Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBE9B60CB36611F08A14B5E7DAE4EC9C.roa
File: FBE9B60CB36611F08A14B5E7DAE4EC9C.roa (raw, json)
Hash identifier: rH0QXMuAwOPVr/QsUKaMC89Zjc9W9MdVLupKolSmUSU=
Subject key identifier: D4:A4:0B:44:98:4B:C9:71:CC:C8:62:04:56:D0:DD:A2:36:F7:40:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01831A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBE9B60CB36611F08A14B5E7DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:58:56 +0000
ROA not before: Mon 27 Oct 2025 18:58:49 +0000
ROA not after: Sat 29 Nov 2025 18:58:49 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99098 (0x1831a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 18:58:49 2025 GMT
Not After : Nov 29 18:58:49 2025 GMT
Subject: CN=68ffc0ef-d05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:93:23:1b:fd:42:96:46:eb:9a:3d:2d:d3:
f0:ae:2b:21:2f:eb:2e:25:55:d1:87:b3:1b:97:4e:
89:1e:18:dc:5a:20:84:2a:b7:5d:c6:4f:2a:bd:49:
f5:55:5b:7c:a9:d5:95:40:00:2b:18:f5:c4:8a:41:
74:12:fa:01:f7:a4:bb:f6:ea:49:13:3e:8e:d2:36:
65:a7:f6:00:98:a8:49:3e:62:76:87:79:b6:27:f5:
9b:90:26:4a:91:21:50:b6:d0:b6:c9:9c:ae:29:c5:
4c:a4:75:3c:79:1f:c3:5b:3b:a1:e4:bb:0f:1a:f4:
f4:8f:f6:7f:31:4b:68:ff:92:2a:61:7c:44:be:ae:
93:b7:df:4d:3b:aa:6c:68:87:ff:e9:5a:f6:03:db:
ab:ee:ed:0c:b1:a2:69:b9:f3:94:10:0a:2a:9e:d4:
2f:ff:b3:c6:23:13:44:43:4b:7f:a3:18:2f:ef:d9:
4b:d5:38:8e:9d:5d:3e:29:20:bf:87:12:0f:c7:e6:
7f:18:e9:0a:7d:76:09:db:32:61:d6:14:14:66:4f:
43:7f:35:e6:2e:40:ef:6f:69:ce:a3:f4:36:16:b1:
d4:e2:b5:01:49:e1:85:cd:ba:d1:ee:e7:52:53:d7:
a9:a5:d9:46:d6:7d:3e:3f:2c:b0:ea:fa:b9:cf:e7:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:0B:44:98:4B:C9:71:CC:C8:62:04:56:D0:DD:A2:36:F7:40:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBE9B60CB36611F08A14B5E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3e:69:02:42:5f:f3:91:a0:98:ba:dc:04:0e:a3:de:0f:ce:
1b:e4:91:eb:34:61:7d:ef:04:85:28:d5:d3:1f:33:9b:4f:b6:
a2:48:25:ba:30:08:09:1e:87:5e:a2:4b:19:1a:d1:8e:8e:66:
03:f6:c4:62:a9:ab:e5:fd:44:5d:9f:3a:69:b4:90:c4:ee:7f:
e1:2f:81:16:96:ec:6a:d6:d1:99:a5:9a:f6:7f:16:88:60:08:
17:4a:c7:c8:8a:5f:31:0c:1a:77:73:14:37:0d:5f:69:d2:82:
19:cb:ea:b9:cc:39:17:0b:19:ca:00:c2:83:1c:27:e2:c8:6c:
df:13:9b:ce:af:79:5c:88:69:c6:eb:f2:5e:6a:a1:9c:68:82:
3f:f3:f0:88:ca:9f:6d:c3:44:85:fc:63:6e:d3:24:fb:9c:df:
78:ac:b8:e5:e5:cf:71:d0:2b:e2:8d:0b:71:db:64:78:d7:c5:
82:49:43:57:cb:a9:ef:c8:b9:d7:31:51:69:94:e3:b0:33:c4:
43:3b:56:c6:e9:80:d8:49:41:fa:bb:8a:74:81:a9:dc:75:2a:
42:97:9f:42:47:c8:22:6c:67:c9:2a:5b:24:2b:02:70:20:32:
41:3d:30:f9:07:5e:7a:22:0a:93:76:df:0f:2f:08:c6:47:9f:
42:98:90:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:15 2025 by rpki-client