Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C030C28D6311F0A20DC5F2DAE4EC9C.roa
File: 05C030C28D6311F0A20DC5F2DAE4EC9C.roa (raw, json)
Hash identifier: giaE4pJ63Ut7xe0cJuX85Mt+e3AswSyVyYS4bJRTwts=
Subject key identifier: 64:FE:6E:CE:8E:E5:91:4F:22:73:76:CB:16:0A:E9:06:22:39:DC:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C030C28D6311F0A20DC5F2DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 09:54:49 +0000
ROA not before: Tue 09 Sep 2025 09:54:44 +0000
ROA not after: Thu 24 Aug 2028 09:54:44 +0000
asID: 17561
IP address blocks: 156.227.217.0/24 maxlen: 24
156.228.250.0/24 maxlen: 24
156.231.162.0/24 maxlen: 24
156.238.113.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96799 (0x17a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 09:54:44 2025 GMT
Not After : Aug 24 09:54:44 2028 GMT
Subject: CN=68bff969-a0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:c0:97:4b:66:57:5a:b1:17:39:5b:bd:39:
fa:b6:c9:e9:72:62:72:9d:07:f3:4c:cb:6e:bb:06:
09:0e:12:e9:0d:eb:ca:6f:b7:7b:2c:20:79:55:5c:
3c:97:1f:f0:08:83:d8:fc:fb:7e:3b:46:54:9c:2b:
40:bd:45:18:13:ca:d4:83:55:2d:22:7d:0d:e8:d0:
38:6c:ac:19:57:f3:4e:23:5c:6a:dc:61:fa:af:8c:
74:23:8a:1d:24:60:78:47:9c:05:a8:f7:a6:40:b1:
59:2a:ef:7d:b4:57:de:e5:90:70:08:72:b2:40:9c:
cb:54:3d:2c:bd:9e:d1:a6:9f:87:29:e1:13:2f:8f:
9c:61:df:88:1a:93:cc:93:d5:56:d9:60:0a:48:a2:
84:02:ce:e7:57:d2:96:db:8e:07:01:a0:6c:46:c0:
6b:f6:b7:f8:ee:b1:f8:ed:b3:8b:82:0a:14:9e:83:
3d:cb:e6:7f:9d:4e:a4:ad:75:94:ed:83:36:05:f2:
f2:7e:09:f2:06:01:1c:a2:70:7f:18:51:d7:f5:15:
c5:25:e5:bc:dd:de:5d:81:db:31:84:d8:8e:2f:8e:
b1:56:67:ae:a3:49:f0:8e:e0:ee:10:06:fe:c0:69:
9c:90:06:09:95:98:e9:95:ee:6f:19:5e:55:78:ce:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:6E:CE:8E:E5:91:4F:22:73:76:CB:16:0A:E9:06:22:39:DC:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C030C28D6311F0A20DC5F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.217.0/24
156.228.250.0/24
156.231.162.0/24
156.238.113.0/24
156.239.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f0:a1:22:91:7b:e2:14:ee:75:01:5c:09:82:8a:6a:b9:24:
03:2f:2f:8a:64:08:07:bc:c6:8c:10:ef:58:29:d2:67:e9:4f:
f3:39:06:79:f4:63:41:b8:22:cf:20:2c:5e:5f:08:03:01:2d:
38:42:dc:8e:db:76:69:e9:63:07:82:87:46:e9:77:5f:e1:04:
b6:41:0b:53:b4:6b:e3:e8:72:91:c8:8a:89:82:6d:5e:54:7c:
8c:34:9e:d5:92:4c:12:78:3b:f6:08:41:c8:56:5d:53:2c:ec:
8d:85:85:05:87:ad:97:93:8a:30:a3:ae:f6:6e:46:42:ce:0f:
5d:c3:8a:04:55:97:32:fe:06:b7:63:dd:0c:ee:51:01:0b:5b:
db:9f:17:c3:6d:72:a1:73:25:8c:62:8d:a8:ca:5f:b0:95:75:
e7:1c:00:ca:0d:8f:df:3d:b3:38:e3:09:00:78:64:4f:11:92:
3c:98:cf:fe:b1:fb:09:66:27:a5:9f:22:91:42:9a:a0:c4:5e:
05:71:e7:52:27:65:e2:a7:04:9d:b3:97:9a:d2:82:eb:5b:1d:
62:43:41:d8:78:a9:2f:f1:18:25:65:be:03:ea:66:a3:ee:8b:
52:d9:a9:7b:6a:f6:21:c8:94:33:42:0a:7c:f2:35:27:70:83:
06:8a:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:09 2025 by rpki-client