Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4608AA0AA8811F0B2992CB9DAE4EC9C.roa
File: F4608AA0AA8811F0B2992CB9DAE4EC9C.roa (raw, json)
Hash identifier: EE/PRwIIKgzrvMX7Mg+pmiv65Dhw9Jxg5USjH2j8bIk=
Subject key identifier: FC:86:7A:4B:5A:F2:10:E2:8A:BF:F1:48:78:53:DF:69:07:8B:84:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018136
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4608AA0AA8811F0B2992CB9DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 12:09:24 +0000
ROA not before: Thu 16 Oct 2025 12:09:19 +0000
ROA not after: Fri 21 Nov 2025 12:09:19 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98614 (0x18136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 12:09:19 2025 GMT
Not After : Nov 21 12:09:19 2025 GMT
Subject: CN=68f0e074-e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:7c:fb:2a:8b:6a:4a:17:23:9d:af:13:72:
2d:3e:cf:91:5d:46:dd:10:f5:e2:25:66:7f:d4:d9:
05:08:67:28:f9:b1:66:8b:50:e2:6c:cd:a0:c5:2b:
bf:1e:12:91:a3:1a:08:98:ba:75:4a:2d:86:cb:52:
97:9e:04:d9:bf:fd:21:ad:19:0b:c2:a1:f1:44:a4:
0e:07:4e:71:eb:00:6a:55:ee:c6:0c:01:0a:b1:64:
8e:d6:94:6a:89:97:22:43:7b:99:70:2b:52:bf:4f:
cd:17:19:76:35:3a:5c:91:f6:aa:dd:f1:18:69:3f:
10:21:cd:95:c9:5d:7b:c0:d8:47:00:88:19:04:50:
26:e8:03:4c:eb:ac:28:94:ac:b7:20:7c:de:98:2c:
2f:05:60:45:6f:09:2e:c6:10:ee:19:d4:b6:29:e4:
7a:27:b5:98:61:33:5a:01:7b:32:b4:9d:15:96:0d:
3d:15:64:60:dd:e9:b6:20:02:45:dd:e2:f7:b9:72:
b3:86:8f:e7:d1:8b:92:d7:40:c5:c9:9b:f5:71:73:
e9:79:5b:4b:18:af:68:2e:7a:42:0b:d4:bc:d6:e9:
ed:7c:c6:ba:29:1c:be:0a:71:e9:49:7f:04:ec:a4:
5b:5e:e9:24:6e:da:55:01:7c:bc:26:03:9b:5f:2e:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:7A:4B:5A:F2:10:E2:8A:BF:F1:48:78:53:DF:69:07:8B:84:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4608AA0AA8811F0B2992CB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c6:61:78:03:8d:63:f3:a5:2c:d9:aa:93:bc:2f:75:29:93:
8f:22:3a:f2:67:74:11:96:0f:ca:69:5b:d5:23:fa:08:39:25:
93:e6:67:31:aa:6e:ac:03:29:ae:57:75:4f:bf:df:14:91:69:
c3:30:72:bb:07:ba:c1:cd:0e:1b:34:a8:c2:2a:bb:42:01:a9:
13:d1:92:10:9b:82:2f:6f:53:e5:f2:0b:67:d5:7c:3e:c1:92:
e4:37:9b:19:6d:bd:51:1c:3a:4c:74:f4:33:84:b1:7d:ac:3c:
f2:76:46:b7:38:81:1e:da:7a:e9:69:0a:81:71:5b:c5:c1:b6:
ad:c4:fa:13:42:11:81:1e:87:3e:c0:f6:5c:85:a5:a4:e6:65:
2a:62:09:8c:76:d9:70:6d:cb:05:eb:74:93:b7:1a:90:68:39:
b2:25:22:d1:a7:71:11:06:b9:6c:b8:d5:66:32:34:31:26:e5:
54:de:98:9b:a8:15:de:5e:eb:f4:e1:60:70:95:8f:51:d3:b0:
2c:37:f6:68:fe:8f:56:9a:f1:41:f4:5f:67:1f:fa:e0:e2:51:
fc:e0:15:59:13:cc:09:a2:31:8c:ab:47:6b:2e:d5:2c:38:f6:
6c:00:51:a6:ed:a5:22:fe:1e:fd:28:5b:6e:92:03:37:50:21:
ea:65:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:52 2025 by rpki-client