Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40DA8D64910111F08AF7FC85DAE4EC9C.roa
File: 40DA8D64910111F08AF7FC85DAE4EC9C.roa (raw, json)
Hash identifier: KbXV3DHxMulL8DH+E108nGqS2JMRRL9gkykQ+7Iypmw=
Subject key identifier: CD:C2:02:5A:BD:D9:57:D4:DB:0B:63:59:42:8A:70:95:98:FF:71:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40DA8D64910111F08AF7FC85DAE4EC9C.roa
Signing time: Sun 14 Sep 2025 00:25:02 +0000
ROA not before: Sun 14 Sep 2025 00:00:57 +0000
ROA not after: Mon 20 Oct 2025 00:00:57 +0000
asID: 211265
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97031 (0x17b07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 00:00:57 2025 GMT
Not After : Oct 20 00:00:57 2025 GMT
Subject: CN=68c60b5e-09a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:e3:bd:1c:58:d8:26:dd:f5:53:cc:a2:42:
42:b1:8e:6f:31:48:1c:04:c7:58:1e:1b:10:b5:78:
92:65:e5:61:f9:f6:37:53:79:63:36:f8:45:91:8b:
a5:49:8c:99:73:2b:17:e6:ee:f6:32:7e:a7:e1:b6:
ad:21:ae:49:ec:00:48:a5:56:f4:b2:f2:02:39:a2:
bc:e8:2c:18:fe:9b:50:6c:c2:1d:0b:86:94:a1:65:
69:3d:cf:a9:b8:06:e5:f6:86:7f:2e:f7:84:ea:56:
e0:87:ed:6a:7e:f9:97:69:f2:41:44:12:e9:45:c9:
07:99:96:e3:f4:bc:d6:7e:ab:73:d6:2d:b9:65:7f:
10:65:5e:4f:a0:02:45:b9:4b:f4:8e:ea:34:45:94:
22:73:ef:ae:db:cd:2d:71:6e:4d:57:88:b0:01:ff:
2d:35:45:7b:03:dc:38:95:8d:65:b6:92:a1:ad:cc:
c5:33:0e:7c:31:49:79:4d:91:24:98:95:55:f4:b3:
f8:b3:8f:48:7e:9a:f5:1a:a3:99:2c:d3:e4:74:4f:
85:06:d3:c6:ba:4d:2f:6d:1b:39:20:a5:64:f5:e7:
3b:a1:71:6b:84:7a:33:65:48:12:75:18:94:9c:58:
d6:cf:02:77:3c:ff:1e:64:77:f2:3a:c0:60:4f:bd:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:02:5A:BD:D9:57:D4:DB:0B:63:59:42:8A:70:95:98:FF:71:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40DA8D64910111F08AF7FC85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cc:8c:b9:26:d8:51:dc:ec:a1:9b:f4:30:c6:58:db:3c:65:
1e:e6:a0:37:5e:4a:42:3f:93:e3:b7:37:3e:59:d2:ce:b2:b5:
a8:2e:88:56:a3:6e:de:e1:4d:f3:86:85:2d:f6:eb:68:e0:fa:
4b:2a:ac:f4:59:2c:8b:70:6d:5c:55:03:83:e2:b8:1c:4c:89:
20:6e:7e:7a:71:aa:10:97:41:a6:1a:b4:13:b6:5b:3e:5d:76:
c6:43:17:28:92:4f:24:82:e9:78:b6:38:9d:77:59:ac:83:4b:
af:f3:07:49:d3:4b:9d:7e:6c:41:18:34:5e:43:d3:fc:88:c8:
95:4b:e3:b6:8d:a3:10:96:6b:14:98:07:8b:4e:0e:fc:fb:28:
1d:d6:3c:36:f6:10:74:70:a0:05:ca:35:bf:c3:bc:01:34:ed:
b9:d3:dc:d3:c8:cf:ff:bd:d0:99:fc:11:86:fa:69:09:49:6a:
01:f6:50:13:6b:ac:90:71:53:24:d9:ca:d0:23:b8:4b:5c:03:
d0:0c:77:15:26:8c:55:21:23:81:fc:ff:df:47:cc:e0:80:78:
ed:cb:d6:0b:e6:65:54:64:25:65:5f:df:90:cc:f5:0c:8c:46:
91:6d:27:80:45:7a:c5:78:5c:35:b6:62:9c:57:57:f8:74:ff:
0f:76:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:01 2025 by rpki-client