Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/418F95F8A5B811F095A09ECDDAE4EC9C.roa
File: 418F95F8A5B811F095A09ECDDAE4EC9C.roa (raw, json)
Hash identifier: K1XUq/V9FzIjqgmp+kSJ7n+F/K7eupbShCXN7tvUE1U=
Subject key identifier: AF:47:3B:B8:5B:D4:27:A9:D3:11:ED:44:EC:82:E5:3C:8B:87:62:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/418F95F8A5B811F095A09ECDDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 09:05:24 +0000
ROA not before: Fri 10 Oct 2025 09:05:19 +0000
ROA not after: Mon 17 Nov 2025 09:05:19 +0000
asID: 22773
IP address blocks: 156.229.52.0/23 maxlen: 24
156.229.55.0/24 maxlen: 24
156.229.61.0/24 maxlen: 24
156.229.63.0/24 maxlen: 24
156.239.141.0/24 maxlen: 24
156.239.144.0/22 maxlen: 24
156.243.82.0/24 maxlen: 24
156.243.84.0/24 maxlen: 24
156.248.30.0/23 maxlen: 24
156.248.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98280 (0x17fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 09:05:19 2025 GMT
Not After : Nov 17 09:05:19 2025 GMT
Subject: CN=68e8cc54-64b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:24:a1:6c:06:fb:03:a9:a4:83:77:50:21:
c8:9a:d0:4f:e7:df:10:81:1b:a2:be:0d:20:95:94:
f9:bf:a4:48:95:ae:7a:3a:f0:8b:02:01:ea:3b:4c:
fd:d8:23:4f:94:08:4b:44:51:a6:6e:1f:8c:f8:ad:
30:0b:4e:44:4d:47:e5:91:0d:85:32:d1:d5:8e:4e:
b4:6a:c5:88:dc:9e:bc:82:97:8e:38:89:65:e6:ea:
63:57:05:77:6e:11:f6:c5:14:56:8d:91:ea:70:ca:
74:0a:42:38:36:81:a5:85:fb:b1:0c:02:f2:ec:7c:
14:95:f9:be:27:b3:32:2f:b3:7e:e2:f1:5a:72:fe:
05:3c:96:ae:24:da:95:df:c9:ec:cb:aa:bb:86:2e:
2f:5c:96:3b:ed:97:34:2b:92:7c:1c:0b:b3:d1:16:
a6:0f:2f:de:e0:36:04:63:3a:a9:66:17:f2:7b:dd:
88:81:ab:9f:0a:d0:50:f9:6a:5b:09:7b:84:91:64:
7b:fd:65:e3:16:36:8e:f5:29:71:94:41:64:a3:93:
3f:bc:6b:55:6d:8e:f8:aa:54:e4:1e:3d:c1:f5:f2:
10:da:82:02:cd:1a:b7:27:66:dc:9b:56:d4:93:d5:
09:75:f1:4b:40:da:13:4a:7d:c5:46:cd:59:63:06:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:3B:B8:5B:D4:27:A9:D3:11:ED:44:EC:82:E5:3C:8B:87:62:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/418F95F8A5B811F095A09ECDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
156.229.55.0/24
156.229.61.0/24
156.229.63.0/24
156.239.141.0/24
156.239.144.0/22
156.243.82.0/24
156.243.84.0/24
156.248.30.0/23
156.248.64.0/21
Signature Algorithm: sha256WithRSAEncryption
50:b3:13:de:6a:53:2f:d2:f1:88:b0:61:99:e4:fd:91:91:4a:
fd:56:02:0c:d5:41:46:b3:31:5b:78:b0:7f:eb:c6:2d:a0:2a:
bd:d4:7b:d9:ee:3d:3e:87:52:02:91:1d:5f:75:9b:33:ea:92:
c8:9b:09:ca:85:73:3c:38:90:96:81:62:67:70:3b:28:8d:be:
1b:60:93:66:79:87:2a:0a:7d:da:87:93:49:1b:f3:07:e7:29:
d3:9b:a1:3e:25:22:dd:a3:60:d1:95:3b:fa:95:b1:c6:e8:62:
22:2e:41:dc:9f:53:e6:9e:83:10:98:97:ec:38:c4:d1:a8:39:
5c:cb:98:36:1b:8a:fd:bd:62:0f:8c:07:1f:16:96:67:40:b8:
3f:c1:30:0d:69:72:9b:0d:22:78:a4:fe:bd:23:12:c2:2a:c1:
ce:61:f6:de:d3:d7:00:ec:c9:b7:96:67:80:0c:8e:e2:dc:fc:
84:b1:32:1e:f5:ef:bf:fb:f0:51:96:54:cb:4a:7e:d3:eb:86:
22:26:2f:78:6d:8e:c3:26:d4:12:d6:27:2b:f0:80:95:1d:75:
d2:a0:8c:16:8b:a4:f0:0b:7c:6b:d3:8d:f8:2b:b2:7f:29:3f:
7a:a4:b7:e6:09:73:22:12:a0:94:da:f9:5f:e7:9f:7e:dd:85:
e0:77:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:32 2025 by rpki-client