Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53799CDEB63211F0A5AB4987DAE4EC9C.roa
File: 53799CDEB63211F0A5AB4987DAE4EC9C.roa (raw, json)
Hash identifier: ttiVPnMm2DReLi38aSeuu7V9TQThIHkokxQnP6GaAOM=
Subject key identifier: 63:01:A8:F7:02:34:9F:F5:F3:97:54:DF:2F:86:1C:74:19:D9:74:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018426
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53799CDEB63211F0A5AB4987DAE4EC9C.roa
Signing time: Fri 31 Oct 2025 08:19:32 +0000
ROA not before: Fri 31 Oct 2025 08:19:27 +0000
ROA not after: Tue 09 Dec 2025 08:19:27 +0000
asID: 44477
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99366 (0x18426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:19:27 2025 GMT
Not After : Dec 9 08:19:27 2025 GMT
Subject: CN=69047114-0b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:63:0d:d5:c9:27:88:8a:8c:84:d4:6d:eb:
b5:86:34:3d:df:1e:47:04:9e:94:0e:5c:77:ce:8d:
b0:33:e6:f9:25:d0:6a:98:ed:5b:8f:f2:f2:d8:01:
5b:10:a5:3a:38:17:f0:66:3f:e2:ec:aa:79:17:c0:
d5:83:83:66:00:94:74:0c:2f:95:9b:f9:3e:2d:6f:
87:b7:60:f5:eb:b6:a0:ec:e9:b3:53:b2:ef:5a:1a:
47:15:e7:0b:c9:a1:bf:bd:72:2e:e0:b9:75:d2:8e:
de:e5:73:da:3a:b1:fc:44:e6:97:25:92:2b:e8:2a:
0e:72:7a:d2:8d:7d:11:9e:c9:c1:1c:dd:70:39:ab:
b3:f0:79:e4:9d:ac:0a:c1:e9:8e:65:d1:53:bc:b5:
b3:c8:27:e7:bf:83:21:c2:b5:b9:b1:68:c0:d0:85:
e9:03:da:82:19:b2:bd:5f:58:a3:78:08:41:a0:7b:
3d:ea:c1:de:59:b8:1b:ca:fe:09:2a:22:b9:41:c3:
27:37:2b:5b:ee:d3:f6:80:99:a9:38:e0:57:2b:66:
31:11:bc:15:13:8f:2e:30:37:8c:33:e8:e4:13:9c:
38:a7:23:50:b1:a8:9c:1c:d0:6e:4c:d4:ee:d2:72:
f3:1c:b3:0d:97:83:b2:7b:71:da:31:3d:7b:c0:06:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:A8:F7:02:34:9F:F5:F3:97:54:DF:2F:86:1C:74:19:D9:74:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53799CDEB63211F0A5AB4987DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ed:09:45:e9:41:b4:6f:c2:a8:8e:88:49:5b:52:87:12:e1:
0e:2a:75:91:8b:b7:a8:21:92:bd:65:e7:ad:e2:c2:ab:6a:ca:
6a:ab:6d:c0:b5:9e:b1:81:51:68:2c:a3:42:8e:77:58:dd:e8:
20:7b:6c:26:5f:4d:d7:ae:0d:e2:b3:5d:39:3e:1b:f1:12:dc:
2b:09:56:7f:13:0c:c6:31:5c:ef:31:a4:40:ed:81:1d:80:4a:
b6:51:40:c9:1f:c0:9a:c6:88:5f:2d:b2:04:82:f9:66:d0:9e:
11:f4:e2:39:5e:58:40:e1:9a:53:f1:85:ab:f7:d3:47:0d:94:
58:ab:68:a9:8c:71:d5:d5:6a:bc:da:0d:5c:e0:74:d1:8d:0d:
3a:c6:9e:02:fa:ec:87:bd:8a:cd:9c:1d:8b:a8:39:56:aa:d6:
94:0c:64:25:10:e8:bc:b2:0e:e8:89:33:39:45:ca:92:e6:6f:
e2:7c:7c:d1:d8:f6:7c:39:05:a5:31:65:72:fe:db:ba:4a:3c:
7b:e2:ae:dd:96:cc:6d:85:1a:3e:75:9b:60:1d:4c:ce:13:41:
0b:9c:f8:bf:c8:99:88:22:fa:6c:09:5e:d2:88:b9:8d:59:a3:
e7:28:29:b8:2f:f6:8f:6d:ed:1e:15:18:cb:9b:af:a9:0e:82:
b6:ec:2c:95
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYQmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDMxMDgxOTI3WhcNMjUxMjA5MDgxOTI3WjAYMRYw
FAYDVQQDEw02OTA0NzExNC0wYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApOFjDdXJJ4iKjITUbeu1hjQ93x5HBJ6UDlx3zo2wM+b5JdBqmO1bj/Ly
2AFbEKU6OBfwZj/i7Kp5F8DVg4NmAJR0DC+Vm/k+LW+Ht2D167ag7OmzU7LvWhpH
FecLyaG/vXIu4Ll10o7e5XPaOrH8ROaXJZIr6CoOcnrSjX0RnsnBHN1wOauz8Hnk
nawKwemOZdFTvLWzyCfnv4MhwrW5sWjA0IXpA9qCGbK9X1ijeAhBoHs96sHeWbgb
yv4JKiK5QcMnNytb7tP2gJmpOOBXK2YxEbwVE48uMDeMM+jkE5w4pyNQsaicHNBu
TNTu0nLzHLMNl4Oye3HaMT17wAa17wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGMB
qPcCNJ/185dU3y+GHHQZ2XTOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Mzc5OUNERUI2MzIxMUYwQTVBQjQ5ODdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP0BMA0GCSqGSIb3DQEBCwUA
A4IBAQBm7QlF6UG0b8KojohJW1KHEuEOKnWRi7eoIZK9Zeet4sKraspqq23AtZ6x
gVFoLKNCjndY3egge2wmX03Xrg3is105PhvxEtwrCVZ/EwzGMVzvMaRA7YEdgEq2
UUDJH8CaxohfLbIEgvlm0J4R9OI5XlhA4ZpT8YWr99NHDZRYq2ipjHHV1Wq82g1c
4HTRjQ06xp4C+uyHvYrNnB2LqDlWqtaUDGQlEOi8sg7oiTM5RcqS5m/ifHzR2PZ8
OQWlMWVy/tu6Sjx74q7dlsxthRo+dZtgHUzOE0ELnPi/yJmIIvpsCV7SiLmNWaPn
KCm4L/aPbe0eFRjLm6+pDoK27CyV
-----END CERTIFICATE-----
Generated at Tue Nov 4 03:18:12 2025 by rpki-client