Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E9E1049EA611F0AA425BF3DAE4EC9C.roa
File: F8E9E1049EA611F0AA425BF3DAE4EC9C.roa (raw, json)
Hash identifier: gtF3pwEtHMBXP3hoTo1wcWdrA1MMb7ytemBOcFhGxew=
Subject key identifier: DD:04:EE:EB:80:92:A4:25:6E:0E:4B:45:88:8F:D3:5E:BD:B0:CD:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E9E1049EA611F0AA425BF3DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 09:14:03 +0000
ROA not before: Wed 01 Oct 2025 09:13:58 +0000
ROA not after: Mon 10 Nov 2025 09:13:58 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97863 (0x17e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 09:13:58 2025 GMT
Not After : Nov 10 09:13:58 2025 GMT
Subject: CN=68dcf0db-bd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:32:1a:0f:61:89:78:98:32:d6:89:cf:47:
2b:9c:0f:ff:0b:a3:30:44:c7:8e:81:97:95:ba:4d:
1b:16:02:26:f8:74:22:9c:6b:ea:ac:33:31:80:70:
ba:a0:cb:41:9f:1b:78:4f:67:74:be:80:c5:1b:59:
f4:76:c2:c6:85:f7:c4:26:3b:02:a4:38:3d:17:1a:
83:7d:bf:1d:cb:8b:d6:b8:3c:da:13:40:64:60:74:
b9:99:79:3a:ba:fe:fe:6c:84:c9:29:e7:9d:30:22:
1b:d8:6c:a1:4c:4d:0e:0b:0c:e0:3e:a9:c9:8c:fc:
d8:c1:4e:ef:8d:c4:8a:b7:83:3b:8b:99:0a:53:48:
f8:e2:f7:00:f8:67:53:b0:6b:35:e4:b7:da:c8:00:
ef:51:c7:03:22:e6:4d:dc:af:cf:ba:e2:47:26:82:
de:f4:be:28:80:91:d3:00:ee:52:68:12:43:ab:7f:
7d:9b:d8:a8:22:8f:2d:a8:3f:c5:ab:57:d2:b3:53:
61:2c:20:fc:92:8a:56:42:54:bd:3e:1f:37:73:fe:
45:1c:5a:41:1e:96:a4:9b:8f:3b:53:85:e8:da:eb:
ba:23:87:0c:c9:e0:13:ec:3b:e5:ea:15:a6:3f:01:
b9:7c:c5:8c:05:40:2e:ad:e5:04:2f:44:6b:27:49:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:EE:EB:80:92:A4:25:6E:0E:4B:45:88:8F:D3:5E:BD:B0:CD:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E9E1049EA611F0AA425BF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
29:4d:a8:3d:b0:d0:69:ed:7d:68:cc:41:83:8d:03:12:dd:5b:
69:5a:3a:ae:54:78:e1:77:91:08:9d:53:d8:66:c0:4a:9c:39:
a1:5e:85:5a:3d:95:39:5a:f8:36:ef:4e:72:94:ef:a3:f5:f6:
30:44:13:8c:d2:37:38:eb:6e:93:c4:6f:2e:eb:02:15:86:43:
8f:a3:ec:d3:8d:d2:f3:0b:11:0d:91:b2:e0:33:26:a0:d7:8d:
54:dc:cc:ff:0b:89:98:b5:e9:ff:82:51:3a:3c:69:27:48:da:
51:16:0e:f6:7f:5a:85:ea:d8:cb:9b:a1:ab:62:8d:ef:36:42:
0c:d3:48:fc:ba:ab:f7:0f:b3:10:64:06:b6:13:35:d2:60:e4:
34:b7:c5:2f:1c:e7:d4:e4:e8:54:48:1f:76:7a:e0:13:df:06:
4b:0a:25:5d:96:c7:2e:dd:71:a2:30:da:bb:d0:72:2e:f9:d1:
c2:b6:22:ab:c8:94:a6:5c:05:97:55:16:85:28:75:a6:8e:67:
c8:7e:e6:a5:a7:47:b0:d0:34:54:6b:ce:57:94:c8:39:c1:37:
4c:6f:76:aa:af:fd:7d:74:94:0c:eb:b3:01:51:04:66:d6:ac:
d5:c8:5d:99:d1:1f:ea:59:f9:35:df:3d:34:9e:38:0d:46:2d:
e3:b2:9f:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX5HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDAxMDkxMzU4WhcNMjUxMTEwMDkxMzU4WjAYMRYw
FAYDVQQDEw02OGRjZjBkYi1iZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwO0yGg9hiXiYMtaJz0crnA//C6MwRMeOgZeVuk0bFgIm+HQinGvqrDMx
gHC6oMtBnxt4T2d0voDFG1n0dsLGhffEJjsCpDg9FxqDfb8dy4vWuDzaE0BkYHS5
mXk6uv7+bITJKeedMCIb2GyhTE0OCwzgPqnJjPzYwU7vjcSKt4M7i5kKU0j44vcA
+GdTsGs15LfayADvUccDIuZN3K/PuuJHJoLe9L4ogJHTAO5SaBJDq399m9ioIo8t
qD/Fq1fSs1NhLCD8kopWQlS9Ph83c/5FHFpBHpakm487U4Xo2uu6I4cMyeAT7Dvl
6hWmPwG5fMWMBUAureUEL0RrJ0kAwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN0E
7uuAkqQlbg5LRYiP0169sM2VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOEU5RTEwNDlFQTYxMUYwQUE0MjVCRjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQApTag9sNBp7X1ozEGDjQMS3VtpWjquVHjhd5EInVPYZsBKnDmhXoVaPZU5
Wvg2705ylO+j9fYwRBOM0jc4626TxG8u6wIVhkOPo+zTjdLzCxENkbLgMyag141U
3Mz/C4mYten/glE6PGknSNpRFg72f1qF6tjLm6GrYo3vNkIM00j8uqv3D7MQZAa2
EzXSYOQ0t8UvHOfU5OhUSB92euAT3wZLCiVdlscu3XGiMNq70HIu+dHCtiKryJSm
XAWXVRaFKHWmjmfIfualp0ew0DRUa85XlMg5wTdMb3aqr/19dJQM67MBUQRm1qzV
yF2Z0R/qWfk13z00njgNRi3jsp+6
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:46 2025 by rpki-client