Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20377E8C948011F09542A4B6DAE4EC9C.roa
File: 20377E8C948011F09542A4B6DAE4EC9C.roa (raw, json)
Hash identifier: RmySSeckIVDEvib9LCAQ1zIDrDNPBt9TuKXo4N6fDLY=
Subject key identifier: 35:6B:97:D6:0D:7A:B6:D6:67:0A:E5:1A:B3:E1:62:AA:61:00:5D:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20377E8C948011F09542A4B6DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 11:10:47 +0000
ROA not before: Thu 18 Sep 2025 11:10:40 +0000
ROA not after: Mon 03 Nov 2025 11:10:40 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97284 (0x17c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 11:10:40 2025 GMT
Not After : Nov 3 11:10:40 2025 GMT
Subject: CN=68cbe8b7-8133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:42:a0:e2:84:b5:e9:7a:38:07:b8:b5:f4:
84:83:e2:da:8a:10:df:57:d4:4f:13:61:e7:27:6e:
22:2d:d4:72:40:9f:b0:7e:d0:15:b4:af:6a:38:ca:
28:4f:fc:01:3f:53:0f:6b:bb:07:61:f2:3e:df:18:
a5:7d:b4:b9:03:0a:75:a8:3c:af:88:62:b4:95:68:
e2:28:8e:95:bc:19:c5:36:cf:10:8b:14:2c:41:5b:
57:54:5b:f9:82:f5:84:46:f3:14:3b:a8:c3:b7:f6:
88:25:2f:3d:ef:de:65:9c:d7:0a:5d:d7:c5:7a:3c:
16:d8:96:19:a0:9a:f5:c7:31:24:31:a4:38:ca:de:
71:dc:20:b1:8e:e8:b7:9b:d3:5b:00:52:88:f3:ea:
8b:01:9d:40:62:48:f7:11:a1:94:48:05:7b:e1:2b:
4b:38:54:69:9e:02:8d:e3:ec:0b:f5:07:b1:3a:cf:
35:fa:ec:36:9d:10:dc:e9:e7:dc:94:29:e8:40:d9:
ee:e6:94:7a:05:33:5c:15:b8:6c:ba:37:c9:23:a3:
48:8f:9a:d5:38:26:86:8a:9d:af:a0:bf:35:0e:71:
e6:7c:5e:29:40:cd:8f:9b:a7:eb:6f:a2:c5:d8:50:
94:f5:f2:0d:e2:ef:c0:c3:7d:4d:53:c0:7a:3e:ff:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:97:D6:0D:7A:B6:D6:67:0A:E5:1A:B3:E1:62:AA:61:00:5D:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20377E8C948011F09542A4B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:80:7e:0f:f2:d3:c0:80:4e:de:ae:7a:c1:3d:b1:90:14:0e:
d4:6c:9a:9a:f1:db:ad:ba:76:d4:d8:c8:e5:9f:35:c2:c5:eb:
6f:10:e0:5c:b2:80:52:f4:1a:d3:a9:83:2b:57:f3:80:46:a2:
b4:59:b7:52:a3:d5:59:5e:d1:1e:de:29:dd:a7:7d:99:ae:7d:
77:16:ac:6a:82:05:38:e7:84:90:18:80:d1:1a:4b:2e:2f:a2:
89:e1:1c:9c:3b:3b:40:6b:a8:ab:d8:a5:5e:0f:82:30:21:ce:
bd:10:d7:bb:92:df:32:f3:c3:13:0c:8f:bb:e8:39:1c:53:11:
ef:eb:d9:47:7f:73:e3:9d:a5:d2:48:cd:66:f2:25:c7:30:aa:
1b:0f:ff:bd:a3:8c:84:65:2b:06:3e:1d:44:90:4e:ee:37:6d:
dd:47:45:04:c8:77:f6:f7:24:33:0c:be:5b:09:71:47:d8:77:
81:89:07:24:de:38:e4:69:dc:d1:11:51:35:2e:c6:e8:8e:8a:
57:42:4e:9c:48:ff:e5:ad:63:4b:24:2e:5f:68:9b:ca:f1:8d:
57:9b:a1:44:81:bc:e5:96:fe:51:91:dd:34:1a:60:0e:53:8d:
a8:c4:d5:ca:9f:02:66:9e:9e:d2:b9:3c:18:37:44:69:ba:89:
66:5e:51:65
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXwEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE4MTExMDQwWhcNMjUxMTAzMTExMDQwWjAYMRYw
FAYDVQQDEw02OGNiZThiNy04MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyWNCoOKEtel6OAe4tfSEg+LaihDfV9RPE2HnJ24iLdRyQJ+wftAVtK9q
OMooT/wBP1MPa7sHYfI+3xilfbS5Awp1qDyviGK0lWjiKI6VvBnFNs8QixQsQVtX
VFv5gvWERvMUO6jDt/aIJS89795lnNcKXdfFejwW2JYZoJr1xzEkMaQ4yt5x3CCx
jui3m9NbAFKI8+qLAZ1AYkj3EaGUSAV74StLOFRpngKN4+wL9QexOs81+uw2nRDc
6efclCnoQNnu5pR6BTNcFbhsujfJI6NIj5rVOCaGip2voL81DnHmfF4pQM2Pm6fr
b6LF2FCU9fIN4u/Aw31NU8B6Pv/XcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVr
l9YNerbWZwrlGrPhYqphAF3uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMDM3N0U4Qzk0ODAxMUYwOTU0MkE0QjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOp2AwQAnOp7MA0GCSqGSIb3
DQEBCwUAA4IBAQCngH4P8tPAgE7ernrBPbGQFA7UbJqa8dutunbU2MjlnzXCxetv
EOBcsoBS9BrTqYMrV/OARqK0WbdSo9VZXtEe3indp32Zrn13FqxqggU454SQGIDR
GksuL6KJ4RycOztAa6ir2KVeD4IwIc69ENe7kt8y88MTDI+76DkcUxHv69lHf3Pj
naXSSM1m8iXHMKobD/+9o4yEZSsGPh1EkE7uN23dR0UEyHf29yQzDL5bCXFH2HeB
iQck3jjkadzREVE1LsbojopXQk6cSP/lrWNLJC5faJvK8Y1Xm6FEgbzllv5Rkd00
GmAOU42oxNXKnwJmnp7SuTwYN0RpuolmXlFl
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client