Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC95AEE94AC11F0BF9D0BD0DAE4EC9C.roa
File: 9BC95AEE94AC11F0BF9D0BD0DAE4EC9C.roa (raw, json)
Hash identifier: +on4nxW+khDgxT7hE8iRa/IsylbznI/sMiFuy8xa6Qk=
Subject key identifier: 38:4C:21:E9:85:59:8D:CC:67:6C:28:0C:8B:E4:84:0C:0F:9C:C8:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC95AEE94AC11F0BF9D0BD0DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 16:29:12 +0000
ROA not before: Thu 18 Sep 2025 16:29:07 +0000
ROA not after: Sun 16 Nov 2025 16:29:07 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97296 (0x17c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 16:29:07 2025 GMT
Not After : Nov 16 16:29:07 2025 GMT
Subject: CN=68cc3358-bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:8d:30:15:98:5f:af:5e:c2:5a:42:a8:c2:
8f:be:be:a2:75:05:30:20:a7:74:5c:cd:04:0d:ac:
b2:56:75:0e:03:cc:4c:f9:35:79:24:fb:3e:71:05:
81:30:42:fd:46:b8:03:a7:b8:08:5e:30:b7:9b:30:
1e:d9:5d:fe:2e:a4:a1:0e:c2:9c:a7:8b:69:f7:0a:
e9:c3:c1:a7:66:c4:38:1c:9c:a6:11:54:01:0c:b4:
22:80:8f:53:47:a8:db:65:f9:85:12:8c:6e:a2:f3:
93:1c:ff:95:62:bf:60:87:e3:18:6b:e7:12:2b:17:
b9:6c:57:a2:3f:a0:60:ba:60:d9:c8:c5:11:fd:f7:
72:83:26:f8:f5:4d:fe:b8:da:7b:8c:65:64:a6:69:
a6:21:17:98:29:23:e3:c7:e8:cf:7e:d1:5d:62:99:
cc:95:be:af:3e:1c:83:51:37:87:f2:7c:56:c3:35:
d1:8f:39:89:e4:68:8b:bc:96:d0:a8:f0:23:c0:14:
91:64:4f:be:86:bb:5c:ad:aa:a2:e2:67:3d:e3:65:
a4:2c:dc:ac:90:41:ff:ef:51:ea:cd:a4:20:8b:8d:
54:86:24:7d:7b:b1:d9:d1:cf:23:ee:31:25:b2:8a:
28:f6:b5:2a:19:6b:62:1d:e2:02:61:b4:8d:ad:77:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:21:E9:85:59:8D:CC:67:6C:28:0C:8B:E4:84:0C:0F:9C:C8:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC95AEE94AC11F0BF9D0BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
af:f3:8a:75:fe:10:60:31:fc:57:f2:d2:85:4e:ed:47:3e:1f:
11:92:35:c8:76:3e:7d:70:5b:cb:49:6d:3e:b9:95:68:3d:54:
b9:33:68:2b:18:34:81:e8:ab:66:29:f0:64:b9:91:37:c8:99:
f0:d6:38:a0:09:70:c7:e9:da:8f:dd:8d:3e:df:a7:3c:ea:ee:
6c:46:d9:a1:11:89:30:a8:1f:21:a4:db:87:3b:a3:7f:5d:73:
2a:12:56:10:6a:d2:bb:e5:1a:5d:a8:3a:7b:eb:ac:83:57:10:
af:d1:6c:77:b3:06:00:6d:b9:56:bc:21:28:da:24:2c:da:5b:
cd:3d:7a:51:97:1a:30:a6:5b:fc:b7:48:e2:dc:9b:65:72:20:
87:41:13:11:72:ae:88:eb:da:58:e7:4c:e8:57:c4:03:a0:21:
30:94:8d:49:f1:c3:64:2f:30:47:07:9a:92:2a:75:10:81:d4:
e5:49:e3:29:25:71:37:8a:14:d1:a7:d7:6d:a6:34:d3:66:8b:
d5:a9:ca:63:cb:61:72:b5:49:0a:45:f3:c6:e9:c6:e0:c8:21:
31:a6:44:f6:d3:c6:5a:42:99:a8:c3:cc:68:26:09:79:fa:b7:
f1:61:28:c9:14:02:11:0e:23:20:d9:28:27:a8:6c:db:3c:cd:
02:f2:39:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXwQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE4MTYyOTA3WhcNMjUxMTE2MTYyOTA3WjAYMRYw
FAYDVQQDEw02OGNjMzM1OC1iYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsjKNMBWYX69ewlpCqMKPvr6idQUwIKd0XM0EDayyVnUOA8xM+TV5JPs+
cQWBMEL9RrgDp7gIXjC3mzAe2V3+LqShDsKcp4tp9wrpw8GnZsQ4HJymEVQBDLQi
gI9TR6jbZfmFEoxuovOTHP+VYr9gh+MYa+cSKxe5bFeiP6BgumDZyMUR/fdygyb4
9U3+uNp7jGVkpmmmIReYKSPjx+jPftFdYpnMlb6vPhyDUTeH8nxWwzXRjzmJ5GiL
vJbQqPAjwBSRZE++hrtcraqi4mc942WkLNyskEH/71HqzaQgi41UhiR9e7HZ0c8j
7jElsooo9rUqGWtiHeICYbSNrXcSvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDhM
IemFWY3MZ2woDIvkhAwPnMh0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QkM5NUFFRTk0QUMxMUYwQkY5RDBCRDBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQCv84p1/hBgMfxX8tKFTu1HPh8RkjXIdj59cFvLSW0+uZVoPVS5M2grGDSB
6KtmKfBkuZE3yJnw1jigCXDH6dqP3Y0+36c86u5sRtmhEYkwqB8hpNuHO6N/XXMq
ElYQatK75RpdqDp766yDVxCv0Wx3swYAbblWvCEo2iQs2lvNPXpRlxowplv8t0ji
3JtlciCHQRMRcq6I69pY50zoV8QDoCEwlI1J8cNkLzBHB5qSKnUQgdTlSeMpJXE3
ihTRp9dtpjTTZovVqcpjy2FytUkKRfPG6cbgyCExpkT208ZaQpmow8xoJgl5+rfx
YSjJFAIRDiMg2SgnqGzbPM0C8jlP
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:12 2025 by rpki-client