Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEFF33E29F7511F0B5A363AFDAE4EC9C.roa
File: CEFF33E29F7511F0B5A363AFDAE4EC9C.roa (raw, json)
Hash identifier: xgq4FDGQeSonAGNn36mdoTaOS/aMlJFixaOvZtVnJ5Y=
Subject key identifier: 9E:72:A1:4C:99:2F:CF:D4:30:61:05:84:FF:07:8D:13:04:9D:A5:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEFF33E29F7511F0B5A363AFDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:54:38 +0000
ROA not before: Thu 02 Oct 2025 09:54:34 +0000
ROA not after: Tue 13 Oct 2026 09:54:34 +0000
asID: 198990
IP address blocks: 156.236.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97902 (0x17e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 09:54:34 2025 GMT
Not After : Oct 13 09:54:34 2026 GMT
Subject: CN=68de4bde-ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:ab:c8:06:22:8b:4d:11:4a:40:47:8e:c5:
fc:87:34:2c:88:d8:af:4a:6f:da:eb:0f:f4:83:38:
61:96:28:25:71:c6:22:39:e1:bd:d7:2b:b3:53:c5:
00:eb:2b:33:99:31:aa:46:31:fc:4e:e6:4c:1b:e1:
9d:db:27:f8:32:37:d6:e3:df:bf:60:dd:d4:07:a0:
c2:ba:35:67:51:b2:e1:78:c6:02:ed:19:24:14:6f:
8e:bb:82:e0:8b:cc:a0:d6:06:cd:b2:a3:e4:70:81:
a9:88:1c:ae:ce:48:75:16:0c:52:3c:c6:dc:e4:99:
90:89:3c:98:aa:4b:50:b8:9d:e6:04:c7:b1:b8:41:
3e:f7:fb:25:fd:d4:78:21:99:1e:4d:7c:7b:8e:81:
a9:33:de:73:fb:64:bd:e1:f6:b4:d5:17:0e:c2:ba:
97:72:19:76:8e:26:df:a5:2e:51:71:57:e4:30:a1:
9b:a1:90:32:25:95:1a:07:7c:d6:1b:db:44:eb:f1:
00:21:4a:02:7e:9b:a3:f4:0c:73:da:89:ed:97:1e:
63:28:04:b6:af:6e:e4:cb:a9:ce:ec:2b:a9:cd:f0:
b2:2b:cc:52:b6:6d:33:7b:16:26:f5:cc:b8:ff:00:
99:f2:34:ff:53:06:2d:d0:f2:2a:17:e0:30:f1:d7:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:72:A1:4C:99:2F:CF:D4:30:61:05:84:FF:07:8D:13:04:9D:A5:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEFF33E29F7511F0B5A363AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.84.0/24
Signature Algorithm: sha256WithRSAEncryption
36:96:ee:86:ed:90:45:0b:58:91:d8:61:93:2b:51:8c:2b:2c:
5a:b9:b7:15:3e:e6:db:d8:f5:41:7a:97:20:f3:d5:d2:bd:29:
d5:15:6e:97:3e:ee:22:bf:a2:aa:52:68:39:05:b9:a2:5d:7b:
86:70:0d:64:15:f0:e1:6a:a1:42:37:7f:a6:d1:a2:30:01:f7:
c6:c8:33:b6:33:5f:1f:a8:c3:3e:7a:6c:c4:19:4b:1f:07:0c:
63:5d:6a:35:03:cc:ae:55:2d:4f:d8:c7:ec:21:eb:6b:dd:86:
64:9d:a8:54:78:0c:00:35:f2:b3:65:f5:b1:27:9a:99:fe:62:
0b:43:ee:56:4c:a3:44:8f:b6:ae:d3:ef:46:02:cb:00:a8:85:
63:23:78:3b:c4:99:6b:c3:f1:ff:d8:9e:50:ed:0c:9c:a9:27:
e8:0b:92:47:37:d2:ae:e9:4b:a9:2c:99:e2:f1:a0:63:e0:93:
90:72:44:6f:dd:b5:12:a5:98:c6:81:92:2d:1a:da:ee:d8:e9:
9f:e5:14:22:11:01:32:83:b3:81:cf:63:c7:b2:17:7c:99:bc:
fb:84:cc:58:7a:7c:77:68:b8:37:a0:7f:48:d0:31:2e:0a:57:
7f:95:a6:60:92:b0:8c:99:81:9d:82:a0:be:32:69:14:50:de:
2c:05:2c:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX5uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDAyMDk1NDM0WhcNMjYxMDEzMDk1NDM0WjAYMRYw
FAYDVQQDEw02OGRlNGJkZS1jY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs06ryAYii00RSkBHjsX8hzQsiNivSm/a6w/0gzhhliglccYiOeG91yuz
U8UA6yszmTGqRjH8TuZMG+Gd2yf4MjfW49+/YN3UB6DCujVnUbLheMYC7RkkFG+O
u4Lgi8yg1gbNsqPkcIGpiByuzkh1FgxSPMbc5JmQiTyYqktQuJ3mBMexuEE+9/sl
/dR4IZkeTXx7joGpM95z+2S94fa01RcOwrqXchl2jibfpS5RcVfkMKGboZAyJZUa
B3zWG9tE6/EAIUoCfpuj9Axz2ontlx5jKAS2r27ky6nO7CupzfCyK8xStm0zexYm
9cy4/wCZ8jT/UwYt0PIqF+Aw8de1HwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ5y
oUyZL8/UMGEFhP8HjRMEnaXNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRUZGMzNFMjlGNzUxMUYwQjVBMzYzQUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOxUMA0GCSqGSIb3DQEBCwUA
A4IBAQA2lu6G7ZBFC1iR2GGTK1GMKyxaubcVPubb2PVBepcg89XSvSnVFW6XPu4i
v6KqUmg5BbmiXXuGcA1kFfDhaqFCN3+m0aIwAffGyDO2M18fqMM+emzEGUsfBwxj
XWo1A8yuVS1P2MfsIetr3YZknahUeAwANfKzZfWxJ5qZ/mILQ+5WTKNEj7au0+9G
AssAqIVjI3g7xJlrw/H/2J5Q7QycqSfoC5JHN9Ku6UupLJni8aBj4JOQckRv3bUS
pZjGgZItGtru2Omf5RQiEQEyg7OBz2PHshd8mbz7hMxYenx3aLg3oH9I0DEuCld/
laZgkrCMmYGdgqC+MmkUUN4sBSyI
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:36 2025 by rpki-client