Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3B72389D5D11F0B628CB96DAE4EC9C.roa
File: 8C3B72389D5D11F0B628CB96DAE4EC9C.roa (raw, json)
Hash identifier: z3F/6/qDh93dPmkpxcAJ9yRLySpDs14cr8yCJeZdKW8=
Subject key identifier: A8:E9:91:78:6C:C4:F4:E9:42:C1:B6:46:70:6A:02:11:95:13:D6:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3B72389D5D11F0B628CB96DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 17:55:56 +0000
ROA not before: Mon 29 Sep 2025 17:55:51 +0000
ROA not after: Fri 31 Oct 2025 17:55:51 +0000
asID: 214238
IP address blocks: 156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.241.40.0/24 maxlen: 24
156.241.42.0/24 maxlen: 24
156.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97751 (0x17dd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 17:55:51 2025 GMT
Not After : Oct 31 17:55:51 2025 GMT
Subject: CN=68dac82c-48e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:1d:37:13:5d:20:d7:32:8b:2a:6f:fa:61:
61:f7:86:09:e2:2b:97:e4:6a:7a:49:1f:87:7e:61:
14:4f:c1:06:7d:c2:0f:02:f9:07:b8:8d:e5:ee:19:
cc:3d:90:b3:aa:0d:0e:bd:59:86:6f:cc:93:2c:8d:
12:1b:6d:e3:50:98:d2:5c:bc:50:39:94:45:fe:48:
ae:b0:bf:5e:67:c1:a8:58:d1:a2:48:63:2e:b9:9c:
96:0b:35:65:28:6c:17:64:e0:57:16:86:55:de:2a:
f7:3d:1d:fe:a5:5b:65:0a:e6:cc:7f:26:ee:81:fa:
8e:21:55:b5:3e:d3:86:d6:d9:14:fe:04:ea:13:1e:
7b:3c:c2:2e:48:27:7e:1c:d8:15:d6:d0:06:6d:75:
71:20:ed:7c:95:b4:c0:28:96:fc:42:9b:f6:70:ef:
32:b1:ce:b9:98:a9:a2:13:38:22:69:b7:d4:88:6a:
70:0f:a8:f0:3c:a5:71:81:94:43:1b:70:af:de:cb:
7b:72:0a:b3:f6:4a:9e:c8:84:ea:c8:c1:ff:17:c3:
90:19:46:24:4e:7c:ac:f6:86:e5:85:6b:28:a9:35:
61:f6:45:04:73:8e:9c:b4:81:23:6d:41:99:c2:56:
3e:4f:b2:6a:e6:4f:be:2f:df:fb:09:18:76:e2:3d:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:91:78:6C:C4:F4:E9:42:C1:B6:46:70:6A:02:11:95:13:D6:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3B72389D5D11F0B628CB96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.21.0-156.239.22.255
156.241.40.0/24
156.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:ed:5d:3a:8f:f5:05:22:09:b5:24:15:39:61:ad:07:0c:82:
f7:4e:93:31:dc:9b:1f:99:42:37:43:58:91:2e:5a:b9:a9:81:
c4:7d:02:0d:50:1a:b4:9f:5f:59:da:dd:61:7f:05:e7:da:a4:
3c:c3:15:c8:da:6f:a5:df:e3:3c:f1:82:b3:8b:54:9c:e8:bb:
7c:3f:1f:68:c6:44:e9:9a:a7:65:f2:93:a4:5b:14:80:fc:0c:
33:53:59:45:5d:d7:8e:a6:c9:88:a6:fa:bb:45:26:e4:47:fb:
94:9d:29:09:43:e7:62:37:05:2c:1d:a4:52:8c:91:d8:84:2f:
1a:2c:16:63:86:2e:ea:34:0d:d0:b6:05:0f:63:24:b2:74:59:
97:cb:b7:bb:40:bc:6c:69:67:a2:60:22:32:10:53:6e:14:83:
52:b9:88:1e:dc:0d:0e:22:cd:1f:7b:bf:f1:8a:92:ed:61:d5:
52:94:59:d3:17:9a:07:4a:d6:83:71:69:25:58:b4:12:c2:eb:
40:2e:dc:3a:c2:24:b2:79:5e:68:a8:c3:00:62:6b:aa:e9:dc:
dc:f1:d7:f8:1b:fd:4f:02:a1:2a:89:2b:ee:f5:a2:56:1a:46:
5e:07:08:14:a8:9b:cb:26:10:a2:24:1a:0b:ad:7c:39:fd:f3:
01:86:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:10 2025 by rpki-client