Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FCB9E87C1D11F087FBF1DBDAE4EC9C.roa
File: 84FCB9E87C1D11F087FBF1DBDAE4EC9C.roa (raw, json)
Hash identifier: Iip5HF4/2Xd7Wa9bQ1KLzyahlMFDj3mB741/NIXVd/w=
Subject key identifier: D5:D6:4E:A4:5C:CD:45:F4:DC:72:10:C3:61:A7:3A:84:32:59:E4:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FCB9E87C1D11F087FBF1DBDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:24:28 +0000
ROA not before: Mon 18 Aug 2025 10:24:23 +0000
ROA not after: Fri 03 Oct 2025 10:24:23 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93139 (0x16bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 10:24:23 2025 GMT
Not After : Oct 3 10:24:23 2025 GMT
Subject: CN=68a2ff5c-efe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:80:17:ab:e1:59:34:a4:9d:6a:f6:e0:a5:
8f:fe:25:55:14:6a:02:b4:10:fb:c5:5c:cf:5e:0f:
25:8a:86:fd:78:8d:32:91:f9:55:6f:ae:9b:19:3e:
3a:ed:2e:8b:fe:fb:9d:eb:5d:ce:7f:e1:4c:a0:c6:
73:53:74:25:5a:d2:8b:2f:13:00:99:bf:1a:ce:4f:
36:65:f1:69:71:84:f2:62:ea:45:bd:b0:94:59:ea:
50:b5:7b:7f:1f:28:7a:d7:5d:9c:0e:8b:d2:f7:0f:
4f:22:21:33:d6:0f:22:79:24:1f:f9:55:ee:ed:35:
01:6b:ac:53:c8:80:dc:4f:45:81:14:ea:21:be:1d:
28:7f:76:2a:91:f1:34:2a:be:43:49:79:7d:36:16:
03:a9:c3:4c:cc:98:b0:95:47:6f:0f:54:07:4a:77:
0e:ac:61:53:61:aa:ac:d8:34:1c:dd:d4:7a:ee:d9:
02:a1:8e:f5:54:1e:7e:55:81:17:fb:14:d8:27:c4:
0d:40:6e:2e:69:10:0e:7a:29:1a:ce:2a:b5:fc:a9:
a7:c2:cf:ed:39:28:aa:35:4d:0d:ee:b7:ee:cd:34:
df:9c:6c:82:05:11:e8:b5:33:4b:04:29:e3:ef:8e:
97:f8:be:68:7d:c3:a5:09:c4:c7:d3:77:ba:89:b1:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:4E:A4:5C:CD:45:F4:DC:72:10:C3:61:A7:3A:84:32:59:E4:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FCB9E87C1D11F087FBF1DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:23:ee:85:0c:b6:77:62:f2:9b:02:b8:27:76:92:bd:c9:e4:
58:dc:45:1c:a5:f6:90:af:ee:15:99:d3:98:6e:c1:fe:73:84:
70:85:bc:97:00:f9:a4:78:c2:d0:22:76:b2:ed:aa:27:31:a6:
01:de:da:1d:26:e8:68:06:72:eb:90:77:36:2d:9c:30:e5:47:
43:b8:ce:5f:9e:f6:be:98:b6:24:37:0b:5d:4b:4b:dc:39:a3:
9a:d0:af:d8:26:6b:48:91:3f:7f:e6:3d:e5:a6:cf:e3:ef:d3:
dc:9d:f2:eb:c3:69:c6:2b:31:71:8b:c3:c1:3a:14:1d:76:64:
9d:b1:9f:18:69:1f:fa:90:7c:7e:d1:44:2f:81:97:b1:73:32:
23:2e:f2:8e:23:3e:79:0f:62:fa:cd:c7:12:00:d2:cd:8a:a9:
a2:95:cf:92:8f:66:46:48:81:0c:26:fb:d3:b9:42:39:4f:b5:
5e:fc:10:70:5f:40:d6:e4:54:bf:4c:68:d9:cc:33:b2:fd:c2:
d9:5e:aa:97:28:1f:dd:3a:50:f9:cb:e7:6f:ba:42:c8:58:ae:
42:12:d1:df:6b:9b:ba:8b:20:73:ad:24:84:46:bf:e9:d2:e4:
3c:04:35:63:29:9b:18:47:e8:e3:69:b5:31:92:b2:ea:6d:8e:
b6:7c:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:35 2025 by rpki-client