Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F98277CAD9611F0AE0FD683DAE4EC9C.roa
File: 1F98277CAD9611F0AE0FD683DAE4EC9C.roa (raw, json)
Hash identifier: 0sZypo/+ZrI2Vx2dabuO1pAhulvrT5/C2q1GCti7z9g=
Subject key identifier: 3A:98:01:93:D1:CC:B6:7E:36:BC:6C:D3:94:C4:69:58:B3:E6:54:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01819D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F98277CAD9611F0AE0FD683DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 09:21:14 +0000
ROA not before: Mon 20 Oct 2025 09:21:09 +0000
ROA not after: Sun 30 Nov 2025 09:21:09 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98717 (0x1819d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 09:21:09 2025 GMT
Not After : Nov 30 09:21:09 2025 GMT
Subject: CN=68f5ff0a-860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:a4:9e:58:67:dd:01:3e:a8:f1:5f:03:3c:
8f:86:d3:04:ae:8d:a4:5f:eb:28:23:63:f0:aa:6f:
35:1b:a2:89:81:ca:c6:f5:1c:96:78:01:f1:6c:f4:
30:a0:f6:52:31:85:82:1c:10:38:d0:cc:ea:b7:31:
38:08:d5:b4:02:43:a3:63:8d:12:fa:d5:48:9e:e5:
5a:fa:e2:fa:96:d4:8b:ba:84:e6:db:b0:c8:03:cd:
ee:1b:09:ea:6c:44:ec:ea:d5:89:86:1c:0c:84:c1:
5a:e6:66:1c:bc:d1:fd:5e:80:19:b4:2f:51:c1:e6:
b9:b1:27:3b:95:d1:5f:85:8e:55:a0:fd:2d:73:a7:
66:64:04:c3:a3:4d:e7:f9:44:27:c2:d5:3b:59:23:
a5:ff:5c:1c:9a:82:ad:4d:90:bb:b0:db:ec:1e:51:
b4:78:af:ef:ee:77:21:40:32:b3:79:98:d8:39:65:
8b:a0:7f:f5:c7:22:9b:f1:0f:1a:20:9c:3a:21:b4:
da:63:ad:05:f3:d8:26:1f:89:1c:54:eb:f3:65:67:
04:67:d7:0b:a4:ad:d6:41:90:dc:24:51:7f:21:8a:
f6:37:66:23:69:e3:71:b1:ba:54:6a:f8:7d:17:95:
a5:7f:5a:8c:ca:8e:8d:e9:df:35:0b:1f:01:49:b6:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:01:93:D1:CC:B6:7E:36:BC:6C:D3:94:C4:69:58:B3:E6:54:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F98277CAD9611F0AE0FD683DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:97:b3:d2:71:b7:bc:ab:f4:51:ea:56:2a:15:e5:e9:21:90:
8f:6b:26:e2:c9:dc:3f:f3:70:a6:1a:33:f1:a7:1a:86:b6:4d:
c5:ee:dc:06:62:66:e5:c6:72:32:5d:d2:99:c1:0c:71:2c:49:
3c:75:f1:85:9e:df:e8:ed:59:a3:f0:e1:e7:03:04:0b:d8:ff:
41:62:6d:0b:37:5d:6f:af:f9:3f:84:bc:dc:2c:ad:cc:22:7c:
c9:97:f6:16:8b:f8:12:b7:95:ea:bb:a3:42:23:c8:76:48:d2:
84:4d:24:58:9f:fe:ee:c4:1c:64:2a:b4:db:a9:05:1b:17:73:
a1:ba:15:43:20:d9:f2:b8:15:4d:40:fc:04:db:76:a3:7a:43:
e6:a7:0d:4f:7a:aa:e5:90:bd:29:ac:9b:24:fe:3c:2b:13:bb:
1b:0d:0a:c5:8d:b5:3a:52:f7:0e:65:81:cb:b6:b1:f1:51:e1:
2c:ba:b9:b3:57:8d:06:61:df:31:5b:85:f0:1d:5c:32:2c:dc:
31:ea:53:3f:e0:0e:87:f6:f9:3d:8d:9f:ba:5d:72:54:96:83:
6f:38:2d:40:04:ae:bb:b2:a5:b1:d6:fc:6f:6d:c7:23:5c:e0:
07:61:88:16:88:f8:56:db:f5:1c:3e:52:45:b7:3b:92:b4:c1:
94:a4:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:56:39 2025 by rpki-client