e6:d1:a2:9e:a8:
24:d9:d7:61:10:66:5b:e0:b8:30:24:f2:1d:af:d6:ea:45:08:
a7:40:55:95:f6:f4:72:9f:fa:87:2b:16:55:de:bb:91:cc:03:
2d:af:de:6f:75:ec:ac:d0:dd:17:17:62:0e:0f:a4:9f:22:9b:
4e:a6:41:1b:63:5d:4d:1a:e1:21:13:01:2b:fb:9a:0b:05:4a:
b0:7d:74:22:96:b4:73:79:79:11:98:cd:4e:f5:8d:e0:66:ae:
ad:c5:24:6f:bd:3a:69:76:23:4b:b7:3d:b1:29:89:85:83:97:
2f:b0:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:34 2025 by rpki-client