Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D29802A8A44411F0A01B60E2DAE4EC9C.roa
File: D29802A8A44411F0A01B60E2DAE4EC9C.roa (raw, json)
Hash identifier: HP2yGn6J8/fqwFSmAwJkMe73hyC1xUG/s2OKPxroZT0=
Subject key identifier: 52:AA:8C:E6:D5:20:2A:99:B5:4B:AE:BE:9D:8D:42:31:9E:FC:E3:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D29802A8A44411F0A01B60E2DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 12:46:35 +0000
ROA not before: Wed 08 Oct 2025 12:46:29 +0000
ROA not after: Sat 22 Nov 2025 12:46:29 +0000
asID: 401701
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98196 (0x17f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 12:46:29 2025 GMT
Not After : Nov 22 12:46:29 2025 GMT
Subject: CN=68e65d2b-a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:28:54:82:8f:84:14:46:17:98:ac:50:60:
7c:dc:01:93:cc:2a:0e:ee:4b:2c:b5:d5:5f:8b:b8:
cc:67:2f:73:0c:71:05:32:af:33:c4:df:d0:2a:5d:
c0:90:94:a7:65:ea:e5:8c:e3:8e:27:d5:f6:04:66:
59:4b:97:a1:77:64:d6:b5:00:e4:d4:07:d1:dd:af:
35:8f:4b:3e:01:40:55:48:57:5a:80:23:b9:30:b5:
ad:f5:c4:94:9d:70:a3:bc:27:89:db:15:f2:6b:8b:
0c:c8:b7:ea:59:bd:23:39:67:06:be:32:bb:4e:1f:
3e:c1:00:a1:7d:ef:a9:9e:d8:09:66:e4:cb:98:e3:
5e:81:21:d7:a3:6c:f2:13:8c:6b:39:b1:49:96:53:
dd:21:37:a3:eb:7a:2d:ba:01:e5:9d:86:3d:df:f3:
d6:db:57:8b:97:2c:f7:ae:03:71:a8:3a:65:49:43:
82:f8:64:16:cf:2f:f1:f6:3e:2e:03:33:3a:82:b2:
d0:e1:39:52:5c:9f:0d:0e:9f:c5:02:d0:ab:04:ad:
e4:a9:52:5f:76:a3:93:dd:9f:49:67:b8:8d:8d:88:
7d:f7:9a:39:62:b6:85:54:55:60:5a:98:16:f3:86:
30:d6:7c:53:04:dd:d3:14:3e:f3:18:27:66:89:34:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:8C:E6:D5:20:2A:99:B5:4B:AE:BE:9D:8D:42:31:9E:FC:E3:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D29802A8A44411F0A01B60E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:98:57:1e:b2:de:c4:f1:78:05:2f:c1:a1:6a:92:a1:5f:66:
ba:f6:10:42:2f:ba:b7:92:fb:f8:59:c1:c8:da:92:2b:2b:22:
a0:b1:ab:54:8f:6d:a7:56:17:f9:bf:10:d2:7d:ee:84:e2:f4:
bb:7c:ce:6c:f8:89:7c:a9:b3:13:d6:ea:63:4a:60:b5:0f:ee:
1d:cf:ef:14:ee:9d:13:dc:e9:87:58:39:bd:bd:8f:66:d0:92:
04:bc:55:0d:03:c2:3b:09:84:56:11:81:ff:0b:14:02:89:6d:
28:7c:a1:7e:58:9b:ac:0b:3b:88:2c:57:e2:1c:dc:2a:2c:68:
3d:cc:3a:0c:ff:76:0c:d8:58:65:b7:dd:43:4f:fa:f3:4d:3f:
35:63:51:e2:31:26:13:e7:52:9d:46:bd:43:7d:32:f0:d4:1b:
7b:54:5d:84:58:17:6a:7e:a8:2e:d3:19:d1:59:56:ee:0c:13:
08:48:be:9c:89:f9:98:5a:89:22:0f:ed:f9:dc:f4:f0:43:71:
7b:61:a5:d4:8c:14:f5:7b:53:2b:3b:73:ba:3c:bd:0a:ec:c6:
f9:74:ef:c1:72:04:59:a2:9b:5e:7a:c2:e0:7b:28:4f:5c:7f:
26:d0:47:41:0a:05:9a:de:f2:5a:75:9b:e2:30:d8:ad:09:28:
34:fd:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:54 2025 by rpki-client