Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B404CF129D3F11F0A61A75D6DAE4EC9C.roa
File: B404CF129D3F11F0A61A75D6DAE4EC9C.roa (raw, json)
Hash identifier: lgLV6npJmG+3o9NVLkxESRrsM2EmH7D8A4ZTiXJWvUE=
Subject key identifier: 61:FF:93:0A:A1:BC:71:A3:D3:02:AE:3C:BB:3D:C7:46:A3:C1:FD:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B404CF129D3F11F0A61A75D6DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 14:22:18 +0000
ROA not before: Mon 29 Sep 2025 14:22:11 +0000
ROA not after: Tue 28 Oct 2025 14:22:11 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97727 (0x17dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 14:22:11 2025 GMT
Not After : Oct 28 14:22:11 2025 GMT
Subject: CN=68da961a-a908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:a2:fc:73:3c:a8:e1:71:a6:1f:f0:dc:b9:
b2:f1:6c:e9:1b:f0:87:4a:40:b0:12:2d:0f:75:d6:
da:09:81:cc:d8:6d:13:a4:d6:52:0f:1d:31:0e:ed:
b0:5f:6a:11:c9:80:72:86:36:cd:17:6c:0c:ae:40:
ab:1d:6b:8e:14:d4:02:d6:b5:3e:fe:2d:0d:37:ab:
16:bd:84:05:59:88:13:3f:28:6f:b4:9e:59:ba:2f:
9f:4f:59:2e:be:cc:2f:4a:60:88:a0:8b:7d:8d:88:
61:9c:05:1b:db:47:9a:4a:2d:b9:67:fd:60:e9:f0:
00:fa:33:27:6c:26:03:b3:42:4f:35:7f:82:d8:c2:
8e:6b:f8:3e:36:44:8c:72:6a:05:a3:ee:c0:3a:b1:
39:26:5a:6e:f0:35:8a:33:79:23:e4:ac:31:62:3d:
c9:a5:8b:c3:3e:64:2d:1a:cc:c9:41:87:00:51:7d:
4f:07:3a:ad:71:66:38:1c:d8:77:5c:83:d8:80:e7:
3a:f3:db:12:39:cc:a6:89:23:50:e3:06:4e:36:85:
44:0b:9d:c4:2e:d8:3f:e9:c9:77:68:9d:d6:cc:3f:
db:ea:65:2e:72:6b:bc:bf:84:94:ed:fb:cf:9c:b1:
23:c1:ca:dd:82:b3:3a:85:fb:0e:fc:f7:15:02:2b:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:93:0A:A1:BC:71:A3:D3:02:AE:3C:BB:3D:C7:46:A3:C1:FD:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B404CF129D3F11F0A61A75D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
156.246.128.0/23
Signature Algorithm: sha256WithRSAEncryption
18:d5:32:88:99:fb:e9:a6:d2:15:2f:aa:bd:1e:00:77:34:26:
50:1d:d2:51:e1:49:6d:f9:6a:c2:ad:9c:06:c6:8f:c4:b9:cd:
f4:1d:33:99:e7:a1:8f:75:68:54:0a:8f:4a:ee:54:a7:de:17:
38:71:84:f4:de:57:52:73:a6:54:44:83:14:de:d8:b0:05:a5:
e2:5e:a9:17:2f:24:d0:67:97:6b:e0:18:52:51:3c:70:75:45:
ae:81:77:fb:f4:7c:ce:84:e7:fc:68:5d:80:b2:df:9b:92:2f:
3d:b6:96:91:a0:c0:07:3c:e4:a9:f0:e2:4b:6d:b9:17:75:02:
67:43:d9:57:99:80:00:f8:5c:a9:bd:77:9a:b2:c5:f7:18:75:
46:8b:ae:9b:83:1b:07:09:bd:25:45:0c:c8:ab:95:bc:e7:81:
86:be:a2:6a:69:02:f5:4f:8e:22:e5:b1:1a:b7:17:e1:e5:f0:
6b:24:19:e4:c1:4d:78:1e:c6:13:ca:17:1b:39:56:aa:d5:cf:
ef:f3:9e:b8:bd:db:c9:26:84:3c:fb:f0:36:3a:4d:f7:8d:66:
5c:9c:24:7c:0b:e3:fc:ea:69:59:05:8b:26:93:65:d5:87:bb:
9a:e8:48:14:18:82:34:c9:8a:04:b1:08:3f:dd:29:02:e4:bd:
c7:e9:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:50 2025 by rpki-client