Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9C773AE8EF111F09518E5C1DAE4EC9C.roa
File: E9C773AE8EF111F09518E5C1DAE4EC9C.roa (raw, json)
Hash identifier: WibGifBW02+oGrd91zD59/AUQQCRl5Fo0EuXatXHxJA=
Subject key identifier: C6:44:63:71:C5:DE:06:70:2A:7F:09:E6:F9:6B:BD:31:BA:0A:57:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017ACD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9C773AE8EF111F09518E5C1DAE4EC9C.roa
Signing time: Thu 11 Sep 2025 09:30:11 +0000
ROA not before: Thu 11 Sep 2025 09:30:07 +0000
ROA not after: Wed 22 Oct 2025 09:30:07 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96973 (0x17acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 09:30:07 2025 GMT
Not After : Oct 22 09:30:07 2025 GMT
Subject: CN=68c296a3-21fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:e0:66:4e:93:48:42:05:6b:cc:da:c6:11:
00:1f:25:bd:63:54:b4:db:3e:ab:76:f8:10:85:63:
67:b1:e7:21:62:ac:8d:ea:12:d3:22:b7:d9:07:e6:
91:64:9d:bd:2f:ff:4e:71:3f:ca:43:f5:f9:45:33:
87:f1:ba:06:7f:45:e1:fe:a1:a9:dc:14:57:a8:3c:
9f:db:d7:02:15:3a:12:25:f2:91:28:4b:de:fa:41:
3b:73:f5:73:92:bf:0e:b6:26:4b:25:0d:d2:30:fb:
f0:f6:fc:e0:82:c2:70:02:f6:e2:18:9f:ab:d9:71:
d9:8d:e7:29:32:92:40:f5:8d:fc:0b:e2:96:dd:32:
fc:03:e0:5f:7f:d5:b6:cc:27:a0:c6:13:b9:35:a5:
dc:1e:12:f4:69:d9:8e:2e:a7:93:99:38:9d:76:29:
46:a5:ef:d6:fe:67:8f:06:99:d5:9f:6d:6b:de:83:
02:7c:0f:de:1d:80:fb:50:d6:a5:bd:64:2d:f8:0f:
75:48:20:57:23:ca:7f:2a:39:aa:36:bf:91:e2:b4:
5d:92:30:31:f9:2f:5a:76:13:ef:5a:2c:85:7b:12:
9e:5f:89:b9:9d:18:60:9f:5b:08:85:e6:4f:01:a8:
b7:4c:0d:e4:18:63:da:32:62:b5:1e:fe:5c:f6:46:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:63:71:C5:DE:06:70:2A:7F:09:E6:F9:6B:BD:31:BA:0A:57:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9C773AE8EF111F09518E5C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f2:1d:ad:7a:63:1e:f5:e9:35:fb:62:fb:b1:73:43:6e:3e:
8b:72:f8:d0:b4:8b:b7:fd:7d:95:93:e3:96:f5:88:9f:15:c8:
c0:0e:19:82:e2:a6:3b:97:63:1a:f3:41:32:01:33:01:0e:c7:
c6:9b:4e:b7:61:5b:c0:a1:c6:c5:60:d7:dc:38:51:22:6c:e0:
78:07:46:e9:d5:ca:d3:d8:9e:80:51:bd:5b:d9:24:ba:fd:3f:
b8:04:a8:fa:3a:ea:47:90:f7:ad:34:11:58:8f:70:28:72:17:
63:f2:26:e1:16:04:d8:a1:79:1c:f0:e5:45:72:ac:a9:55:98:
1b:20:71:8b:29:e7:b7:f2:cf:06:d0:97:09:06:20:00:de:d3:
90:84:ba:d6:ba:89:ee:c5:59:ed:ec:54:00:8d:a2:92:1e:54:
aa:80:c4:a8:b3:27:2c:99:e5:95:4f:ee:00:1a:77:66:ca:ef:
19:88:76:35:7f:44:fd:e3:ce:b0:cd:c9:62:3a:3a:d5:cf:2a:
9a:83:f7:84:f3:d9:ba:68:9c:38:5d:ae:04:e5:b7:e8:8c:df:
76:31:b6:6a:7a:b1:b2:42:d7:4b:fe:85:17:9b:07:0f:3e:20:
ec:7e:1a:c4:02:5f:ec:97:85:90:98:85:5e:95:53:c4:90:fb:
9e:34:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:58 2025 by rpki-client