Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D02FDC9D7911F0BCF0C1C7DAE4EC9C.roa
File: F6D02FDC9D7911F0BCF0C1C7DAE4EC9C.roa (raw, json)
Hash identifier: C6u8UM7Pua0uqsUn++B4Nk8aAltfrkcTh3H71ZE8UB4=
Subject key identifier: 53:3A:4D:84:59:5D:9B:BB:8D:3E:4B:7D:CE:E9:4B:DD:8D:86:E9:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D02FDC9D7911F0BCF0C1C7DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:19:21 +0000
ROA not before: Mon 29 Sep 2025 21:19:13 +0000
ROA not after: Tue 04 Nov 2025 21:19:13 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97791 (0x17dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 21:19:13 2025 GMT
Not After : Nov 4 21:19:13 2025 GMT
Subject: CN=68daf7d9-189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:61:4d:54:28:8b:7c:50:b3:f8:d1:86:af:
9f:a9:93:5c:93:b1:5f:ff:8a:31:41:73:ae:5e:d2:
4a:e1:06:ba:a6:de:15:bc:31:6f:42:c9:29:be:fc:
28:b0:6e:f1:47:eb:c3:89:37:95:78:e9:da:bf:5f:
a9:61:1b:c2:b8:95:d4:5a:ed:bb:0d:ae:c3:f0:25:
b3:0a:70:80:ca:38:c3:2c:ea:68:dd:d0:4b:bc:4f:
1f:97:d2:a4:11:95:2a:97:5d:f1:89:e5:75:67:60:
59:9b:d3:9d:79:5d:62:39:86:50:b5:af:5b:82:b8:
78:ed:57:17:1d:d3:b1:95:77:63:f3:8e:e7:6a:77:
00:91:a4:76:d2:0c:c8:19:d1:99:0b:a7:8b:d0:74:
e5:d7:d1:f3:a4:ea:db:b6:f2:4c:66:cd:3a:e5:62:
ce:20:6a:2d:e5:82:4b:51:3d:04:5a:dd:96:87:78:
38:1d:60:41:1c:1d:7f:40:ba:cc:01:ca:e5:4a:e9:
9c:ad:7c:d5:2d:bc:4b:d8:77:12:e7:ea:eb:03:93:
c8:19:33:36:b6:dd:4f:9d:93:6c:68:7f:0c:9e:9c:
1b:e9:2a:7f:77:69:de:dd:3a:9c:40:90:d3:43:a2:
dd:2d:0d:6f:10:8b:d7:f4:e5:4f:11:f8:fe:2d:ff:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:4D:84:59:5D:9B:BB:8D:3E:4B:7D:CE:E9:4B:DD:8D:86:E9:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D02FDC9D7911F0BCF0C1C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:2a:11:eb:36:d0:3c:2b:57:a2:cc:b1:c1:e1:a6:c4:0f:
c7:93:26:e4:41:5c:d0:64:90:26:6d:60:96:89:79:6a:66:8b:
2e:8e:37:e3:70:6e:ec:68:44:51:34:cb:dd:7e:6f:f1:15:21:
b5:d0:87:a4:15:4f:26:ce:e1:96:3b:ad:76:c2:e6:af:11:9c:
d9:08:fd:14:a9:be:a5:28:c4:8d:1c:71:07:64:56:59:2c:f7:
a2:f6:ef:48:4e:28:6d:51:dd:97:e7:50:e2:d3:bb:68:ce:d6:
8d:c0:f1:0e:83:53:93:0d:da:7d:03:f0:68:2a:84:37:a0:c3:
37:f4:2b:82:af:de:90:51:13:91:d5:d5:62:e2:71:16:47:a8:
71:03:74:1b:91:65:72:89:28:a5:4b:17:77:11:18:ac:18:62:
70:b1:78:f6:0d:79:51:39:00:fe:34:5c:6d:a3:57:77:3d:fe:
b6:9f:dd:02:eb:e5:08:26:34:8f:d2:d7:e9:f2:ab:30:45:b1:
f3:a5:86:b4:05:68:d7:94:0a:7d:51:64:9c:c3:e4:01:fa:c4:
b8:59:76:24:1f:59:44:cf:97:06:37:14:36:56:8e:67:85:32:
46:2a:fa:87:14:0d:7b:87:00:6f:84:d8:de:64:52:2f:2b:7f:
d3:08:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client