Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C36EB230A76A11F095C2D5C8DAE4EC9C.roa
File: C36EB230A76A11F095C2D5C8DAE4EC9C.roa (raw, json)
Hash identifier: BdpPdgMSpKwrQXOVCvBSJcqRiyQ2IEnETOtiEGc9lto=
Subject key identifier: 09:82:7A:D3:79:1F:9E:E5:C6:FD:00:1A:FE:33:A1:EB:AF:5F:DE:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01802C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C36EB230A76A11F095C2D5C8DAE4EC9C.roa
Signing time: Sun 12 Oct 2025 12:55:44 +0000
ROA not before: Sun 12 Oct 2025 12:55:39 +0000
ROA not after: Thu 27 Nov 2025 12:55:39 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98348 (0x1802c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 12:55:39 2025 GMT
Not After : Nov 27 12:55:39 2025 GMT
Subject: CN=68eba550-5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:44:1b:d0:ff:da:1a:b3:0c:6c:4b:ca:3d:
0d:97:a6:37:42:03:f1:7b:2d:07:b0:61:79:f2:e5:
d3:94:2f:46:0a:6f:b9:cf:a8:71:ea:8f:25:ac:da:
f2:ef:bf:27:1d:3a:22:87:e6:83:fa:f4:48:ac:71:
00:78:fb:a8:d8:e0:d0:fc:fc:1f:23:36:0b:c6:24:
b7:b2:f1:48:23:78:f4:c0:94:c5:9e:86:b7:ee:cc:
58:db:66:5e:85:1a:56:45:9a:dc:f8:c2:05:34:40:
c7:d3:da:e2:3f:07:bd:6d:88:80:d5:8b:d6:cd:cc:
d0:00:2a:a3:2d:61:69:c0:62:e0:10:ca:5e:54:de:
ff:3f:e6:3e:26:6a:3c:d5:a8:5e:ec:86:9b:c7:d7:
3e:2f:e1:80:5c:27:4b:1c:5f:ff:b7:5c:02:b0:1d:
62:84:86:6f:41:bc:a7:cc:7d:77:ad:6a:2a:7b:c1:
0e:a1:6e:44:59:b7:66:36:1e:51:fd:a4:0e:c1:43:
6c:18:dd:d0:a7:dd:da:f0:cf:0f:4b:6a:80:b7:87:
96:0a:e0:37:c5:2a:9f:ab:f3:75:05:22:0a:f7:10:
25:9e:03:38:f5:25:26:cf:a0:8f:97:f5:f0:69:b0:
2d:52:d8:c6:9c:82:bd:1d:de:20:74:2c:cd:05:3b:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:7A:D3:79:1F:9E:E5:C6:FD:00:1A:FE:33:A1:EB:AF:5F:DE:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C36EB230A76A11F095C2D5C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:be:72:ce:a2:77:88:ce:fa:7f:e0:53:0a:60:9b:a7:ee:14:
f7:84:4b:20:c7:af:e3:54:9f:07:fc:04:26:1e:12:da:55:88:
13:62:f5:bc:ad:af:7b:df:eb:d1:56:1e:2d:45:dc:b0:5e:df:
d5:b3:0f:e9:ca:9d:16:37:48:a5:05:f9:b2:1a:05:84:33:27:
26:b4:e3:04:67:48:ff:36:5f:d7:1a:43:8e:5a:21:3d:53:1a:
ff:b9:8f:c6:93:e3:91:63:7d:90:da:ff:a9:d2:ea:c0:dd:da:
23:42:c5:3a:67:08:88:12:1d:17:e0:f1:fd:45:86:ad:0e:78:
8e:db:18:55:4b:bc:14:e1:03:ae:3f:99:b2:a7:d2:c5:5c:9f:
9e:d3:68:99:d5:a8:62:25:29:84:07:ee:f0:0e:fa:b4:e4:0e:
13:ff:4c:44:af:9b:fb:a1:fa:ca:a9:ef:d5:15:d2:b0:92:45:
33:46:12:58:26:ba:0a:7d:aa:a9:59:d4:f8:24:35:98:05:2f:
b4:09:9f:25:aa:5b:af:7c:be:77:b1:51:a3:5b:ad:67:a2:c6:
c1:2e:f0:d3:33:58:d0:4b:e9:28:12:43:8c:f9:c2:05:29:ba:
dd:7f:f6:90:06:b6:39:03:c7:01:77:5c:e2:d7:ce:00:3b:95:
ab:bd:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client