Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AD0C98A4E611F0ADF4A37EDAE4EC9C.roa
File: 99AD0C98A4E611F0ADF4A37EDAE4EC9C.roa (raw, json)
Hash identifier: hu7YmDMpwxn2R33XZvH+3pNudnDrKjU0fBRjAUJ1dDU=
Subject key identifier: DA:53:65:64:53:5A:8A:8F:FA:82:70:4B:3A:13:50:9E:31:45:BE:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AD0C98A4E611F0ADF4A37EDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:04:38 +0000
ROA not before: Thu 09 Oct 2025 08:04:32 +0000
ROA not after: Wed 07 Oct 2026 08:04:32 +0000
asID: 151206
IP address blocks: 156.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98215 (0x17fa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 08:04:32 2025 GMT
Not After : Oct 7 08:04:32 2026 GMT
Subject: CN=68e76c96-2a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:90:01:88:e5:84:2c:31:5c:83:2c:f5:f2:
d7:cc:8c:4c:73:0b:ad:2e:8e:e4:38:1d:5b:53:db:
e8:f8:84:ae:69:7c:fe:51:dd:91:f8:f0:9b:72:bf:
c7:41:1f:ef:1e:80:70:e4:e1:b1:a0:a6:b7:53:b9:
54:4f:8c:4e:2b:a8:c8:22:fe:f8:f4:9f:7f:9b:c2:
e0:f6:c6:bd:9e:47:e9:d6:9f:38:9c:c1:9e:88:d0:
78:3e:1c:38:a8:74:35:f6:75:68:bb:2b:06:c6:69:
a3:02:f5:97:8c:d3:20:d7:be:aa:2c:eb:f9:a6:94:
3a:ce:e1:64:0f:39:64:0a:68:b9:9b:d3:2e:a5:9e:
db:1e:8a:0b:8e:4a:e9:34:17:ac:56:6f:3d:72:44:
27:92:e8:53:50:58:f2:9e:d9:73:c4:60:27:ee:3e:
57:13:b7:ef:7f:03:44:f9:d8:67:03:fd:34:64:01:
ad:8f:14:13:fc:c4:44:75:cc:d6:de:9f:2b:84:68:
37:78:da:50:f5:6d:f9:ba:0c:1f:38:85:62:e7:49:
c7:8d:c2:32:de:85:03:76:d4:d6:b3:9e:85:a3:eb:
80:16:ad:0e:a6:99:11:9f:3e:a1:6f:e9:d1:0e:99:
13:e5:0e:65:83:20:c6:ec:c7:7c:4d:e4:ec:d7:cc:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:65:64:53:5A:8A:8F:FA:82:70:4B:3A:13:50:9E:31:45:BE:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AD0C98A4E611F0ADF4A37EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6c:41:ae:39:a8:83:86:04:d1:6b:09:7c:d8:5e:9d:c5:a7:
c1:4e:c3:0d:62:f7:9c:29:18:59:ec:b9:7f:06:35:1c:06:7a:
d7:e6:0b:a4:a6:d6:de:cd:75:c4:67:a3:7b:7d:57:59:1f:28:
eb:cb:44:ec:21:9c:9c:fd:30:76:95:0b:76:7a:84:43:1f:4d:
d5:63:f4:88:68:df:c0:b3:07:a0:d4:a6:bc:bc:b3:cd:ab:0b:
fc:6d:28:02:38:49:2f:20:5e:c1:01:34:67:20:8b:02:12:a2:
9f:2b:e2:74:4e:a5:94:33:ee:2a:59:71:13:a9:f3:77:2a:e8:
38:c8:f3:e1:14:af:ac:09:3f:da:a3:5e:1d:41:12:e9:35:9b:
4d:64:be:b9:c6:3f:dd:73:a3:23:4c:35:30:ae:14:8a:0d:2e:
de:e5:ac:78:2f:7b:89:11:86:2e:a2:d7:f8:2a:22:cd:cc:46:
48:4b:40:02:d0:36:da:cd:c0:37:52:29:24:23:a0:82:ba:2a:
91:cc:20:d0:4b:2e:9c:7a:7a:c1:d9:37:a9:a8:16:6a:bf:b5:
e6:fa:19:08:93:2f:a3:c2:6b:c6:72:09:a3:d9:63:35:fd:37:
fc:32:88:c3:af:08:1d:19:bd:56:6f:78:d2:d2:f6:ee:65:29:
80:05:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:03 2025 by rpki-client