Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37A4804694B311F0BB2D877CDAE4EC9C.roa
File: 37A4804694B311F0BB2D877CDAE4EC9C.roa (raw, json)
Hash identifier: Ok6yyEzhXTKIft/YQTLRObxmYAhCOEZR4LNtKsMgyK8=
Subject key identifier: 2C:EF:64:12:5F:DD:4F:66:E3:8A:3C:55:87:3A:9F:18:14:C7:F0:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37A4804694B311F0BB2D877CDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 17:16:31 +0000
ROA not before: Thu 18 Sep 2025 17:16:25 +0000
ROA not after: Mon 27 Oct 2025 17:16:25 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97302 (0x17c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 17:16:25 2025 GMT
Not After : Oct 27 17:16:25 2025 GMT
Subject: CN=68cc3e6e-3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:32:5e:b7:fd:bd:2e:e9:cb:aa:0b:dd:4d:
91:49:3b:50:b0:a6:44:c1:22:34:12:1f:17:8c:23:
d1:8c:67:31:65:0c:99:98:b5:80:b1:98:50:4c:ef:
9f:f6:f6:a1:b0:be:2b:92:b1:bb:6f:38:2c:5e:29:
9d:37:66:8c:7d:7e:69:5b:13:de:37:62:f4:68:03:
51:79:3d:d6:64:3b:3f:e9:51:0a:b6:37:2f:91:25:
0f:35:9c:da:ad:70:37:44:23:c8:77:f4:7d:1d:e9:
f7:25:2a:71:14:af:32:35:fe:ab:19:82:8c:d4:07:
0a:8e:17:78:36:fc:4f:3c:09:62:3c:ee:ca:f6:7f:
b9:bd:9b:69:3b:eb:53:c9:95:4b:8c:ab:94:5e:ea:
b5:d4:a0:ca:50:e0:a4:0a:c0:3b:a6:df:fb:44:0d:
a7:56:86:7f:3b:18:4e:5f:9f:4e:f4:4d:f9:4e:59:
47:c2:d3:30:f0:be:b5:b9:c2:26:dd:8a:ae:11:9b:
a7:e1:ed:62:2b:6f:aa:69:e0:31:01:77:f6:f2:93:
35:fc:c1:98:8d:65:e6:dc:5f:70:55:da:1e:3f:93:
13:96:4b:9c:f2:5f:ca:d7:2c:5a:e9:9a:f0:89:74:
f2:a2:b4:f0:a0:26:94:bf:73:01:80:d3:8b:37:69:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:64:12:5F:DD:4F:66:E3:8A:3C:55:87:3A:9F:18:14:C7:F0:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37A4804694B311F0BB2D877CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:2d:bc:0d:4c:67:79:08:ff:29:aa:ea:75:82:3e:96:db:1b:
0e:4c:c2:51:6a:41:85:31:87:92:f0:69:bd:31:07:b2:f9:9e:
3c:7a:ac:77:cf:e9:1b:19:f0:98:65:58:6b:5d:e0:3e:6c:40:
1e:2d:82:ea:8b:49:55:00:0d:e2:44:f2:7d:38:04:7e:ea:db:
2e:e5:40:bc:5b:75:b4:12:7c:ed:6e:f7:89:1b:dd:2f:73:fd:
d3:f1:8d:e6:e6:d6:ee:7e:ee:50:f4:5a:98:20:81:61:04:28:
3f:a3:de:a0:b5:bc:51:9c:30:2c:af:04:a3:bb:ed:57:94:03:
b4:44:22:8e:c8:4a:60:98:48:0a:db:54:10:22:94:15:9c:44:
a4:c3:e7:96:b2:20:4f:72:0e:f1:43:61:52:5c:d4:e4:9d:68:
e6:be:eb:d4:7d:08:5b:04:f3:76:dc:ea:36:87:d3:17:cd:d5:
2b:09:11:76:4e:10:d3:2e:d1:21:89:f3:2f:91:87:8b:87:72:
3d:cd:aa:b9:2f:ed:ca:9a:5b:68:f7:f3:6a:0d:32:58:d2:21:
93:48:0e:8d:46:a0:cf:48:53:89:73:de:19:0c:7c:96:3d:80:
5e:d2:fd:3c:bd:9e:f7:eb:8d:88:24:a3:a9:ef:7a:91:12:70:
3d:81:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:16 2025 by rpki-client