Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274AF170AE4A11F09AB5088EDAE4EC9C.roa
File: 274AF170AE4A11F09AB5088EDAE4EC9C.roa (raw, json)
Hash identifier: ZXs5z+lZ6Trk7mK2wQo5HPqgO0ytc/x6rxZuEAW3WkI=
Subject key identifier: 8F:F2:60:33:89:4F:0D:1E:B6:C4:74:79:AD:25:E5:54:B1:FD:AF:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274AF170AE4A11F09AB5088EDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 06:49:56 +0000
ROA not before: Tue 21 Oct 2025 06:49:50 +0000
ROA not after: Sun 16 Nov 2025 06:49:50 +0000
asID: 150706
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98766 (0x181ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 06:49:50 2025 GMT
Not After : Nov 16 06:49:50 2025 GMT
Subject: CN=68f72d14-a4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:d5:8b:95:ea:e3:8c:d0:e3:5e:15:38:94:
70:fa:db:1e:2c:58:d7:c1:85:47:e0:4e:d5:88:45:
fd:4a:4a:31:2f:39:0c:5a:17:52:78:ef:9a:77:3b:
14:8e:80:fd:73:99:47:b6:ba:0c:73:22:dc:19:46:
79:17:7a:70:47:0f:31:25:fc:94:8b:4d:5c:d6:db:
76:4d:c1:86:10:3e:6f:aa:63:6d:9c:f7:42:5d:54:
91:a5:53:2e:b5:67:7f:e2:cf:6a:8d:5b:fe:61:ba:
1b:86:5d:bf:17:13:37:66:47:79:22:76:a9:0e:44:
eb:eb:09:56:2f:4b:af:b0:84:c8:f2:88:e7:ac:0c:
7b:a3:e6:70:fe:0f:e6:df:36:6d:df:1f:8f:4e:91:
9e:fd:89:81:b7:6d:d2:99:84:df:fd:3f:84:af:60:
ea:4a:bb:83:5d:72:f8:b4:d3:13:11:a9:55:09:a7:
d7:6b:6d:7f:ff:9d:d2:33:6d:fb:3f:1a:5a:56:65:
42:18:95:54:17:4f:d0:34:96:ae:a8:06:c8:ae:39:
d0:4b:b4:20:40:61:9a:c3:29:31:08:30:26:ff:e7:
cf:07:ec:1c:b2:fc:84:df:be:97:3a:19:27:a2:cc:
d3:e2:ed:ed:4c:ab:52:de:e0:f4:4f:e7:2c:3a:e0:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:60:33:89:4F:0D:1E:B6:C4:74:79:AD:25:E5:54:B1:FD:AF:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274AF170AE4A11F09AB5088EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:03:a9:9e:15:ed:e3:50:de:cb:a8:f7:37:74:c9:81:9e:c6:
c5:25:38:8a:e0:eb:68:74:bd:9d:96:fd:24:69:ac:7b:35:75:
71:e2:7b:48:e5:c8:84:ce:8f:f2:c6:98:31:72:7e:a9:2a:ae:
4b:ac:4b:2d:5a:bf:05:fb:94:ec:12:3b:79:ee:be:1d:cb:1f:
18:f2:e2:53:73:18:f7:9e:27:85:3d:ef:c9:60:a6:d2:74:0c:
ab:34:f5:7b:5d:64:f1:70:23:b9:c2:e4:4d:84:9f:01:e1:51:
06:73:45:06:0f:16:56:d9:cc:60:fc:ef:a2:75:80:8d:91:15:
89:5c:cf:7b:45:0d:67:e4:15:0b:01:68:29:92:35:00:f8:39:
38:5b:a7:19:34:d5:8e:87:f0:78:93:71:a3:d2:ea:a4:fb:96:
08:b1:62:66:a5:c6:ad:bf:3d:c1:93:0a:40:d9:b7:c2:f7:81:
61:41:1f:a7:89:8f:48:e3:d0:b1:f1:f9:ed:ce:0a:1f:53:aa:
f0:df:dc:95:29:06:60:4f:1c:cc:f8:78:7b:04:6d:4e:92:18:
67:56:05:d8:56:5d:1c:e5:a5:92:43:4f:b5:d5:16:4f:e0:2b:
3f:a1:85:e1:f2:18:fd:60:04:15:11:3c:6e:a7:4c:e3:11:f6:
03:58:48:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYHOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIxMDY0OTUwWhcNMjUxMTE2MDY0OTUwWjAYMRYw
FAYDVQQDEw02OGY3MmQxNC1hNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApunVi5Xq44zQ414VOJRw+tseLFjXwYVH4E7ViEX9SkoxLzkMWhdSeO+a
dzsUjoD9c5lHtroMcyLcGUZ5F3pwRw8xJfyUi01c1tt2TcGGED5vqmNtnPdCXVSR
pVMutWd/4s9qjVv+Ybobhl2/FxM3Zkd5InapDkTr6wlWL0uvsITI8ojnrAx7o+Zw
/g/m3zZt3x+PTpGe/YmBt23SmYTf/T+Er2DqSruDXXL4tNMTEalVCafXa21//53S
M237PxpaVmVCGJVUF0/QNJauqAbIrjnQS7QgQGGawykxCDAm/+fPB+wcsvyE376X
OhknoszT4u3tTKtS3uD0T+csOuCS2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI/y
YDOJTw0etsR0ea0l5VSx/a/xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNzRBRjE3MEFFNEExMUYwOUFCNTA4OEVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP8CMA0GCSqGSIb3DQEBCwUA
A4IBAQBLA6meFe3jUN7LqPc3dMmBnsbFJTiK4OtodL2dlv0kaax7NXVx4ntI5ciE
zo/yxpgxcn6pKq5LrEstWr8F+5TsEjt57r4dyx8Y8uJTcxj3nieFPe/JYKbSdAyr
NPV7XWTxcCO5wuRNhJ8B4VEGc0UGDxZW2cxg/O+idYCNkRWJXM97RQ1n5BULAWgp
kjUA+Dk4W6cZNNWOh/B4k3Gj0uqk+5YIsWJmpcatvz3BkwpA2bfC94FhQR+niY9I
49Cx8fntzgofU6rw39yVKQZgTxzM+Hh7BG1OkhhnVgXYVl0c5aWSQ0+11RZP4Cs/
oYXh8hj9YAQVETxup0zjEfYDWEg0
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:58 2025 by rpki-client