Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/502ECA74998E11F08E398DE0DAE4EC9C.roa
File: 502ECA74998E11F08E398DE0DAE4EC9C.roa (raw, json)
Hash identifier: l9VhhEGEdTySOdi/mzb68ya+VW0JfhgGONoHJOgOHWQ=
Subject key identifier: 55:7F:9B:EC:52:B0:64:06:09:FD:C1:8D:EB:2A:20:AF:62:8C:D6:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/502ECA74998E11F08E398DE0DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 21:34:57 +0000
ROA not before: Wed 24 Sep 2025 21:34:51 +0000
ROA not after: Sun 11 Oct 2026 21:34:51 +0000
asID: 273299
IP address blocks: 156.252.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97577 (0x17d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 21:34:51 2025 GMT
Not After : Oct 11 21:34:51 2026 GMT
Subject: CN=68d46400-7411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:ba:d8:9b:f7:9f:29:86:d6:17:08:cc:05:
d0:10:20:d9:e1:82:ed:06:b7:02:8b:2e:33:e9:e4:
00:be:f2:44:00:01:55:9a:ac:e3:7e:64:15:e8:db:
0e:94:ca:c7:b8:f2:8f:46:85:6f:02:e6:85:5f:36:
e2:31:c5:2e:25:ef:1f:da:b9:12:3f:ef:ac:90:c9:
93:db:56:23:b2:9d:38:c9:15:67:ce:44:ba:04:88:
23:f3:45:75:ee:e1:20:46:9b:3c:84:de:79:11:42:
5f:e2:09:be:ee:5b:e5:cc:3d:82:ed:64:78:09:6e:
0f:b1:59:fd:4b:ad:a3:28:6b:02:e5:d5:31:08:6a:
d3:e3:4b:92:d0:5b:ac:f5:ae:20:28:e7:4f:f4:53:
3d:75:f0:cc:d4:f9:fd:42:91:94:fb:be:f6:ee:ff:
c7:6d:ff:86:aa:3b:c6:fd:5a:ef:d3:aa:e7:32:5a:
37:50:15:38:f6:b3:b5:48:d9:0c:70:57:28:30:2a:
ec:b8:89:f0:47:f4:19:36:73:b1:3b:90:3c:01:e1:
00:57:71:3b:0c:f7:07:fe:ac:1f:a4:33:4e:be:7b:
a3:eb:37:59:10:25:76:e8:f7:52:b6:23:25:e5:21:
83:1f:f6:81:77:58:a7:e0:27:a7:f7:3f:30:a0:e9:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:9B:EC:52:B0:64:06:09:FD:C1:8D:EB:2A:20:AF:62:8C:D6:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/502ECA74998E11F08E398DE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:19:9f:85:f0:e9:69:c2:d7:e4:46:a5:18:37:22:80:6d:bc:
d5:7f:e6:26:23:f6:52:a5:f5:52:29:e6:4e:ae:cf:36:bd:ce:
b8:ab:33:9d:08:d7:40:d9:1b:67:f3:8b:27:cd:3f:e6:a9:4e:
c3:4f:83:e6:89:ed:3c:92:5b:d7:0f:a3:c2:0e:5e:81:60:53:
6e:76:89:93:21:13:1c:e8:ab:bd:cc:42:a8:41:04:96:49:2a:
11:5d:14:df:58:b1:93:78:27:62:52:b0:00:4c:4e:d6:82:f9:
ee:bf:e1:62:61:c2:66:1a:bb:de:cc:e6:46:97:d7:d0:f3:ec:
9b:97:4a:0e:1e:ef:63:f0:97:6e:0a:27:f9:67:8e:c2:24:15:
37:18:e7:cb:bf:7c:21:3b:fd:7d:00:81:82:45:88:67:57:7b:
6c:d1:69:dc:d6:1d:c4:81:48:3b:9e:34:8e:ef:cd:8a:f4:37:
e3:0e:ce:63:bf:df:03:5b:77:2d:96:f2:6f:a6:32:95:b1:30:
4e:c5:43:ee:dd:44:80:cc:d8:f6:e7:ed:4b:4e:59:f5:34:2e:
bd:58:ef:40:c8:15:06:71:ba:7f:5b:40:d0:42:8f:ad:96:3f:
5d:c5:02:22:c8:3e:e5:16:f5:ae:0c:24:32:80:34:0b:f5:19:
3e:bf:4f:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX0pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MjEzNDUxWhcNMjYxMDExMjEzNDUxWjAYMRYw
FAYDVQQDEw02OGQ0NjQwMC03NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr8e62Jv3nymG1hcIzAXQECDZ4YLtBrcCiy4z6eQAvvJEAAFVmqzjfmQV
6NsOlMrHuPKPRoVvAuaFXzbiMcUuJe8f2rkSP++skMmT21Yjsp04yRVnzkS6BIgj
80V17uEgRps8hN55EUJf4gm+7lvlzD2C7WR4CW4PsVn9S62jKGsC5dUxCGrT40uS
0Fus9a4gKOdP9FM9dfDM1Pn9QpGU+7727v/Hbf+GqjvG/Vrv06rnMlo3UBU49rO1
SNkMcFcoMCrsuInwR/QZNnOxO5A8AeEAV3E7DPcH/qwfpDNOvnuj6zdZECV26PdS
tiMl5SGDH/aBd1in4Cen9z8woOn/PQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFV/
m+xSsGQGCf3BjesqIK9ijNY7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MDJFQ0E3NDk5OEUxMUYwOEUzOThERTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwFMA0GCSqGSIb3DQEBCwUA
A4IBAQCdGZ+F8OlpwtfkRqUYNyKAbbzVf+YmI/ZSpfVSKeZOrs82vc64qzOdCNdA
2Rtn84snzT/mqU7DT4Pmie08klvXD6PCDl6BYFNudomTIRMc6Ku9zEKoQQSWSSoR
XRTfWLGTeCdiUrAATE7Wgvnuv+FiYcJmGrvezOZGl9fQ8+ybl0oOHu9j8JduCif5
Z47CJBU3GOfLv3whO/19AIGCRYhnV3ts0Wnc1h3EgUg7njSO782K9DfjDs5jv98D
W3ctlvJvpjKVsTBOxUPu3USAzNj25+1LTln1NC69WO9AyBUGcbp/W0DQQo+tlj9d
xQIiyD7lFvWuDCQygDQL9Rk+v08z
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:51 2025 by rpki-client