Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE3E33F4837011F0BD9D67AEDAE4EC9C.roa
File: FE3E33F4837011F0BD9D67AEDAE4EC9C.roa (raw, json)
Hash identifier: /NgFH3dfziQPgljFnERcqepD2nKrUlZr1+XmAr/q/y8=
Subject key identifier: 7C:D2:A5:85:AD:B6:39:BB:C2:E7:E3:7F:77:63:77:20:83:67:1E:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE3E33F4837011F0BD9D67AEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 18:09:38 +0000
ROA not before: Wed 27 Aug 2025 18:09:33 +0000
ROA not after: Sun 26 Oct 2025 18:09:33 +0000
asID: 63139
IP address blocks: 156.227.224.0/23 maxlen: 24
156.227.252.0/22 maxlen: 24
156.229.2.0/23 maxlen: 24
156.229.29.0/24 maxlen: 24
156.229.30.0/23 maxlen: 24
156.229.44.0/23 maxlen: 24
156.229.49.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.64.0/24 maxlen: 24
156.229.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94702 (0x171ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 18:09:33 2025 GMT
Not After : Oct 26 18:09:33 2025 GMT
Subject: CN=68af49e2-9012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:f1:d5:e1:de:0c:26:c2:13:97:93:c2:d1:
c9:5a:cc:0c:26:69:6f:6d:39:11:1f:a0:8d:a1:25:
f0:65:f3:43:8d:85:1a:de:47:2f:5c:de:c7:ff:b3:
02:3d:ed:bf:7d:c6:1b:9b:bc:b0:29:11:4d:da:6e:
72:96:17:58:c0:69:df:f0:00:86:ff:7e:02:f7:7f:
60:1f:1e:23:03:cc:c7:04:a1:d0:2c:60:30:2f:ea:
ba:5d:16:f8:14:42:dc:49:d8:35:36:4d:64:2d:8c:
f3:4a:fc:99:3a:f2:9e:88:91:10:72:20:de:12:1f:
7a:dd:b6:17:c2:c7:fc:8d:dc:f8:7b:3e:cb:ba:44:
c5:e9:69:9b:ac:59:a9:4a:d1:fe:19:1a:37:97:c1:
62:00:65:69:03:ad:d8:21:36:25:ba:1c:e1:0f:3a:
d5:b5:36:d9:df:8d:d7:b3:60:00:11:11:59:ea:e6:
59:44:8d:56:21:69:09:5b:30:4f:5e:3e:c9:84:02:
3d:06:60:79:b3:db:23:3a:4a:11:c7:a3:29:70:af:
d7:67:4d:58:fb:73:c2:b8:7c:40:b4:0f:34:1d:8b:
a8:90:2e:57:96:5b:f5:65:d4:8b:6a:63:01:13:2b:
1e:ec:f9:15:c1:9a:30:9a:50:ee:ba:24:37:37:6c:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:A5:85:AD:B6:39:BB:C2:E7:E3:7F:77:63:77:20:83:67:1E:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE3E33F4837011F0BD9D67AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.224.0/23
156.227.252.0/22
156.229.2.0/23
156.229.29.0-156.229.31.255
156.229.44.0/23
156.229.49.0/24
156.229.51.0/24
156.229.64.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:1d:42:62:fa:85:7e:e0:27:00:86:7c:60:e4:e7:f0:76:0f:
a5:ed:37:c9:e2:a8:0e:f0:6a:2a:16:90:5e:ba:5d:d0:e5:aa:
68:3e:1b:01:03:6c:d4:38:28:81:cc:2d:8b:5c:01:0d:6e:54:
86:ae:75:9e:af:94:a3:22:79:c5:38:90:0a:5e:6e:d2:73:b1:
61:6f:cb:82:5b:2b:24:6a:d8:19:b4:7c:da:38:c8:d7:40:e4:
da:23:03:10:a4:4f:fc:ca:41:bf:98:4a:83:6d:47:d4:3a:f4:
76:63:e5:a1:ea:07:f6:84:f9:2e:59:9b:0f:c7:79:fc:32:b5:
d6:1c:7a:a8:fd:0a:84:fc:52:87:5f:15:1a:2a:08:f8:76:1d:
b1:af:4f:e7:d8:7a:71:7f:e2:0d:42:a8:cd:51:1e:48:53:13:
a9:67:2a:50:8b:b7:31:15:f1:ca:a0:b6:b1:2a:78:bb:65:6f:
1d:ab:6b:92:d9:75:5a:6c:78:5f:d4:f3:43:ba:01:38:63:ec:
23:2f:75:db:ff:65:4c:62:7e:b3:94:c5:f5:d6:de:27:17:0e:
60:a0:64:99:f0:0b:8a:0d:c7:13:ad:46:42:de:d8:43:ed:74:
df:33:1b:f6:2e:8c:97:3d:de:d7:9e:fe:84:a7:e2:00:e3:52:
63:97:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:34 2025 by rpki-client