Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA736889F7811F0B273D4C2DAE4EC9C.roa
File: BCA736889F7811F0B273D4C2DAE4EC9C.roa (raw, json)
Hash identifier: cFmwWamdJV88UBXBnYssTgfgrU3B1gd5mS0i9//pNmQ=
Subject key identifier: 41:10:E4:2E:47:64:0D:37:E3:9A:CE:1D:B6:7A:23:3D:98:5F:8F:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA736889F7811F0B273D4C2DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 10:15:36 +0000
ROA not before: Thu 02 Oct 2025 10:15:31 +0000
ROA not after: Mon 10 Nov 2025 10:15:31 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97906 (0x17e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 10:15:31 2025 GMT
Not After : Nov 10 10:15:31 2025 GMT
Subject: CN=68de50c8-5515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:79:95:eb:a4:b7:fa:97:27:cc:65:c3:33:
83:98:b0:c8:6c:e9:5c:00:3d:cf:6c:ff:69:b8:ca:
b8:26:26:0b:be:19:e8:fd:9e:f7:40:5b:70:f9:de:
42:aa:91:0c:86:52:89:71:02:ea:23:7d:f9:4c:28:
60:f8:90:5f:fb:be:d2:63:58:64:a1:94:66:55:f5:
dd:48:93:ad:fa:5c:99:24:9c:77:a2:bc:8a:41:c3:
ed:ca:88:67:11:1f:a9:7c:39:3e:0b:31:f7:6e:c5:
7b:76:1e:9a:ad:69:66:9c:f0:98:55:89:92:05:98:
25:5b:ec:85:3d:ef:9a:d2:5b:9f:00:68:e3:cc:c3:
a6:d6:45:d3:7f:e9:2c:e0:53:b2:70:fa:48:5f:dc:
85:b6:1f:db:71:cc:5f:1e:3a:88:d2:16:37:7a:6c:
f5:66:07:2d:fb:cb:1a:87:8b:17:84:68:a1:e4:f9:
59:96:22:8d:96:f9:83:8c:52:67:0a:bc:6b:f5:3c:
9a:56:48:62:fa:64:33:4c:fb:1c:19:48:1f:81:98:
90:01:4d:02:02:00:b4:5c:04:9a:0f:30:c3:20:15:
25:4f:73:2e:ca:72:f4:e1:57:e2:11:0b:c6:20:7a:
64:01:43:29:5f:48:47:75:94:bd:aa:43:40:97:ef:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:10:E4:2E:47:64:0D:37:E3:9A:CE:1D:B6:7A:23:3D:98:5F:8F:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA736889F7811F0B273D4C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
05:c1:97:07:a2:28:98:01:d7:e5:07:a1:ec:15:2c:14:8b:2d:
47:e1:95:3d:22:4c:18:91:a2:b6:1c:4e:05:3f:45:c3:61:48:
b0:f3:24:2b:9f:53:5a:3a:e6:7b:e5:1e:90:91:d4:fa:a2:63:
29:e0:af:a2:d3:58:f4:b5:05:de:d4:e8:7c:3b:b2:dd:f2:75:
79:9f:dd:f4:9c:73:ab:bb:bf:3f:18:7f:de:00:d4:ab:24:ba:
27:25:f8:d0:78:2f:11:49:44:ba:4b:8c:0d:d5:66:80:43:89:
fa:49:42:57:7c:be:2a:39:cd:30:ad:ac:a5:c9:7a:3f:b7:0e:
46:bb:9b:30:29:5e:3d:60:fb:d1:4a:eb:60:3a:f3:83:13:0b:
09:93:d5:a7:a6:61:eb:0d:0f:76:dd:bd:45:a1:97:05:68:7f:
0e:91:76:3e:3f:ce:5c:2d:2b:53:e8:1a:dc:fe:f5:ca:28:74:
4e:e3:1f:8d:dd:d9:02:de:b5:06:88:c1:00:5d:e5:78:61:ed:
83:01:89:4e:c8:b7:ae:3b:73:3f:55:12:e5:fe:e6:f4:bd:fe:
07:d6:c3:a1:36:09:fe:b3:2c:bf:a3:ef:c6:38:82:b8:f1:5d:
08:ad:e7:a8:42:15:25:01:35:58:e0:e7:75:27:0a:f7:9e:35:
3c:c2:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:40 2025 by rpki-client