Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD24002EAF2E11F0978AAACDDAE4EC9C.roa
File: DD24002EAF2E11F0978AAACDDAE4EC9C.roa (raw, json)
Hash identifier: WjEltm8R+eLPZoluMC3YO4kRVGatli1BimVnvYK5xeY=
Subject key identifier: 0E:81:0F:98:93:43:7F:CE:97:A7:B5:A2:07:08:8D:9A:7D:EF:CA:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018201
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD24002EAF2E11F0978AAACDDAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:07:07 +0000
ROA not before: Wed 22 Oct 2025 10:07:02 +0000
ROA not after: Sat 29 Nov 2025 10:07:02 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98817 (0x18201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 10:07:02 2025 GMT
Not After : Nov 29 10:07:02 2025 GMT
Subject: CN=68f8acca-ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:83:af:7a:58:98:18:39:95:ff:1b:1b:14:
cc:29:36:a7:24:11:1a:33:56:d1:7a:ff:7f:10:73:
6e:e1:23:47:22:04:2d:b0:c2:76:2b:fd:89:f0:a3:
0a:cc:f8:85:30:5d:de:d3:e3:36:10:c8:58:4f:1f:
81:42:56:bd:f7:10:3f:0a:23:af:91:6f:c0:18:87:
f6:81:54:1b:b2:d5:11:90:fa:6f:6f:bf:1d:e2:a4:
6d:24:62:56:2a:3c:31:d4:00:a3:13:97:ee:6d:2a:
de:90:4b:bb:a6:f5:4b:16:42:25:10:a8:af:59:b9:
6f:ee:15:c2:38:66:94:1a:8f:5e:0c:ea:0d:14:84:
b4:0d:3a:43:02:a4:94:13:8d:df:ad:b6:e7:47:70:
8b:97:cc:10:59:dd:f4:69:ad:7f:a9:d1:fa:d5:5f:
33:8b:73:30:e3:8c:5b:ce:b5:8d:92:c3:41:8c:ba:
86:d6:12:81:54:17:7d:96:9b:d7:a0:09:b5:52:94:
4f:e6:fa:78:9a:43:10:6e:99:93:57:65:5b:a7:18:
ba:04:88:5c:d5:09:50:bd:e2:a5:a8:c7:1d:c2:48:
0e:34:33:98:4d:b9:5e:b7:ff:47:ee:d8:04:ee:5a:
c7:8e:04:29:08:69:ad:10:2a:a2:ad:e3:ae:d9:1e:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:0F:98:93:43:7F:CE:97:A7:B5:A2:07:08:8D:9A:7D:EF:CA:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD24002EAF2E11F0978AAACDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8a:7d:46:68:14:6f:68:9b:f5:2b:76:00:a0:bb:b8:32:21:
24:a6:7f:64:82:45:31:0b:b3:0d:f5:07:f6:09:14:4e:44:72:
a6:30:1a:a3:3e:03:27:75:09:ac:21:01:0b:6d:8c:2c:1c:3a:
a1:a3:05:d6:27:63:16:fa:ba:23:c4:be:d3:88:04:e0:25:86:
9d:9b:fa:8c:73:85:d3:84:a6:c4:98:c1:48:4d:fd:30:62:b6:
c9:17:94:78:9e:33:d9:cc:1d:0b:00:32:73:4f:07:0e:4a:fb:
19:d8:c1:0b:9a:c2:7f:e0:1b:7e:d7:12:bf:c6:6f:5e:b9:b6:
d4:c4:34:4e:98:27:44:89:f2:d5:ef:16:56:31:da:63:1c:35:
82:88:2a:f0:d7:4e:98:3b:39:22:ae:2c:ba:3c:f9:3a:df:28:
0d:db:b0:63:a9:27:f6:ba:06:54:5f:35:a6:05:35:a0:83:b6:
b6:a1:7c:7b:6e:62:d6:79:3f:d7:0b:0a:24:58:07:ad:92:d5:
60:c0:2a:23:2e:ff:bb:10:8b:3b:cc:b8:61:f3:57:e4:0d:54:
0e:de:08:06:b5:6c:9d:19:50:9a:0c:4e:9a:39:a1:38:b4:0f:
8d:4f:92:45:e6:82:06:4c:95:66:e1:91:24:61:8a:ba:32:83:
a4:e9:3e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:21 2025 by rpki-client