Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C236CB109AB711F082981979DAE4EC9C.roa
File: C236CB109AB711F082981979DAE4EC9C.roa (raw, json)
Hash identifier: gJD9TT+mkvvn3RHFHctZZAIe+EvFhmNw6KMplBCl9jA=
Subject key identifier: F8:13:5A:F9:F0:49:59:08:39:D2:56:6A:69:84:72:DB:8B:90:E8:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C236CB109AB711F082981979DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 09:04:08 +0000
ROA not before: Fri 26 Sep 2025 09:04:03 +0000
ROA not after: Sun 02 Nov 2025 09:04:03 +0000
asID: 23470
IP address blocks: 156.225.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97641 (0x17d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 09:04:03 2025 GMT
Not After : Nov 2 09:04:03 2025 GMT
Subject: CN=68d65708-245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:27:70:9e:a1:11:ba:7a:f2:cc:ba:7f:1b:aa:
51:dc:87:13:99:a4:30:47:21:88:68:96:56:6d:8a:
e1:ee:24:5b:6d:2f:73:a9:97:72:bf:e2:86:e9:3c:
7c:fc:42:a9:52:60:56:f8:72:eb:b3:60:80:bd:86:
2b:98:cd:b0:fb:19:91:8c:0a:5f:fb:ce:4d:22:5c:
8c:29:4c:f0:ba:20:b2:f5:40:e8:7f:55:87:8c:1e:
49:61:e5:62:ac:06:85:15:3f:0d:07:31:84:63:81:
7a:34:15:e5:4f:5e:7a:6d:d8:a7:4f:be:88:7d:d4:
15:c0:b0:57:f8:d5:df:53:1d:00:fb:c1:b3:14:bb:
a5:87:c5:3c:32:e7:38:f5:25:49:7e:16:9c:63:42:
cd:c4:77:07:65:a1:e5:90:43:73:88:14:54:02:39:
ed:61:24:4a:98:d4:73:1c:48:5a:11:94:f3:f1:2b:
c0:82:a8:09:05:2e:db:d6:bc:05:5c:3a:bd:6c:64:
99:df:a7:39:53:f5:f3:2d:59:72:05:82:fd:41:8b:
68:54:47:73:16:42:31:61:0a:37:ba:f5:56:87:d7:
76:1c:a7:85:b8:90:26:59:8d:18:13:ed:7e:62:d0:
92:f3:29:54:e7:8a:2f:89:23:22:1a:63:d9:e9:07:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:5A:F9:F0:49:59:08:39:D2:56:6A:69:84:72:DB:8B:90:E8:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C236CB109AB711F082981979DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
87:00:88:4c:51:df:a4:7c:95:6b:6b:83:88:99:92:1e:bb:36:
57:57:aa:87:09:f5:4b:9b:a3:7f:00:59:75:55:db:5b:87:39:
b5:ce:00:0d:ea:bc:83:61:d5:31:1c:6e:ba:f7:80:66:cb:dc:
01:c7:c5:a9:82:0d:37:69:2c:41:ee:e0:47:d0:d2:91:89:9e:
db:66:cb:55:b5:34:71:ba:ae:c0:fc:4b:8d:ca:a6:fe:00:15:
3d:5a:85:8d:21:d9:b3:6c:47:5b:70:fb:97:f9:37:9c:24:ac:
7f:8f:30:4e:91:5f:a5:4d:ea:e2:a4:ca:f2:2a:9a:b0:e5:05:
1d:d0:0c:b6:4f:68:8c:b8:f6:75:f5:e1:9a:3f:0e:11:83:ca:
63:ba:4a:f2:6e:ba:f9:94:11:3b:04:85:52:4d:cf:eb:6f:ce:
8b:39:67:42:43:9f:20:b1:c5:b1:27:bc:04:af:cf:17:f7:11:
ac:d6:59:de:8c:79:28:55:20:b2:7e:30:32:f5:0e:17:2c:ae:
c1:24:3f:53:ee:e1:af:f9:6f:da:e6:6d:f0:a4:34:fd:07:40:
c7:56:66:ad:90:b2:c9:c4:68:ea:fb:48:6e:c4:79:8c:1a:52:
95:07:f8:ed:ab:0d:5e:5f:6d:2d:82:91:fa:68:ff:46:2f:da:
51:62:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:04 2025 by rpki-client