Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A2A0F2A99311F0AD776DBADAE4EC9C.roa
File: 31A2A0F2A99311F0AD776DBADAE4EC9C.roa (raw, json)
Hash identifier: 4ITwlBIYvJVMm7BmFgtznfScqpU03QpNb7DejuxWmZg=
Subject key identifier: 93:55:62:66:26:A1:9A:14:E8:61:AB:16:C5:39:38:77:C9:12:99:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018078
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A2A0F2A99311F0AD776DBADAE4EC9C.roa
Signing time: Wed 15 Oct 2025 06:50:11 +0000
ROA not before: Wed 15 Oct 2025 06:50:03 +0000
ROA not after: Mon 20 Oct 2025 06:50:03 +0000
asID: 398465
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 06:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98424 (0x18078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 06:50:03 2025 GMT
Not After : Oct 20 06:50:03 2025 GMT
Subject: CN=68ef4423-5214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:17:e3:66:df:c5:da:ad:b7:ec:8c:7b:83:
10:2e:45:c8:30:1d:91:c4:7d:73:cf:f3:5c:3e:02:
6b:3c:7f:9a:34:08:81:d0:fa:ef:30:67:ae:f4:7f:
3d:28:ed:19:65:db:33:e0:c8:79:cd:70:72:d2:e6:
66:57:27:56:4a:c2:d6:08:17:82:cb:4a:71:9e:ba:
8f:4c:75:2c:d2:7d:50:b2:82:e6:a8:4f:18:fb:96:
9f:42:06:32:46:76:7f:ad:fd:27:ee:ab:23:00:2d:
11:bb:13:29:01:37:96:de:1f:b0:60:6f:4b:c7:fc:
84:19:bb:b1:0e:f5:54:5f:71:12:51:15:e8:06:86:
3a:cb:b4:8c:b1:bc:47:1a:ef:df:cb:be:99:af:a4:
a8:9e:7e:8f:de:aa:ea:02:ee:1e:5c:af:a8:46:05:
6e:2e:a0:e7:16:93:6f:ee:53:2e:f6:29:88:c7:cf:
ab:3e:fe:48:d4:ff:0e:6d:0c:d8:ad:56:c8:be:17:
31:fb:c4:37:a3:d9:8e:a0:f4:c1:bc:4f:f4:8a:50:
59:98:2b:d4:14:ed:c5:f9:ab:02:84:fb:ce:1d:99:
c6:cc:b3:c2:ad:d0:1d:bf:e7:0e:ce:ac:5c:be:fb:
e0:d8:43:ab:52:0f:25:e2:15:74:b4:a4:49:0c:2b:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:62:66:26:A1:9A:14:E8:61:AB:16:C5:39:38:77:C9:12:99:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A2A0F2A99311F0AD776DBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c6:66:9d:3c:e3:3c:8a:24:df:73:21:0c:37:23:8f:c3:52:
d1:bd:23:af:14:ab:fa:dd:98:c9:30:c1:b0:f5:f1:e4:8b:ac:
b5:9d:26:5d:8c:70:a0:43:97:51:cb:60:97:64:37:f6:8e:c2:
37:79:45:07:bf:55:0d:61:d8:95:b2:40:6b:b2:6b:bc:1f:ad:
9f:f1:a5:75:a0:8a:2e:33:71:d4:c7:c3:a0:fe:6b:4b:9d:66:
48:03:cf:bc:42:19:d6:43:69:f2:c9:10:a2:3a:70:f2:30:22:
09:a8:48:56:00:ac:23:95:a8:64:35:3f:eb:ab:e1:58:29:ce:
f7:9d:5c:da:ca:43:a7:4e:97:ec:33:d5:e8:ad:50:99:7c:cb:
27:78:ab:31:e7:b8:86:ac:e5:52:c7:af:3c:e3:9c:a7:99:7c:
11:53:e9:2d:68:24:03:23:d4:8a:3f:3c:cb:5c:67:6f:6c:30:
f0:2e:af:f9:4a:69:93:cf:35:f2:56:f2:37:31:d7:e2:00:ab:
2b:1e:a6:16:84:d9:9d:0b:87:68:71:06:14:e0:9f:2e:6f:5d:
85:a1:10:5d:56:e0:3c:a9:a2:46:2f:4b:c8:5a:dc:46:ba:cb:
63:7f:87:d6:a9:6d:79:96:64:50:0a:1b:c4:7c:ab:79:5a:0f:
92:3d:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:53 2025 by rpki-client