Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E236B6AA76811F0B22284B9DAE4EC9C.roa
File: 6E236B6AA76811F0B22284B9DAE4EC9C.roa (raw, json)
Hash identifier: weviCmsYdV/5CU8EcHCqbK/0+wrxJBkSWZvjjKj7lLM=
Subject key identifier: 24:9E:91:81:0B:94:89:82:D8:82:40:2A:04:CB:58:94:FF:0F:7F:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018022
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E236B6AA76811F0B22284B9DAE4EC9C.roa
Signing time: Sun 12 Oct 2025 12:39:02 +0000
ROA not before: Sun 12 Oct 2025 12:38:55 +0000
ROA not after: Sun 16 Nov 2025 12:38:55 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 32
156.247.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98338 (0x18022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 12:38:55 2025 GMT
Not After : Nov 16 12:38:55 2025 GMT
Subject: CN=68eba166-548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:32:e9:05:4c:b2:21:f5:9b:53:4c:21:49:
08:4d:c2:07:32:09:11:10:d9:09:ea:b2:b5:03:77:
95:cd:3e:2f:28:00:28:69:27:09:f9:b8:e5:e8:fb:
60:02:20:2a:ad:3b:80:a3:84:a7:52:a0:b9:f0:c2:
f8:5b:9f:40:1b:4f:d9:f4:0c:5d:d7:67:25:88:e0:
a8:20:06:7b:30:f2:02:bf:24:5d:aa:8e:72:38:02:
2d:69:ff:b5:f6:8c:0d:9a:33:8f:e9:d2:e3:cc:66:
2f:d9:56:ec:59:e0:b7:98:ce:49:f3:1a:bf:c6:1c:
89:b8:74:03:4b:80:13:03:c2:45:fe:7b:38:b5:59:
61:07:4d:10:6c:6e:55:bf:c3:c0:4a:17:bc:ff:36:
66:6c:94:98:48:85:a8:37:2b:51:06:7f:ac:08:f1:
f9:a8:b9:46:0d:c7:3f:01:38:ab:5a:30:eb:24:07:
48:7b:69:75:61:03:99:52:96:54:86:2e:11:1f:90:
82:f6:64:8e:ce:12:57:a0:fd:85:d3:e3:08:b8:34:
71:56:30:63:ad:b0:de:1c:c9:e4:db:24:4f:1f:98:
64:5a:da:bf:f6:dc:e4:15:c4:fd:90:43:16:f5:7b:
1c:b2:2b:ab:88:38:5f:f0:95:b0:9c:77:0b:03:fb:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:91:81:0B:94:89:82:D8:82:40:2A:04:CB:58:94:FF:0F:7F:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E236B6AA76811F0B22284B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
08:a7:19:d8:1a:1a:54:1d:79:7a:d7:69:97:5e:44:c6:a2:6e:
a0:d5:90:b8:fe:fe:53:23:b7:5f:b9:b8:57:45:bb:d4:44:14:
37:a8:9f:71:f1:e7:ec:6e:0b:1a:08:5a:37:f8:24:33:a8:15:
47:b9:55:6e:32:dc:44:2c:bd:56:96:23:e2:1e:11:8e:36:26:
c0:b3:5a:fe:ad:4f:f4:24:86:a2:f8:fa:22:ef:af:c3:66:85:
3d:74:2c:1f:5d:82:80:dd:ea:f2:0a:a9:b0:65:3b:f9:97:80:
cb:5e:de:82:02:99:94:65:a8:44:e7:ee:20:59:18:e2:3b:47:
45:fe:f0:e0:34:97:62:4c:c5:80:16:18:d4:7c:b6:eb:93:e3:
b9:17:49:5e:08:75:49:1e:c2:54:97:85:a0:38:6e:bb:f8:c3:
08:d2:1f:4f:66:e2:43:e8:e3:eb:bd:a1:1b:fa:db:ed:bd:e3:
9a:8f:cb:d8:45:7b:5d:1a:0e:ad:3c:a8:d8:cf:92:ff:42:ba:
e2:f6:00:f7:e2:78:eb:2a:d9:52:94:e0:a8:5a:9a:3f:22:19:
55:f6:94:58:21:1d:70:ca:28:bb:aa:04:22:3a:bb:94:82:3c:
bf:98:63:2f:c0:d7:99:c2:ab:a2:5a:65:a2:5c:c7:24:c2:90:
9a:c7:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:57 2025 by rpki-client