Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE3F74CA80511F091A8AAB6DAE4EC9C.roa
File: 1AE3F74CA80511F091A8AAB6DAE4EC9C.roa (raw, json)
Hash identifier: xfRGvd2ECu3KdRI/7hupXnawDLABl/2N7bI3JU2QgN0=
Subject key identifier: 01:2C:91:83:CC:06:38:BF:94:23:29:B5:44:FE:9C:43:6E:06:AA:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01803B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE3F74CA80511F091A8AAB6DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 07:20:33 +0000
ROA not before: Mon 13 Oct 2025 07:20:28 +0000
ROA not after: Thu 01 Oct 2026 07:20:28 +0000
asID: 55355
IP address blocks: 156.225.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98363 (0x1803b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 07:20:28 2025 GMT
Not After : Oct 1 07:20:28 2026 GMT
Subject: CN=68eca841-0e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:0f:46:45:62:5e:14:14:54:10:a7:3f:0d:
55:14:59:ba:4f:58:45:e1:71:d3:42:4b:98:60:ac:
78:ca:4e:7a:dc:e1:82:11:c5:23:f6:e5:65:0b:ea:
aa:b6:cf:62:84:14:44:ce:c5:2e:e5:af:63:bb:2c:
f8:84:7b:e6:94:4d:14:70:4c:d0:fa:2b:1c:98:44:
f3:72:7e:ba:f0:6a:3e:bc:71:22:c3:c6:76:ed:1c:
1e:d7:c6:de:b5:07:fc:15:86:f2:73:b5:1e:02:47:
1b:34:59:c5:e2:bb:44:a9:a3:e1:04:9f:28:93:67:
04:6e:84:51:39:f2:a7:48:df:75:19:f9:6d:0f:3d:
6d:48:06:b3:a4:b0:9a:37:c4:ab:60:13:f7:70:50:
58:17:0d:b0:f3:11:94:6e:8b:55:02:86:c2:e1:2f:
c3:fd:82:07:4c:0f:65:09:23:e5:71:b4:15:dc:df:
af:04:d5:f4:66:19:89:95:b6:3d:49:e3:b5:1c:b0:
e3:67:14:05:b9:52:3f:df:43:3b:4c:16:01:85:ad:
b8:6e:a8:8b:3f:4a:1f:d3:fa:46:ba:1a:da:d8:06:
f4:a0:1a:59:1a:19:98:fe:56:a4:33:3a:c5:4f:9a:
e4:61:56:b3:18:b1:67:d1:01:7d:89:ab:67:5a:88:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:91:83:CC:06:38:BF:94:23:29:B5:44:FE:9C:43:6E:06:AA:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE3F74CA80511F091A8AAB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b8:c0:ac:48:7a:e8:99:9e:a6:54:32:47:0e:00:f5:d5:c8:
c2:58:bd:df:8c:1f:c7:1d:fc:62:75:5f:f1:34:52:f7:04:9d:
96:e9:bd:1d:03:96:f2:79:fe:ab:bf:6b:2b:1a:d1:2a:d5:5f:
df:e8:63:86:f9:26:2a:d6:69:fa:28:da:1d:48:5f:b1:41:d8:
31:fd:e0:fc:19:55:e5:09:56:f4:4c:7b:35:c7:8a:7f:fa:32:
55:20:44:ca:24:9d:80:fc:cb:d6:e2:5a:c7:7e:2c:2a:26:75:
71:0e:6c:f6:8d:a5:95:8c:16:39:5f:00:8b:fe:68:9f:b6:05:
57:69:5f:0a:1a:c7:fd:6c:86:7d:ca:3d:d7:dd:8a:20:22:52:
5f:f1:88:0d:e1:2d:2d:dc:ad:e5:d7:fd:d4:f0:6f:8c:39:b2:
45:c8:33:21:14:68:a3:12:8c:3e:d2:ec:61:b0:86:7a:3f:9f:
66:17:bb:2e:6b:3e:e6:d4:cc:4a:a3:84:0b:47:8d:1d:27:67:
73:21:50:d1:08:cd:e8:a5:a5:d0:37:6f:9e:62:bf:e1:84:22:
99:e3:04:84:7b:4c:00:b3:80:7e:60:85:a2:85:15:2f:55:47:
f7:4f:9c:a7:65:9c:18:58:05:bd:bf:e3:a2:16:fb:90:c7:a4:
9e:8f:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:36 2025 by rpki-client