Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFBAC8B72411F0AD96B0F3DAE4EC9C.roa
File: C6BFBAC8B72411F0AD96B0F3DAE4EC9C.roa (raw, json)
Hash identifier: oPAZB4rQoyxWoQeqWKZnA/L5A/VwSD8qOWBwR7X5XBo=
Subject key identifier: 0E:22:0E:C5:B0:40:B8:FD:6E:37:64:25:0B:C1:BE:2C:D7:BD:BC:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01843B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFBAC8B72411F0AD96B0F3DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 13:15:03 +0000
ROA not before: Sat 01 Nov 2025 13:14:58 +0000
ROA not after: Mon 10 Nov 2025 13:14:58 +0000
asID: 139057
IP address blocks: 156.238.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99387 (0x1843b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 13:14:58 2025 GMT
Not After : Nov 10 13:14:58 2025 GMT
Subject: CN=690607d7-1075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:0e:d9:ef:e5:bc:16:94:a2:5a:6d:dd:a2:
fd:ad:8a:12:9d:0c:9d:dd:12:cb:f1:16:60:ae:29:
05:5f:c5:97:58:fb:a7:78:47:70:65:65:d6:df:7a:
0a:c1:29:1c:fb:60:ee:63:09:3e:f0:e7:ad:7c:31:
dd:03:9d:9d:8d:29:e6:d1:e2:cd:86:cd:0c:e1:65:
f8:d0:03:f7:46:dd:65:54:56:41:73:9f:5a:d2:e4:
98:0a:89:23:81:e9:f1:33:63:f1:cd:f2:20:f1:06:
d8:3e:ce:d3:81:ee:5f:4d:3e:a4:e6:39:0c:93:92:
ac:78:ce:03:aa:9d:87:95:39:6b:b8:a1:f7:be:a1:
b2:99:9d:ad:4a:1b:89:71:e8:d4:6a:66:1b:48:e0:
21:78:6c:e3:9f:6b:95:fa:e4:3e:e1:d7:7c:cb:28:
b1:ce:eb:5a:7b:89:d9:d2:ec:9f:3e:73:bb:de:8f:
59:d7:ec:12:2f:76:15:26:74:1f:44:23:d9:06:ee:
3a:ce:08:eb:15:4e:a9:dc:5f:e6:ed:b5:67:95:1b:
5f:8c:90:d4:1e:85:7b:4d:ee:98:e7:fd:a6:0e:ff:
ff:0f:2f:db:91:df:a0:d6:2c:7c:dc:e0:e3:06:37:
4f:69:f5:23:cd:5e:98:1c:9a:f8:e3:55:94:26:46:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:0E:C5:B0:40:B8:FD:6E:37:64:25:0B:C1:BE:2C:D7:BD:BC:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFBAC8B72411F0AD96B0F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.128.0/21
Signature Algorithm: sha256WithRSAEncryption
25:1b:27:1e:d9:74:97:4b:29:b7:c5:cd:86:c1:c5:5e:5d:09:
1b:9f:08:b3:84:ae:b2:48:3f:25:c4:4a:5c:9e:0a:56:4f:d3:
5e:c8:e4:0b:db:e9:f9:29:4a:7b:bf:74:a0:43:0b:c6:d6:8c:
9f:51:16:5f:92:94:40:9b:0d:31:ea:3b:8f:bb:e9:4f:d7:8b:
0f:16:71:00:89:fb:63:2c:c3:c3:02:9f:e0:25:14:86:a4:2c:
71:c6:87:9e:e6:7b:e6:d8:fe:ef:cf:2f:ab:be:35:5a:bd:1d:
1f:f6:b3:78:63:54:1e:d0:c5:d9:44:f5:37:39:63:78:f0:4d:
9b:c0:36:bf:be:9c:83:dc:f4:51:b7:ac:73:b1:b7:d1:1c:98:
8e:7c:8c:8f:20:40:36:c6:20:7a:04:28:98:f3:13:a8:1c:b2:
66:63:d7:69:62:c1:5a:32:be:61:63:32:90:4d:b4:0e:a9:2a:
72:57:ca:33:9a:0b:3c:89:dd:99:8b:70:58:b2:63:bc:20:cf:
89:0c:90:07:94:a0:c8:bd:1d:d3:74:a3:b7:bc:73:41:ec:f1:
f2:f4:ed:43:a4:72:05:6b:7c:ac:1c:40:16:7d:3d:1d:dc:33:
14:5a:8f:7f:80:48:3d:52:d0:f3:c5:9f:4e:e8:a5:b9:a6:96:
9a:24:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:45 2025 by rpki-client