Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5DE791AB3D511F08116D0B1DAE4EC9C.roa
File: D5DE791AB3D511F08116D0B1DAE4EC9C.roa (raw, json)
Hash identifier: EOKPTXJa0IDCWpqHvgUopdbhqqY8Ia3B8FXV/Ge1Cgc=
Subject key identifier: F0:D6:18:18:A6:DC:0D:67:86:BD:D7:B3:1C:C0:C8:2D:AB:8F:A8:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01834F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5DE791AB3D511F08116D0B1DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:12:25 +0000
ROA not before: Tue 28 Oct 2025 08:12:20 +0000
ROA not after: Tue 02 Dec 2025 08:12:20 +0000
asID: 835
IP address blocks: 156.225.41.0/24 maxlen: 24
156.225.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99151 (0x1834f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 08:12:20 2025 GMT
Not After : Dec 2 08:12:20 2025 GMT
Subject: CN=69007ae9-a0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:cd:ec:e7:a9:28:c1:3d:2f:27:03:d7:32:
e8:53:1b:4b:41:3c:9f:2d:21:ef:a7:02:d2:58:ec:
f5:c5:05:ff:29:97:02:4c:cf:df:0b:a9:98:9d:45:
22:ae:f8:46:88:e6:78:fa:39:b5:eb:c3:03:26:d8:
fc:0e:1b:3b:ac:f6:0a:0e:d6:8d:19:37:6d:a2:0c:
a0:12:03:f7:14:95:c0:58:d8:87:e2:9d:8b:ea:fe:
0f:c4:14:19:de:43:16:e3:23:4f:40:01:d3:1d:43:
27:e7:a0:d3:24:54:fb:ee:0e:e0:4a:28:4c:5e:bb:
f1:a8:a7:6a:e3:4f:98:f2:f6:65:6f:e3:3d:95:88:
46:3e:aa:d7:23:b2:f2:63:1b:b8:a1:ad:5b:c1:c0:
b6:e6:b0:eb:c7:5f:47:59:b2:a2:de:c5:aa:a2:14:
e5:af:b2:aa:7a:96:97:5c:a3:04:34:69:48:f5:b1:
9d:56:66:f2:65:ec:18:97:6d:7f:2f:3a:dd:44:a7:
6f:76:9b:56:9c:95:99:91:c5:a9:6a:0e:5f:20:01:
79:78:40:68:f6:da:d8:89:e9:06:a9:07:9d:3c:8d:
1a:db:13:22:7b:7b:ff:90:97:28:11:e7:2d:98:04:
8d:de:31:ad:c8:60:2e:30:a3:e2:ac:54:ae:48:ef:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:18:18:A6:DC:0D:67:86:BD:D7:B3:1C:C0:C8:2D:AB:8F:A8:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5DE791AB3D511F08116D0B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
156.225.47.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a9:a0:2d:b1:94:f9:e1:3e:3d:5a:78:54:e9:88:e3:16:0c:
24:10:ef:ff:a7:54:43:8f:1b:5f:54:61:a7:6c:93:5f:e5:ff:
7a:b8:4a:10:92:40:06:6d:e1:31:16:4b:3e:24:b7:ee:0b:a3:
50:1f:ac:28:d0:cc:98:e6:ed:30:5a:d5:b6:82:14:4e:1c:a9:
2f:06:27:c9:8d:bd:b1:6d:b4:18:43:16:c8:5f:24:dd:6e:6c:
bc:bf:55:4c:15:10:6c:0e:ba:27:a5:20:34:ba:c6:7d:d2:1c:
14:32:4e:c9:71:4d:01:68:99:19:8c:76:2f:1c:f2:a0:c3:69:
1a:96:d4:33:2c:7e:7c:d7:9b:56:ca:ab:18:dd:0c:e3:d1:ca:
a1:9b:44:27:6b:97:7a:e7:48:b8:60:7d:ae:0d:c8:5e:5c:a4:
a6:75:b9:b6:5f:f1:b4:84:ae:0b:db:86:c7:3c:e0:84:a1:5b:
9f:d0:57:b4:56:95:40:ac:74:4f:e1:68:7e:9c:08:ac:26:c1:
d9:24:68:f4:00:d6:35:da:c7:92:40:07:53:29:4c:81:d5:3a:
81:b9:75:3a:46:56:01:a2:b3:24:f2:bc:fb:22:8b:b5:73:02:
87:a4:58:6a:5c:d6:69:d1:8b:df:e8:35:cf:ec:14:55:ab:5f:
2d:47:3a:50
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYNPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MDgxMjIwWhcNMjUxMjAyMDgxMjIwWjAYMRYw
FAYDVQQDEw02OTAwN2FlOS1hMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8jjN7OepKME9LycD1zLoUxtLQTyfLSHvpwLSWOz1xQX/KZcCTM/fC6mY
nUUirvhGiOZ4+jm168MDJtj8Dhs7rPYKDtaNGTdtogygEgP3FJXAWNiH4p2L6v4P
xBQZ3kMW4yNPQAHTHUMn56DTJFT77g7gSihMXrvxqKdq40+Y8vZlb+M9lYhGPqrX
I7LyYxu4oa1bwcC25rDrx19HWbKi3sWqohTlr7KqepaXXKMENGlI9bGdVmbyZewY
l21/LzrdRKdvdptWnJWZkcWpag5fIAF5eEBo9trYiekGqQedPI0a2xMie3v/kJco
EectmASN3jGtyGAuMKPirFSuSO8NRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDW
GBim3A1nhr3XsxzAyC2rj6hNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENURFNzkxQUIzRDUxMUYwODExNkQwQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOEpAwQAnOEvMA0GCSqGSIb3
DQEBCwUAA4IBAQAiqaAtsZT54T49WnhU6YjjFgwkEO//p1RDjxtfVGGnbJNf5f96
uEoQkkAGbeExFks+JLfuC6NQH6wo0MyY5u0wWtW2ghROHKkvBifJjb2xbbQYQxbI
XyTdbmy8v1VMFRBsDronpSA0usZ90hwUMk7JcU0BaJkZjHYvHPKgw2kaltQzLH58
15tWyqsY3Qzj0cqhm0Qna5d650i4YH2uDcheXKSmdbm2X/G0hK4L24bHPOCEoVuf
0Fe0VpVArHRP4Wh+nAisJsHZJGj0ANY12seSQAdTKUyB1TqBuXU6RlYBorMk8rz7
Iou1cwKHpFhqXNZp0Yvf6DXP7BRVq18tRzpQ
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:00 2025 by rpki-client