Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1CE0FC996311F0912696D0DAE4EC9C.roa
File: AD1CE0FC996311F0912696D0DAE4EC9C.roa (raw, json)
Hash identifier: 1X25z7ZOxQdbk9/9MUPgivpSTkYAD6kf7UGyzVWabsQ=
Subject key identifier: 97:A2:25:D0:0A:34:D9:69:72:F8:EE:88:27:02:45:C5:85:B7:E7:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1CE0FC996311F0912696D0DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 16:29:44 +0000
ROA not before: Wed 24 Sep 2025 16:29:38 +0000
ROA not after: Wed 29 Oct 2025 16:29:38 +0000
asID: 31898
IP address blocks: 156.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97523 (0x17cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 16:29:38 2025 GMT
Not After : Oct 29 16:29:38 2025 GMT
Subject: CN=68d41c78-0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:e3:2d:64:c5:be:50:16:d0:2c:48:ad:94:
84:21:c1:f9:23:b3:88:39:ae:41:d0:01:90:a7:35:
b1:04:1b:18:d5:e2:b4:fd:f0:61:01:ee:97:9b:1a:
76:ed:25:06:1a:bf:b2:a0:94:0c:7e:42:e5:a9:2a:
50:ad:72:f5:48:28:f9:c9:0b:0d:b4:d3:5f:f8:c1:
d5:39:48:94:62:f3:0e:1e:33:05:de:5f:17:2c:b2:
0c:4f:1f:95:bc:1c:d5:02:72:f9:90:ca:25:04:de:
da:08:0d:c3:0f:c4:cc:ab:2d:11:08:08:cc:5c:25:
d4:24:d4:f0:2a:5e:31:eb:84:0c:75:e1:76:bb:3c:
be:5d:18:62:06:46:58:7b:87:c7:09:b1:58:31:51:
a6:c2:29:33:db:a6:44:3e:ef:db:ec:fe:7a:88:5c:
06:63:a1:b9:05:74:42:92:2f:00:43:9a:4c:e9:ba:
8d:3d:e1:b3:61:0d:97:49:b8:2f:d0:65:ea:03:13:
f2:3c:06:fc:2c:53:11:1f:be:a5:67:9d:2f:7a:ad:
6c:ca:13:86:97:24:bd:33:11:6f:6b:3b:ab:c7:48:
05:bc:98:78:d9:ae:0d:fc:38:de:58:3c:41:1f:4f:
ca:23:83:08:6b:09:f5:ed:c7:d2:92:17:b8:4a:e0:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:25:D0:0A:34:D9:69:72:F8:EE:88:27:02:45:C5:85:B7:E7:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1CE0FC996311F0912696D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:05:fe:4f:8d:7d:9d:ab:99:e5:dd:ed:d7:c3:af:5f:83:ae:
d7:c7:ee:a0:52:fd:a8:cc:ef:22:95:6b:b9:d1:59:b1:4a:4a:
73:44:69:33:29:d7:d6:6c:8a:cd:ab:08:14:a0:78:20:28:62:
00:e6:f1:23:97:5f:af:5c:1a:1b:6b:33:14:0f:74:b1:93:20:
e6:a2:16:b3:76:32:b6:fb:dc:aa:49:f8:7a:1c:27:4d:3a:80:
a2:48:b1:4f:c4:d3:7c:01:b2:6c:a5:19:af:db:33:99:e8:18:
ce:e9:eb:a6:55:51:5f:4d:bf:8a:c9:e6:33:98:89:d4:f7:34:
99:bc:bd:59:ac:b7:e0:21:d2:66:79:5b:80:cc:7e:9d:19:55:
45:a6:0b:c4:4a:3f:c4:3f:b6:c7:f2:03:df:9d:20:1f:e5:d8:
28:22:4d:38:b1:62:00:23:f4:e4:e0:91:ea:97:c0:75:54:a6:
73:a1:40:4f:27:f8:ef:cd:f1:f7:b6:95:9b:b7:19:7b:35:0f:
23:0b:3b:a7:7e:4b:2c:00:00:1f:74:f4:12:70:27:db:bc:02:
93:84:af:8e:e4:7a:eb:da:4e:d8:43:81:b0:a8:be:ef:44:b8:
61:1f:b5:06:b1:a1:46:38:44:c6:5a:4d:97:15:e3:1d:cf:ad:
7a:62:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:59:11 2025 by rpki-client