Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F63593DEB63111F084362387DAE4EC9C.roa
File: F63593DEB63111F084362387DAE4EC9C.roa (raw, json)
Hash identifier: 6pu5x1oaZO7kIRoh+SiDYb/Va683oe4bBo77UEX/ywI=
Subject key identifier: D1:E6:ED:26:D8:E0:11:98:E7:42:C4:42:DC:F3:8A:00:AA:EA:B5:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F63593DEB63111F084362387DAE4EC9C.roa
Signing time: Fri 31 Oct 2025 08:16:55 +0000
ROA not before: Fri 31 Oct 2025 08:16:48 +0000
ROA not after: Sun 07 Dec 2025 08:16:48 +0000
asID: 205886
IP address blocks: 156.252.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Nov 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99364 (0x18424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:16:48 2025 GMT
Not After : Dec 7 08:16:48 2025 GMT
Subject: CN=69047077-062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:62:3f:47:6d:f2:d8:54:4b:14:86:f8:7a:
cb:12:14:f6:80:c1:3a:dc:65:31:9d:49:37:d2:18:
30:cf:02:8f:8e:aa:d2:57:bb:5c:7a:93:c2:ee:a9:
ae:76:7d:2e:8c:54:a0:f3:72:ee:5a:3c:2c:b1:ff:
43:a0:5b:93:78:fa:46:93:98:56:9a:46:b5:37:56:
0e:2a:ed:1f:21:c5:2d:50:56:21:f5:ed:62:e2:24:
81:2b:1e:16:23:6d:6c:98:e1:c7:03:06:ab:f7:ac:
27:0f:a2:a5:c7:c7:d8:71:de:d9:00:38:5f:fa:aa:
08:4a:ee:ef:e2:3b:88:e0:a1:bd:df:f5:fc:27:2f:
75:fd:91:67:ec:ae:a5:02:80:eb:9c:ee:b2:c3:e6:
2d:f2:63:cc:76:d0:16:2a:20:89:1d:63:c2:a8:63:
3c:07:9f:41:2c:fe:1b:03:28:89:e0:87:91:d9:40:
40:a2:6f:6c:9d:91:1d:ba:9b:ea:5b:5c:5d:92:09:
56:bd:f0:d6:06:76:19:d1:6c:4b:81:dc:bb:75:24:
8f:f3:eb:57:02:d5:3d:f9:12:2b:e8:c0:33:ce:52:
77:36:3b:5e:66:f0:43:f4:4c:e5:c7:9c:19:b3:99:
f0:49:a7:8a:da:db:f2:70:df:ce:5c:e0:70:a3:1c:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:ED:26:D8:E0:11:98:E7:42:C4:42:DC:F3:8A:00:AA:EA:B5:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F63593DEB63111F084362387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d6:71:06:a0:71:28:e0:13:d5:01:5d:2e:cc:36:22:e5:b0:
51:9a:43:8a:57:3a:8a:55:c4:35:71:38:a2:b7:c5:69:e6:1a:
d3:9f:54:87:56:4f:af:59:c8:6b:ae:45:46:88:fd:55:98:70:
93:1a:ff:09:35:21:34:e3:c4:d7:92:1d:c0:8a:c9:d0:80:72:
71:7a:8d:e9:55:c6:9f:ec:8a:7d:87:f1:cf:0c:38:60:af:60:
30:ac:f9:ed:87:de:65:e0:bc:ab:04:0f:c4:55:29:61:3f:8b:
9a:0c:0f:42:b3:33:54:c1:c3:08:23:f7:7e:52:b0:dd:74:9d:
d5:25:00:c5:00:84:46:2e:db:d8:7d:4f:27:61:19:af:c6:f1:
01:67:c8:ca:1f:c7:18:9f:37:de:63:b5:73:89:7b:95:f3:bb:
68:07:85:4c:a0:64:6c:7c:9f:e8:4b:c4:9b:cf:a7:6f:80:a5:
af:06:12:cf:00:13:c7:34:1f:6b:8a:e6:84:64:5b:ee:12:b7:
3c:a1:2f:42:71:9d:78:43:79:09:7b:2b:22:4f:81:9f:84:15:
e0:e3:94:9f:bf:41:60:f5:87:53:6d:9b:89:6a:14:1b:23:25:
ea:88:91:5d:a8:bd:56:17:e3:ec:58:31:6c:78:ab:09:07:ba:
63:00:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:28:42 2025 by rpki-client