Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBDFC6C67C611F0A9C77AD1DAE4EC9C.roa
File: EFBDFC6C67C611F0A9C77AD1DAE4EC9C.roa (raw, json)
Hash identifier: OIWD07yhqWfzpkkfNd0Ly5+VtzjV0TrfS9bHs0u4Df4=
Subject key identifier: 6F:FD:C1:52:AE:38:E4:B5:3A:08:C5:5E:7E:B8:86:67:12:EE:EA:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBDFC6C67C611F0A9C77AD1DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:14:18 +0000
ROA not before: Wed 23 Jul 2025 13:14:10 +0000
ROA not after: Fri 29 Aug 2025 13:14:10 +0000
asID: 20473
IP address blocks: 156.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91902 (0x166fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 13:14:10 2025 GMT
Not After : Aug 29 13:14:10 2025 GMT
Subject: CN=6880e02a-f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:13:23:08:f1:32:b0:b0:8a:38:6c:43:7c:
a2:06:ab:c7:4f:44:92:8c:85:c0:48:99:e5:60:d8:
d0:d2:f3:e8:01:6d:be:14:64:5d:60:0a:97:f3:70:
40:69:70:0b:41:2f:45:6a:f8:2c:84:3f:ac:74:f9:
41:1c:52:5b:fb:de:42:32:a2:37:42:56:23:12:0b:
52:6a:d6:b9:57:11:85:ad:0f:fc:b5:c8:fd:0f:c4:
76:0c:07:fe:f6:e8:8c:21:bf:bf:f9:27:8e:f3:e6:
f0:13:df:b8:ab:8a:dd:63:2a:36:af:00:e4:aa:54:
93:31:b1:49:66:d2:f6:cd:8d:3e:04:be:b5:f4:0f:
96:e4:b4:14:db:0a:7b:db:5c:3a:82:df:16:81:42:
02:45:ef:62:8c:5b:e7:b9:fc:df:9a:cb:21:8c:8c:
8d:0b:df:01:7e:0f:32:8a:a2:1e:0b:8b:89:2f:68:
05:7f:fa:b0:b9:fa:d8:47:52:92:87:69:9a:49:25:
67:d9:7e:89:0b:bf:34:c6:71:bd:e0:03:18:d0:d0:
eb:6b:29:b3:bf:78:a9:47:84:0f:13:1d:76:e6:6a:
15:7b:61:11:ff:f8:66:37:1d:3c:60:15:43:61:f3:
45:c1:8d:7f:f2:83:af:a7:aa:7a:15:ad:17:62:14:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:C1:52:AE:38:E4:B5:3A:08:C5:5E:7E:B8:86:67:12:EE:EA:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBDFC6C67C611F0A9C77AD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
01:52:4b:95:fa:c3:61:64:92:e9:29:85:d1:5c:ad:54:ef:5c:
6d:41:8c:c1:48:6c:52:9e:ad:e1:ac:59:f6:cc:cc:61:91:8a:
9a:55:ed:49:18:0c:9b:51:f8:fc:0e:53:8e:d3:45:99:a1:b4:
d9:78:44:c6:18:d7:f9:5c:78:66:6a:f9:f9:06:cd:27:9e:1a:
36:17:8c:44:c8:a5:81:f8:bb:61:7f:d8:6a:89:d4:45:b7:a6:
16:7a:f9:20:6a:e7:2a:a0:5b:7f:04:f4:ee:45:7b:6f:3f:e9:
5d:df:ae:3e:a2:51:f5:01:dc:05:18:65:8c:64:c1:07:21:35:
d6:17:89:ba:ea:dd:14:c6:a7:e2:47:ef:ad:07:94:3e:02:ff:
12:ad:a9:38:57:3d:71:a5:49:f5:c8:2b:a1:e7:c2:77:09:b2:
94:f1:e9:60:95:2e:0d:ab:71:43:6e:ce:cc:ff:90:55:c0:7c:
22:39:a6:da:23:d9:d4:1d:a6:d9:98:b6:ed:04:f5:97:ce:0e:
5f:74:05:1d:83:2e:62:e7:e8:c5:0c:e8:b2:1d:23:91:37:ab:
bd:e5:6a:ce:36:bb:20:5f:56:d9:ff:1d:e1:d3:f0:78:2b:0d:
8d:cf:ba:4d:3c:ca:99:7f:2e:2d:d1:72:30:9e:7f:10:d9:48:
7c:7c:55:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWb+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzIzMTMxNDEwWhcNMjUwODI5MTMxNDEwWjAYMRYw
FAYDVQQDEw02ODgwZTAyYS1mMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3N4TIwjxMrCwijhsQ3yiBqvHT0SSjIXASJnlYNjQ0vPoAW2+FGRdYAqX
83BAaXALQS9FavgshD+sdPlBHFJb+95CMqI3QlYjEgtSata5VxGFrQ/8tcj9D8R2
DAf+9uiMIb+/+SeO8+bwE9+4q4rdYyo2rwDkqlSTMbFJZtL2zY0+BL619A+W5LQU
2wp721w6gt8WgUICRe9ijFvnufzfmsshjIyNC98Bfg8yiqIeC4uJL2gFf/qwufrY
R1KSh2maSSVn2X6JC780xnG94AMY0NDraymzv3ipR4QPEx125moVe2ER//hmNx08
YBVDYfNFwY1/8oOvp6p6Fa0XYhQezwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG/9
wVKuOOS1OgjFXn64hmcS7ur7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRkJERkM2QzY3QzYxMUYwQTlDNzdBRDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOSpMA0GCSqGSIb3DQEBCwUA
A4IBAQABUkuV+sNhZJLpKYXRXK1U71xtQYzBSGxSnq3hrFn2zMxhkYqaVe1JGAyb
Ufj8DlOO00WZobTZeETGGNf5XHhmavn5Bs0nnho2F4xEyKWB+Lthf9hqidRFt6YW
evkgaucqoFt/BPTuRXtvP+ld364+olH1AdwFGGWMZMEHITXWF4m66t0UxqfiR++t
B5Q+Av8Srak4Vz1xpUn1yCuh58J3CbKU8elglS4Nq3FDbs7M/5BVwHwiOabaI9nU
HabZmLbtBPWXzg5fdAUdgy5i5+jFDOiyHSORN6u95WrONrsgX1bZ/x3h0/B4Kw2N
z7pNPMqZfy4t0XIwnn8Q2Uh8fFV+
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:22 2025 by rpki-client