Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBC9B489D7311F0818A60A0DAE4EC9C.roa
File: 6BBC9B489D7311F0818A60A0DAE4EC9C.roa (raw, json)
Hash identifier: XVt3885/cZhdjoeLhzbo2j1LYepjUod7q26HQAzhQYQ=
Subject key identifier: 18:4E:AD:EB:1F:61:DE:FD:59:FD:A4:CE:6D:0E:AA:8B:3B:61:DF:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBC9B489D7311F0818A60A0DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:32:31 +0000
ROA not before: Mon 29 Sep 2025 20:32:25 +0000
ROA not after: Mon 03 Nov 2025 20:32:25 +0000
asID: 395793
IP address blocks: 156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97783 (0x17df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:32:25 2025 GMT
Not After : Nov 3 20:32:25 2025 GMT
Subject: CN=68daecde-aae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:6c:13:be:f2:f5:e4:18:0f:51:b4:b5:32:
7d:bc:c3:aa:ef:7c:9f:8c:43:97:b1:5b:0f:35:c0:
bc:03:61:64:91:e7:30:22:6d:32:5b:2f:68:b5:a6:
8c:2a:49:b1:66:48:5b:78:d5:b6:77:f2:6a:67:ca:
9a:da:fe:aa:58:46:d5:1d:a4:60:75:11:ff:9e:2e:
ea:07:fa:f0:9a:97:a2:14:79:44:07:c5:08:87:c8:
ec:58:aa:88:88:53:2c:f1:9b:4a:35:cb:be:9d:5f:
8a:dc:bc:dd:3e:85:6f:83:ba:e9:6e:d2:7d:9d:90:
41:e6:8f:79:83:92:40:96:ae:e7:b4:e5:3c:84:2d:
b6:69:38:d6:7b:2d:73:cd:5b:33:e4:15:44:f6:77:
8b:30:7f:5f:7a:e3:25:13:db:80:fc:96:49:19:42:
15:08:da:49:66:90:16:72:df:87:ba:28:d0:b5:f0:
9e:b7:3c:75:4f:24:9d:b9:d8:d3:83:9f:ae:bc:93:
07:3f:48:4f:dd:3e:6e:c8:48:1f:3c:34:7d:c1:f0:
19:68:c5:28:41:1d:aa:6c:b9:86:83:d6:52:84:07:
0a:5e:9f:03:b5:e7:d5:b2:6e:65:53:a8:6d:de:5e:
1b:72:7b:d7:5d:b8:75:6c:d2:b6:bc:97:dd:5b:e0:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:AD:EB:1F:61:DE:FD:59:FD:A4:CE:6D:0E:AA:8B:3B:61:DF:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBC9B489D7311F0818A60A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6c:e3:10:e6:d9:48:e0:1f:9e:aa:5d:95:32:28:75:5b:a5:
d2:35:91:c3:be:87:e1:93:9a:fb:e5:ea:7e:f6:c5:62:77:5f:
d7:c4:38:56:dc:16:ef:07:46:c5:ea:e0:09:eb:9e:1c:05:47:
c2:62:b8:1f:4c:48:4d:f2:6c:3a:cb:03:74:f8:96:87:35:bf:
12:53:06:b3:53:ea:dd:c6:02:ff:de:0e:69:d2:ac:4d:dc:ce:
7b:80:af:3b:6a:44:bc:14:d3:d3:ab:cd:30:05:04:54:61:f6:
48:ca:2f:86:cf:1c:06:7d:1f:52:3c:89:8d:32:94:ab:28:b1:
c3:92:50:17:93:b2:b5:93:90:73:64:10:12:a5:8c:f0:43:17:
c8:87:5b:42:76:1b:b5:dd:9f:a0:73:62:af:6d:57:fc:ad:09:
f9:22:0d:70:34:cb:25:89:b0:9a:1b:46:a9:5d:68:a1:fa:53:
7e:76:cb:f9:7b:66:3b:73:be:7c:01:09:92:4a:5c:a6:f7:65:
59:eb:c7:6e:a1:5b:67:ab:bd:25:d2:af:c1:e6:58:28:f4:b3:
91:28:3d:17:8d:4e:0c:9c:d5:7e:79:66:1e:9e:90:dd:6b:e3:
c6:64:40:af:a0:98:2e:aa:5b:54:8d:9e:00:a8:c9:c0:d8:91:
fa:10:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:52 2025 by rpki-client