Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63B1FD70996411F0B59DFAD5DAE4EC9C.roa
File: 63B1FD70996411F0B59DFAD5DAE4EC9C.roa (raw, json)
Hash identifier: qgapdGCdQM75UuR5mj7AA+Ls3j0b9e9bU33m4lpNTOE=
Subject key identifier: 2C:DF:D4:6F:01:09:A1:7B:39:8D:18:38:17:FC:7B:78:EB:74:73:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63B1FD70996411F0B59DFAD5DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 16:34:50 +0000
ROA not before: Wed 24 Sep 2025 16:34:45 +0000
ROA not after: Wed 29 Oct 2025 16:34:45 +0000
asID: 20473
IP address blocks: 156.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97525 (0x17cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 16:34:45 2025 GMT
Not After : Oct 29 16:34:45 2025 GMT
Subject: CN=68d41daa-de95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:66:ba:75:93:b2:53:58:16:e9:b3:8c:08:
90:2c:b8:61:67:78:e8:30:13:80:10:75:9d:e9:e7:
c7:0d:58:5c:3b:3a:68:03:ed:7b:87:0c:85:dc:9e:
6d:e8:58:a5:dc:8e:c0:a1:5e:50:57:e0:11:9e:32:
5c:d6:ac:7f:46:f8:b0:08:39:41:af:a0:c7:03:25:
1b:e2:00:fe:69:2a:96:78:5f:de:ff:f3:4b:aa:f5:
75:7f:a5:a6:c6:30:2b:b2:05:82:42:35:bd:9a:d2:
a4:67:cc:e7:6c:e4:60:d7:50:8b:9d:f1:bf:34:40:
cc:e3:ab:ee:13:22:a4:63:7f:15:85:b4:c9:6e:66:
68:7a:03:84:37:0f:c1:7c:79:30:8e:71:37:2f:72:
3c:77:80:d0:d8:6c:bf:51:cf:7d:c9:fc:70:0f:1c:
d8:bd:10:38:72:12:2f:1c:bb:f1:57:d8:cc:84:1a:
0a:ba:2f:9d:4c:37:eb:bd:10:72:12:ab:5a:89:7d:
e0:20:7d:c5:93:28:2f:ef:5c:13:60:01:72:e0:56:
14:5c:f0:89:8b:ef:4a:e3:05:07:5e:a7:bd:ae:ac:
5e:f7:0d:01:e1:6a:52:2a:ca:ba:13:bd:d5:64:74:
63:78:c6:b6:3f:c8:bc:aa:25:a7:57:1a:38:2b:c1:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:D4:6F:01:09:A1:7B:39:8D:18:38:17:FC:7B:78:EB:74:73:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63B1FD70996411F0B59DFAD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bd:ed:5a:65:1b:fd:09:87:64:b3:65:08:13:48:51:48:40:
f3:d6:b6:13:81:34:d7:a5:96:63:d8:fd:e3:91:cb:15:fd:a6:
7f:0a:78:ad:85:53:b4:70:9d:97:b0:65:62:67:28:16:fc:6c:
c9:0c:66:3a:c6:64:f5:f3:06:52:3e:54:9c:43:b9:20:43:77:
ec:33:4e:12:ed:cd:41:22:0f:e3:0b:ca:bf:fd:13:7f:c6:77:
91:e2:51:51:9f:93:c0:87:51:e4:4c:61:20:f1:54:f5:05:64:
ac:05:6a:34:43:02:86:2c:a8:35:2f:53:e5:56:14:47:72:df:
a6:8a:53:6d:40:d3:02:8d:79:69:4d:23:e4:f0:b0:d1:95:8f:
ce:1e:ef:40:a1:68:89:b4:5f:a5:f7:25:3b:e0:32:7f:42:a5:
3b:fe:ca:d6:3b:44:26:b9:99:d0:9c:d6:e9:e8:fc:8f:90:d2:
59:3f:b0:96:3f:a7:cc:9b:3b:59:e8:ef:c1:00:ed:8c:f2:55:
ef:71:1a:10:20:63:65:91:58:a4:45:79:86:cd:e8:30:82:ef:
e3:93:bb:4b:28:31:f9:5d:7b:89:fc:ea:23:6e:fa:27:a1:f8:
29:d4:2e:25:a0:d2:d9:11:66:a7:d8:c4:6b:7c:f3:de:ca:dd:
9d:b9:4a:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXz1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTYzNDQ1WhcNMjUxMDI5MTYzNDQ1WjAYMRYw
FAYDVQQDEw02OGQ0MWRhYS1kZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtNlmunWTslNYFumzjAiQLLhhZ3joMBOAEHWd6efHDVhcOzpoA+17hwyF
3J5t6Fil3I7AoV5QV+ARnjJc1qx/RviwCDlBr6DHAyUb4gD+aSqWeF/e//NLqvV1
f6WmxjArsgWCQjW9mtKkZ8znbORg11CLnfG/NEDM46vuEyKkY38VhbTJbmZoegOE
Nw/BfHkwjnE3L3I8d4DQ2Gy/Uc99yfxwDxzYvRA4chIvHLvxV9jMhBoKui+dTDfr
vRByEqtaiX3gIH3Fkygv71wTYAFy4FYUXPCJi+9K4wUHXqe9rqxe9w0B4WpSKsq6
E73VZHRjeMa2P8i8qiWnVxo4K8HmCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCzf
1G8BCaF7OY0YOBf8e3jrdHMXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0IxRkQ3MDk5NjQxMUYwQjU5REZBRDVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOSpMA0GCSqGSIb3DQEBCwUA
A4IBAQAave1aZRv9CYdks2UIE0hRSEDz1rYTgTTXpZZj2P3jkcsV/aZ/CnithVO0
cJ2XsGViZygW/GzJDGY6xmT18wZSPlScQ7kgQ3fsM04S7c1BIg/jC8q//RN/xneR
4lFRn5PAh1HkTGEg8VT1BWSsBWo0QwKGLKg1L1PlVhRHct+milNtQNMCjXlpTSPk
8LDRlY/OHu9AoWiJtF+l9yU74DJ/QqU7/srWO0QmuZnQnNbp6PyPkNJZP7CWP6fM
mztZ6O/BAO2M8lXvcRoQIGNlkVikRXmGzegwgu/jk7tLKDH5XXuJ/Oojbvonofgp
1C4loNLZEWan2MRrfPPeyt2duUpQ
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:46 2025 by rpki-client