Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5D0505A88C411F093D0F5F0DAE4EC9C.roa
File: E5D0505A88C411F093D0F5F0DAE4EC9C.roa (raw, json)
Hash identifier: LzfsWo9iW3eI8CF7P8M05mG7Pe7/XVyleihf1VqjILI=
Subject key identifier: 8A:77:B4:C7:CC:FB:59:4F:BB:DB:AB:6C:38:C5:28:E7:34:89:37:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01779A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5D0505A88C411F093D0F5F0DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 12:52:50 +0000
ROA not before: Wed 03 Sep 2025 12:52:42 +0000
ROA not after: Fri 10 Oct 2025 12:52:42 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96154 (0x1779a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 12:52:42 2025 GMT
Not After : Oct 10 12:52:42 2025 GMT
Subject: CN=68b83a22-c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:63:09:75:72:bf:60:2d:36:a7:fe:b3:55:
d7:75:a7:9a:d1:c1:c2:3a:6d:1c:41:2b:b1:f0:6e:
48:9c:9c:e1:96:d0:10:e3:4b:04:31:2d:ea:82:61:
29:50:ae:61:2f:2e:9b:f8:fd:9f:dc:c4:b2:77:7c:
57:41:d3:79:65:76:7b:00:7a:7d:f8:3b:8f:3f:af:
ac:09:4e:34:a0:8c:1f:02:c4:d4:d3:27:37:e7:29:
73:d1:23:59:28:82:40:2e:a9:6b:ee:75:60:d7:82:
c5:ad:cf:6a:06:9d:5f:30:5d:2f:1b:18:0f:a9:76:
a4:0e:b5:29:9f:18:bd:91:f4:e1:03:47:6d:f2:be:
71:07:63:5a:10:65:48:8e:64:65:1a:c7:21:bc:e6:
2d:4b:81:79:3d:42:a6:c9:3a:66:53:60:82:3a:00:
1a:d8:1e:28:c6:ec:f6:39:9e:23:2a:c3:82:95:8e:
cc:75:aa:f0:2c:97:92:28:9f:b5:fe:86:3d:ea:53:
b6:74:5d:ea:0d:ef:99:e7:38:72:51:a6:28:ab:4f:
9a:78:43:21:c8:36:7c:89:bf:c3:dd:a7:82:a6:da:
9c:02:9a:85:17:60:cc:e6:2d:1b:db:a5:67:dd:06:
46:5f:32:07:8b:40:26:44:77:7e:58:c1:fa:e1:32:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:B4:C7:CC:FB:59:4F:BB:DB:AB:6C:38:C5:28:E7:34:89:37:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5D0505A88C411F093D0F5F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
25:7b:67:80:36:e6:0b:df:8d:3b:b0:34:de:e4:7f:0d:c2:4b:
9a:6e:38:4b:0b:e0:82:ed:0a:ce:68:dd:b5:c5:26:bb:6b:3b:
2f:09:4f:26:ad:6d:27:3f:16:76:08:ef:c0:9e:ac:36:32:09:
93:e7:d9:29:64:d2:0e:6e:99:51:d9:29:93:6f:cc:86:df:04:
53:71:53:cb:68:66:dd:14:88:ed:48:03:ee:f2:1d:a6:9c:b6:
7a:8b:e6:6d:fb:3b:32:18:ee:b4:4c:30:d1:23:1a:2f:55:7f:
72:97:73:fe:af:77:e9:3a:38:8c:a5:ff:5b:23:c2:08:be:81:
6e:b4:4e:39:67:6f:26:10:9a:cc:85:98:dd:9b:b8:46:4a:a9:
90:85:f3:36:3a:f6:2b:c5:07:27:56:95:3a:a5:06:8f:16:ae:
52:48:9c:6c:d5:7b:b8:33:f5:7c:e8:57:5a:22:2f:a2:02:cf:
da:69:c6:5b:6f:84:7b:3a:ae:a8:c3:42:36:fb:71:a4:bc:8f:
e5:09:dc:18:33:14:97:3e:42:d8:71:cd:cd:68:46:24:db:4a:
66:51:08:6a:c5:fa:5e:a9:da:68:b1:fb:f5:6f:2d:ae:dc:ab:
8a:08:bb:26:19:94:9a:d8:9e:63:f2:af:87:0c:aa:5c:3f:e6:
2d:dd:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:21:58 2025 by rpki-client