Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81F5CDFE8A5D11F0A50C57D8DAE4EC9C.roa
File: 81F5CDFE8A5D11F0A50C57D8DAE4EC9C.roa (raw, json)
Hash identifier: wqP/WSpLWE+XAbczlEpMpuoZknbMwpJsEWggRjGMyMc=
Subject key identifier: FD:C5:10:E6:A1:11:0D:05:AD:4D:D4:9E:C0:FB:5B:38:1E:0A:BE:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01792D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81F5CDFE8A5D11F0A50C57D8DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 13:37:47 +0000
ROA not before: Fri 05 Sep 2025 13:37:41 +0000
ROA not after: Fri 02 Oct 2026 13:37:41 +0000
asID: 135600
IP address blocks: 156.249.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96557 (0x1792d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 13:37:41 2025 GMT
Not After : Oct 2 13:37:41 2026 GMT
Subject: CN=68bae7ab-f0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:ec:0f:df:9f:9e:ee:a1:0d:9e:e6:68:14:
1e:f0:44:f6:50:66:3e:53:9e:3a:74:3b:7a:4f:09:
cc:3c:34:ee:af:82:7a:6e:57:6a:a2:77:1f:ce:16:
0b:b3:77:c6:eb:c6:c1:07:34:9e:c9:36:11:9a:75:
3a:3f:74:98:01:09:24:f8:3b:b6:43:2c:09:83:41:
f5:ed:47:b5:9f:52:c1:c5:ff:d2:ec:9e:81:3d:52:
ae:14:db:cc:72:83:6e:a5:d0:df:1d:09:96:8c:b9:
21:e5:ff:8f:a2:fa:43:f9:3f:d6:be:a6:48:75:fd:
ba:99:49:3f:d4:d5:7d:bc:22:b6:94:d4:ab:96:23:
8b:60:37:75:40:ab:19:96:84:46:ec:54:2b:e4:53:
16:55:3a:6e:d2:86:79:1b:86:b6:fd:c4:ea:ca:31:
8b:40:bf:f2:cb:b1:e8:f0:c2:d9:39:b4:75:19:56:
d6:a2:ab:62:0c:ad:3e:70:2e:bb:c8:9e:67:f1:c4:
df:d1:7c:2c:e3:23:a1:97:83:03:57:0c:96:1e:e1:
20:95:e4:92:76:ca:3e:bb:ac:f1:67:71:91:52:a1:
01:b2:9e:bd:bf:33:7d:17:ff:13:47:90:18:31:ec:
35:a0:92:f9:fb:43:c8:e7:04:86:2f:8a:e7:56:1c:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:10:E6:A1:11:0D:05:AD:4D:D4:9E:C0:FB:5B:38:1E:0A:BE:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81F5CDFE8A5D11F0A50C57D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.8.0/21
Signature Algorithm: sha256WithRSAEncryption
91:89:dd:cf:c7:5a:34:5b:2d:51:56:68:2f:29:f4:2b:47:37:
32:b1:fa:68:2b:e3:56:05:01:bc:da:0f:9c:fc:32:e9:22:f4:
16:e0:a6:e1:91:14:fb:c5:fc:52:25:f9:81:82:21:7c:9d:27:
e4:bc:bd:ed:85:a7:b2:f2:34:54:a1:6b:06:6b:a4:53:9b:d6:
ac:ea:47:d1:b8:34:47:6d:67:f8:02:99:bb:0e:d1:0c:1a:74:
8a:68:b5:55:78:8a:b6:e9:e4:fe:44:6c:ec:91:24:ed:57:b1:
25:55:a0:3c:e4:f8:1e:7f:49:e7:10:df:19:f4:a6:23:52:ff:
d2:bb:eb:4a:85:93:31:67:c0:2d:9c:15:c3:8e:1f:10:94:96:
f6:9b:76:ff:40:0a:88:00:fe:9c:c2:c2:62:0b:0f:c4:ed:d3:
eb:dd:25:c5:07:a3:bd:c8:7b:33:38:95:7a:e7:d5:a4:f6:65:
63:8e:46:f4:47:7c:f2:2a:4c:a2:31:1f:59:9e:be:d1:3a:f4:
62:78:77:34:b6:9c:7f:45:a8:44:97:9c:9c:71:9e:d4:c6:3b:
1f:ff:6b:a3:6f:5e:fc:41:ad:68:c2:34:b1:aa:17:fc:ab:20:
95:7e:17:40:51:ea:30:d1:69:3c:c8:8d:72:08:95:6b:19:37:
54:33:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:41 2025 by rpki-client