Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288A0F2E874111F09B2A979ADAE4EC9C.roa
File: 288A0F2E874111F09B2A979ADAE4EC9C.roa (raw, json)
Hash identifier: liZuI/oL09W7BWCP05W/DG4wsEBIxPvO+qNf+J6p6/c=
Subject key identifier: FB:03:6D:49:E9:BD:05:D6:5C:9E:E2:C1:EC:8D:CC:BE:19:AB:62:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017593
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288A0F2E874111F09B2A979ADAE4EC9C.roa
Signing time: Mon 01 Sep 2025 14:37:18 +0000
ROA not before: Mon 01 Sep 2025 14:36:00 +0000
ROA not after: Sun 28 Sep 2025 14:36:00 +0000
asID: 401783
IP address blocks: 156.233.66.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95635 (0x17593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 14:36:00 2025 GMT
Not After : Sep 28 14:36:00 2025 GMT
Subject: CN=68b5af9d-3821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:5f:af:84:68:eb:b4:3e:c7:88:83:02:49:
0c:aa:63:34:a9:aa:75:43:c8:3e:9f:c2:41:d9:4a:
1f:d3:72:5a:5f:f3:76:9f:fb:6c:83:b9:d1:92:23:
7f:71:84:83:b6:3c:4d:ed:5a:8f:5a:61:15:33:ec:
3b:b4:72:bb:23:59:bb:d9:3b:d4:f1:49:bb:27:4d:
1f:fe:70:98:62:b5:f1:bb:98:19:77:2f:6a:ed:c4:
fb:5b:b0:e9:48:33:54:80:cc:e8:16:56:91:5e:28:
9d:bd:49:88:80:96:c8:0d:90:56:5d:ee:8a:71:c7:
f6:da:57:ce:1f:ae:0e:ce:07:e1:a4:d7:97:74:7a:
a5:48:33:cc:26:ff:58:b6:44:96:38:1e:1f:fd:38:
09:1a:b4:34:0d:5a:b2:8c:f2:4e:20:72:ff:a8:fc:
8d:79:b9:aa:9b:f5:a9:71:3b:a8:d7:0a:e3:78:b4:
ec:22:96:7d:4e:5b:5a:8f:7f:eb:df:a3:9d:bd:2c:
5a:16:91:c9:e1:37:f8:a3:6e:0e:9e:4f:f9:28:dc:
fb:8e:b9:5d:16:00:04:db:46:0f:71:ab:61:e6:c4:
02:fd:35:35:37:53:9f:ab:35:c2:56:2a:8b:ab:de:
05:0c:7d:66:56:80:5c:9f:bd:cb:0e:61:dd:a8:87:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:6D:49:E9:BD:05:D6:5C:9E:E2:C1:EC:8D:CC:BE:19:AB:62:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288A0F2E874111F09B2A979ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.66.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7f:f0:7b:ac:d5:98:4f:d5:d4:55:fe:49:ea:59:7c:04:7b:
60:7e:71:1e:2d:df:a1:76:b8:3d:2f:f8:c4:41:df:b9:f4:66:
d4:9b:fe:ed:a3:dd:29:20:4c:c4:10:e8:55:0f:7b:70:76:a9:
fc:4f:42:fc:b7:e1:00:f0:08:1e:32:ea:49:3f:52:82:9b:ab:
24:ec:a9:f7:ed:13:5e:fc:83:09:3e:d6:f8:1e:4d:0d:18:67:
53:98:0b:94:be:85:ce:40:9a:4b:67:fe:13:b8:fe:21:39:10:
4a:18:8b:bf:00:b3:34:e9:b9:79:d3:a9:08:1a:68:ac:a7:ba:
c5:94:17:8e:54:7a:02:c2:e8:db:4b:12:c6:14:85:24:24:11:
7c:86:89:70:1a:7c:47:87:c6:86:5c:57:a4:97:c2:25:ad:9a:
1f:54:f4:09:da:0d:f3:de:d5:0a:75:78:8c:31:f6:f0:2c:c5:
44:ed:08:43:8c:07:59:bf:0c:36:50:4c:97:91:c6:6c:45:4f:
ca:d8:9d:4a:2e:7e:6a:82:0f:1d:2b:c8:f1:8c:96:15:23:79:
f6:03:eb:0f:b1:cc:1f:dd:2c:66:09:c1:3a:e2:c8:08:b7:ef:
f8:38:63:f9:35:e8:3f:5f:cb:34:81:d4:32:7d:7b:34:58:0c:
8c:ba:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:39:55 2025 by rpki-client