Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F982C93A811F0BFF42BC6DAE4EC9C.roa
File: 634F982C93A811F0BFF42BC6DAE4EC9C.roa (raw, json)
Hash identifier: OS3ARyY4e1zfvZbOAHZUWlqYLEbHhZu6h530IWIHrRU=
Subject key identifier: 83:1A:8D:E0:4E:22:2B:1E:EA:F1:94:C5:5D:10:4B:43:59:C8:62:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F982C93A811F0BFF42BC6DAE4EC9C.roa
Signing time: Wed 17 Sep 2025 09:26:28 +0000
ROA not before: Wed 17 Sep 2025 09:26:23 +0000
ROA not after: Fri 24 Oct 2025 09:26:23 +0000
asID: 134365
IP address blocks: 156.239.52.0/23 maxlen: 24
156.239.52.0/24 maxlen: 24
156.239.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97208 (0x17bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 09:26:23 2025 GMT
Not After : Oct 24 09:26:23 2025 GMT
Subject: CN=68ca7ec4-7fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:15:1f:0e:3a:5d:44:da:61:b1:3e:fb:82:
63:15:94:7e:e0:e1:1e:49:8a:74:d2:40:eb:1f:82:
8d:a3:88:f4:d8:44:12:be:6a:8e:29:68:73:0c:b0:
36:7f:26:b0:a7:0c:85:1c:ff:a8:9e:66:50:99:5c:
2b:be:e3:80:45:d7:fd:b6:f8:89:2e:6f:71:12:75:
56:45:32:e6:2a:cf:84:8f:37:97:12:8f:1d:39:3c:
ed:da:3c:9b:c0:61:df:ed:51:83:08:00:a3:01:09:
81:b4:76:5b:43:52:bf:b5:2c:57:1a:b1:6d:5b:6c:
09:8f:a5:c2:41:ad:b1:e2:b9:c9:fd:00:d7:dd:5c:
9a:31:08:3e:c0:d4:b6:c2:85:c7:19:44:42:7a:ed:
97:68:3f:d8:7f:91:b1:8f:6c:e9:b8:11:65:c3:5e:
9b:6e:dc:68:4f:e3:b0:fd:15:bd:da:8d:d7:42:67:
5c:5e:33:e6:30:b2:9e:4d:d9:fc:57:9b:bb:00:1a:
1f:c7:47:ef:f4:10:32:d3:61:5e:b3:d4:6a:df:12:
98:ff:c7:7a:6b:43:96:82:11:6d:49:1f:b1:70:d3:
1d:49:5c:25:4b:53:0a:9c:97:e7:ca:9b:ad:57:35:
6b:9d:50:49:78:6b:ef:18:68:df:ef:12:75:1a:ff:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:8D:E0:4E:22:2B:1E:EA:F1:94:C5:5D:10:4B:43:59:C8:62:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F982C93A811F0BFF42BC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:79:aa:b5:d8:d5:7f:37:8d:7e:98:ea:85:37:96:87:c5:d8:
ab:23:0c:34:b5:94:a1:e6:0f:50:e2:74:d3:d0:3b:6f:7d:c1:
81:6b:5b:83:d1:71:10:2f:2e:7a:11:2e:1a:22:07:9f:b9:8e:
02:25:f4:b4:ad:0b:93:a1:e9:14:10:7d:87:e9:94:ea:f3:ed:
a4:60:26:6a:ec:e0:f2:c4:42:53:4b:ab:63:fb:9e:2f:bb:cf:
a5:c6:64:ba:10:33:1d:f7:18:ba:10:dc:bf:6d:d3:42:17:ef:
1b:a1:3a:8b:33:9c:81:c5:7f:e0:19:21:1f:e3:77:bd:37:c5:
47:05:94:ac:f8:c4:43:ac:04:07:ec:81:7f:b6:e4:b8:0d:5a:
ef:a8:56:03:69:e1:e8:e2:62:35:b3:17:9f:f5:0a:87:61:a7:
aa:38:68:6e:cc:3f:98:dd:2f:5d:70:ea:eb:e8:25:59:85:00:
59:d4:1b:b5:fe:77:1c:93:59:ff:d3:3a:f1:df:62:f3:b7:05:
0a:25:33:49:87:b9:60:5b:db:a8:31:94:15:a0:ce:00:73:09:
c6:a5:3d:03:b0:9c:96:2d:87:48:9f:c6:5b:7f:cb:c2:69:aa:
9b:db:c3:e9:ed:8a:26:bd:a6:80:5e:d4:4a:66:b5:d5:c3:ec:
0e:6f:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:03 2025 by rpki-client