Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23DDEEE6AE6011F08718719BDAE4EC9C.roa
File: 23DDEEE6AE6011F08718719BDAE4EC9C.roa (raw, json)
Hash identifier: I1hgzqhw667ls7JGE7Vr6fNx7PME10OsPSAnACqk6C4=
Subject key identifier: 82:36:A3:9F:58:4B:27:F2:E7:49:76:B8:71:9E:3E:EF:12:7E:4A:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23DDEEE6AE6011F08718719BDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:27:20 +0000
ROA not before: Tue 21 Oct 2025 09:27:15 +0000
ROA not after: Fri 28 Nov 2025 09:27:15 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 01 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98782 (0x181de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:27:15 2025 GMT
Not After : Nov 28 09:27:15 2025 GMT
Subject: CN=68f751f8-5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:ff:0e:1f:3b:25:ec:aa:72:35:d0:d8:b8:
58:c2:c5:85:19:5b:fc:52:68:8c:6f:44:c1:91:c7:
76:58:19:df:1a:30:ac:3d:1a:c4:5f:8f:8e:3e:da:
3a:c5:be:35:3a:c1:df:ea:76:8a:64:8b:0b:99:28:
7b:be:60:5c:f9:89:67:92:c8:91:d6:ba:c0:93:42:
5a:af:0b:75:b7:de:4a:b2:ea:03:c3:74:17:e4:97:
45:95:b0:0c:38:da:6b:f4:ef:4d:cb:14:06:05:2c:
25:07:e2:07:d8:bd:f4:47:a9:8b:3d:1f:21:9e:c0:
79:c8:6c:80:54:57:c5:d2:04:3c:3c:e2:db:1a:da:
fe:2a:3a:b9:b0:eb:df:f2:7c:d7:71:9b:24:b6:5f:
ce:a4:c8:12:21:1d:0e:fa:61:f1:76:53:1e:be:f2:
04:a5:78:ed:64:bc:e4:c8:a0:09:a8:44:75:df:c4:
3b:89:ae:b1:7b:dd:f0:68:04:ed:08:60:06:6f:68:
e0:94:a6:2d:60:26:e2:6d:8d:de:39:e4:fb:39:d3:
ec:7c:ab:97:2f:ff:40:9b:1f:9a:38:bb:17:6c:e0:
0b:ed:85:cd:2d:c5:9a:b4:5a:3c:56:e4:4b:cf:1c:
c3:f4:69:8e:13:ec:29:33:7c:f6:96:92:cc:e8:c8:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:A3:9F:58:4B:27:F2:E7:49:76:B8:71:9E:3E:EF:12:7E:4A:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23DDEEE6AE6011F08718719BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:8f:9a:dc:7b:48:d2:1c:bb:85:5b:00:cb:c1:bd:03:6a:
53:c3:21:0f:0c:84:f0:75:5d:28:03:41:e2:cd:66:bc:e6:ac:
bc:7b:1c:4b:06:d3:b7:5d:8a:06:ee:6b:fd:43:4b:d1:65:ba:
25:ea:0e:79:f5:61:54:9e:3a:d0:cd:d9:8a:0a:d8:98:09:46:
ef:9a:a7:cf:48:97:49:3c:69:f2:12:b5:d5:b3:53:2e:47:b2:
e7:9c:1a:67:5d:29:09:f4:3b:37:da:0d:72:0b:df:9c:94:c7:
45:50:79:ce:da:4e:6b:1f:03:a6:0d:20:88:7c:e3:4a:c4:19:
3a:39:78:c7:f9:7c:35:4c:c2:07:8d:74:e3:7b:6d:a2:7c:40:
86:4c:f6:87:d0:06:52:94:e4:ae:2b:10:50:3a:95:ba:29:a4:
7e:9a:e0:ff:88:87:ec:a3:4e:f0:5c:9d:d5:20:ec:81:97:97:
3b:71:22:bb:c9:c7:75:51:6f:25:ba:ce:39:55:c2:cc:0b:ae:
dd:77:f8:14:77:a6:cb:91:3a:22:ef:53:97:54:d3:99:5f:bc:
9e:34:c4:ef:1d:4c:18:cb:0a:94:54:4d:37:29:05:b8:e4:34:
df:68:47:63:42:17:30:98:f8:44:e3:b4:0c:a1:7f:a7:ce:44:
ca:db:52:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYHeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIxMDkyNzE1WhcNMjUxMTI4MDkyNzE1WjAYMRYw
FAYDVQQDEw02OGY3NTFmOC01YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvX/Dh87JeyqcjXQ2LhYwsWFGVv8UmiMb0TBkcd2WBnfGjCsPRrEX4+O
Pto6xb41OsHf6naKZIsLmSh7vmBc+YlnksiR1rrAk0Jarwt1t95KsuoDw3QX5JdF
lbAMONpr9O9NyxQGBSwlB+IH2L30R6mLPR8hnsB5yGyAVFfF0gQ8POLbGtr+Kjq5
sOvf8nzXcZsktl/OpMgSIR0O+mHxdlMevvIEpXjtZLzkyKAJqER138Q7ia6xe93w
aATtCGAGb2jglKYtYCbibY3eOeT7OdPsfKuXL/9Amx+aOLsXbOAL7YXNLcWatFo8
VuRLzxzD9GmOE+wpM3z2lpLM6MhcFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFII2
o59YSyfy50l2uHGePu8SfkovMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yM0RERUVFNkFFNjAxMUYwODcxODcxOUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYUMA0GCSqGSIb3DQEBCwUA
A4IBAQBkUo+a3HtI0hy7hVsAy8G9A2pTwyEPDITwdV0oA0HizWa85qy8exxLBtO3
XYoG7mv9Q0vRZbol6g559WFUnjrQzdmKCtiYCUbvmqfPSJdJPGnyErXVs1MuR7Ln
nBpnXSkJ9Ds32g1yC9+clMdFUHnO2k5rHwOmDSCIfONKxBk6OXjH+Xw1TMIHjXTj
e22ifECGTPaH0AZSlOSuKxBQOpW6KaR+muD/iIfso07wXJ3VIOyBl5c7cSK7ycd1
UW8lus45VcLMC67dd/gUd6bLkToi71OXVNOZX7yeNMTvHUwYywqUVE03KQW45DTf
aEdjQhcwmPhE47QMoX+nzkTK21JQ
-----END CERTIFICATE-----
Generated at Thu Oct 30 02:54:01 2025 by rpki-client