Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C788CC2CA9B111F0A3EE5FF4DAE4EC9C.roa
File: C788CC2CA9B111F0A3EE5FF4DAE4EC9C.roa (raw, json)
Hash identifier: Q79MscBPX3QL1BzWwBc2vtmXqCDDhOEZB3t/GeC3GDE=
Subject key identifier: DA:88:7B:77:26:2E:D6:B2:A1:5A:1E:4D:CB:07:56:CA:2F:99:87:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C788CC2CA9B111F0A3EE5FF4DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:29:07 +0000
ROA not before: Wed 15 Oct 2025 10:29:03 +0000
ROA not after: Tue 28 Oct 2025 10:29:03 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98483 (0x180b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:29:03 2025 GMT
Not After : Oct 28 10:29:03 2025 GMT
Subject: CN=68ef7773-0c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:63:c0:89:f2:9c:fb:ff:f9:da:0a:a6:7e:
8d:55:7f:c7:e8:cf:15:9c:2e:31:03:d8:12:15:2d:
40:75:97:d9:2c:05:33:e4:66:b0:d0:50:29:bc:4d:
00:4c:57:44:ec:87:22:4d:8d:3d:5f:f0:9c:3e:3e:
43:fb:9a:db:4c:6b:20:f0:a8:05:f6:e4:1b:bb:92:
03:7a:81:52:45:5c:18:c8:7d:67:f9:91:f6:4d:17:
9e:71:05:ff:ab:4c:f8:a9:01:2f:fe:c1:a6:b8:77:
68:af:57:ca:76:f7:4a:11:2f:cc:a2:8e:bb:60:18:
c9:66:42:bd:78:e6:3c:ba:5c:59:a4:db:e0:f6:96:
8b:5e:84:16:14:ec:e3:f7:35:fb:ab:3d:b9:d3:3b:
6e:3e:e9:24:34:78:31:46:b7:f8:e7:6b:cd:d6:be:
0c:10:ae:06:67:e9:e0:68:65:6a:78:b4:2b:d1:f7:
df:4b:a6:71:2c:30:99:dd:b4:10:b5:4c:6a:d0:9f:
05:7b:d9:a4:b0:d4:bc:68:4e:d7:1c:3b:87:e9:94:
19:0f:7e:1c:20:94:a4:1f:2d:ca:55:62:82:fc:cd:
3b:0e:3b:c3:40:69:85:8d:c3:d2:81:c5:50:d9:84:
9c:ee:9e:68:2f:ad:3f:c4:28:e9:0b:bc:ae:af:f9:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:88:7B:77:26:2E:D6:B2:A1:5A:1E:4D:CB:07:56:CA:2F:99:87:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C788CC2CA9B111F0A3EE5FF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
03:23:9e:bd:ac:29:ff:46:dd:3c:9e:e9:c0:0b:d8:1e:4e:d4:
a7:e4:c5:06:fa:6d:23:9c:7f:63:71:8d:db:34:fa:4c:73:ec:
32:31:90:99:b8:2c:46:0b:05:05:d2:1c:5f:3c:8c:ab:46:b7:
18:12:ca:99:96:3e:a5:14:9c:3d:09:1a:4d:83:b9:b0:f4:13:
76:1e:e1:18:73:bc:e3:2a:00:4a:df:72:eb:c0:8d:d0:6c:3b:
8e:31:7f:62:59:4c:bc:6a:ad:52:5f:88:84:59:cd:d5:da:60:
c3:db:9b:d9:d1:92:92:71:55:4f:08:6c:1e:ce:df:41:3a:e7:
f5:46:2a:1f:6a:21:15:4b:92:bb:ee:02:55:2d:06:f7:11:c5:
65:e3:8f:b2:d9:32:dc:f2:77:06:e4:29:96:b2:c5:65:df:15:
c2:9a:16:a6:46:4a:75:5c:a8:95:7d:e9:2b:33:e1:53:8e:8b:
ab:8e:67:84:89:b8:43:c2:7c:c2:38:4c:2f:ac:4a:7a:d5:6e:
6c:8f:67:67:e6:c2:5f:c3:7e:c9:b1:72:0a:0b:7a:11:36:d3:
5b:98:72:76:3b:0d:51:76:ff:ab:b8:52:86:56:86:cd:bb:d1:
51:b1:6a:0d:a0:86:c8:fa:1f:12:53:3c:96:76:f5:6d:9e:b8:
cf:d5:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:16 2025 by rpki-client