Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A209766A9F7D11F0A5D03BE1DAE4EC9C.roa
File: A209766A9F7D11F0A5D03BE1DAE4EC9C.roa (raw, json)
Hash identifier: t+MQHJPRSmyCjbUCjP+/MXUtC+P/Emu1eNWAybz/5y8=
Subject key identifier: 18:94:73:04:CF:DD:EF:7A:1F:98:7E:16:BF:6C:85:5F:DD:3C:A7:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A209766A9F7D11F0A5D03BE1DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 10:50:39 +0000
ROA not before: Thu 02 Oct 2025 10:50:34 +0000
ROA not after: Sat 11 Apr 2026 10:50:34 +0000
asID: 135419
IP address blocks: 156.236.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97916 (0x17e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 10:50:34 2025 GMT
Not After : Apr 11 10:50:34 2026 GMT
Subject: CN=68de58ff-3103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:8c:9e:a2:d0:cc:bb:8d:7d:50:b0:de:00:
88:53:d7:dc:64:2f:c7:75:e0:9d:41:3b:9b:05:85:
3d:b9:9a:bd:c1:66:52:c0:77:9a:81:58:09:32:ee:
3f:07:15:21:53:53:e8:d6:4c:c8:3e:2e:79:2c:12:
0f:76:b1:1b:b2:b4:23:74:d2:7c:bb:e8:74:13:3b:
d2:13:29:52:43:4b:a4:48:f8:db:a0:ea:96:82:45:
38:83:55:22:1f:27:04:3e:5b:20:5f:7a:f8:b9:91:
04:4d:46:ae:0d:c1:5e:04:bf:42:bb:8e:13:89:29:
47:fa:4d:e4:d4:69:13:75:66:d7:e8:ba:88:9c:cf:
ed:36:1d:cf:85:65:cf:70:3e:be:a0:63:99:15:27:
8a:6d:9e:05:f1:1a:29:f7:3e:a9:ec:93:a3:8e:79:
89:6e:9b:d2:bf:05:48:36:5e:a4:92:31:b2:2b:be:
bf:3e:13:8a:58:53:c1:30:25:eb:36:a4:63:f6:e1:
c7:b2:5e:6e:ca:ca:03:71:64:98:0d:f6:f8:37:e4:
88:94:bc:f0:42:e2:82:71:7a:61:c6:fc:62:e5:da:
ce:fa:2d:2c:3a:18:96:d1:10:8a:cf:8b:e9:eb:eb:
3a:cb:b8:c9:de:27:e6:47:75:46:d6:38:34:bb:0f:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:73:04:CF:DD:EF:7A:1F:98:7E:16:BF:6C:85:5F:DD:3C:A7:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A209766A9F7D11F0A5D03BE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1b:45:1c:87:22:20:fc:52:80:a9:7a:8c:83:f4:47:7a:11:
a9:e3:ab:92:3c:e5:db:a9:7c:a0:56:41:9f:64:db:87:db:c9:
62:d1:27:83:e5:69:65:84:fe:8d:89:72:68:9c:35:b0:e4:b8:
54:5d:d7:08:6f:f6:3d:34:d0:c8:a0:ea:5a:25:39:70:d9:ee:
d5:34:4a:6d:07:21:73:04:d2:16:b0:58:28:1b:79:e7:02:39:
a6:30:3c:ba:ad:dc:5b:85:2f:4a:ca:24:9e:5c:9b:30:28:71:
06:0c:b4:36:43:f3:78:9b:af:6a:9c:b8:73:95:08:a1:9c:27:
8a:f8:2b:76:cb:f6:f8:af:43:a9:03:f2:26:b3:9e:53:f9:8d:
58:cd:5e:a5:35:de:24:bf:4a:c4:34:80:4e:7a:ad:48:2d:48:
21:03:3c:e5:85:8d:2d:cb:fc:da:c1:98:cd:50:c4:3d:63:66:
ac:cf:89:90:24:ab:e4:9c:e3:1f:73:a3:e0:06:ee:43:b6:c5:
7a:d7:5c:e2:88:e6:3c:74:58:6d:b9:bc:04:e8:b8:2c:47:98:
00:b5:5a:05:0f:8d:05:88:02:ca:b8:f1:9c:51:62:ee:96:60:
61:cf:98:e0:bd:5a:d4:c8:11:97:fd:99:e7:eb:66:b5:01:37:
13:f1:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:47 2025 by rpki-client