Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A489536B3FB11F0A27DA198DAE4EC9C.roa
File: 4A489536B3FB11F0A27DA198DAE4EC9C.roa (raw, json)
Hash identifier: pkBdtZvvdS983EehqMTgO0NSV+8yPmBGDGJLYjdbMGA=
Subject key identifier: 4C:FF:41:42:6E:EA:89:43:02:CC:9F:B1:81:6E:FC:35:9D:61:E7:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01837E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A489536B3FB11F0A27DA198DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 12:40:32 +0000
ROA not before: Tue 28 Oct 2025 12:40:27 +0000
ROA not after: Wed 10 Dec 2025 12:40:27 +0000
asID: 138915
IP address blocks: 156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99198 (0x1837e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 12:40:27 2025 GMT
Not After : Dec 10 12:40:27 2025 GMT
Subject: CN=6900b9bf-d5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:38:15:8f:dd:ff:fa:6a:59:97:fe:8c:31:
6e:64:5e:95:42:37:1f:e5:76:8a:ea:05:a8:d4:03:
13:b7:b6:d3:69:23:2e:09:c9:96:c6:df:3e:fb:a4:
60:3d:9c:1a:a0:7c:f7:57:0f:e8:06:bf:35:63:9b:
85:03:2e:2e:87:fd:ed:0c:d3:8b:5b:49:79:71:a3:
ed:91:99:35:07:a7:c5:a6:f1:0c:65:bf:2b:6f:48:
0f:90:e1:45:9f:d7:3e:10:0d:f6:fe:4f:b5:39:76:
d1:f5:dd:21:a2:76:75:d2:08:b1:15:1a:59:7c:45:
a8:f8:66:67:43:54:4d:f2:bd:51:b0:d1:b4:ce:64:
ae:02:a9:5b:72:36:a2:a2:dc:5b:b5:94:a1:e1:ac:
51:fd:58:17:f5:92:98:e1:16:13:6f:36:74:03:4a:
72:0d:e2:92:97:de:1f:41:10:cb:4a:42:db:47:d9:
c5:a6:ef:76:7f:4b:f8:77:8c:29:d1:6e:3a:91:21:
e7:fd:61:92:60:00:5b:da:61:36:9b:66:3d:d3:7e:
2c:6b:60:c0:3e:88:75:c5:15:bf:37:af:10:e6:da:
25:70:70:7b:55:80:5a:e3:9a:ee:75:e1:13:6f:13:
e8:0b:9e:98:77:80:70:cd:e8:9d:9f:f4:c2:52:dc:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:41:42:6E:EA:89:43:02:CC:9F:B1:81:6E:FC:35:9D:61:E7:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A489536B3FB11F0A27DA198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.10.0-156.244.15.255
156.244.37.0-156.244.38.255
156.244.55.0/24
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:59:a7:92:df:57:9c:54:08:54:6b:06:82:05:62:f8:18:f7:
11:9f:e4:5b:ea:3f:91:69:73:28:b0:cf:16:79:39:70:b3:1b:
c4:dc:f6:d7:88:b7:e1:0b:49:1c:0a:62:f9:ff:8f:95:29:2b:
13:4f:ad:c3:62:59:e9:87:d8:d4:ef:4a:fa:41:a0:70:38:f4:
83:12:64:4f:2c:ed:3b:00:e7:ee:3f:ff:42:46:f2:97:d2:ff:
56:d1:17:29:5d:0a:93:45:08:fd:53:cd:80:cd:ae:ba:dd:94:
ab:1f:3b:9d:b0:1d:75:91:6a:2e:fb:38:93:a8:c9:3a:ea:a5:
a6:ee:11:d6:93:7a:ad:7d:d1:c6:2a:82:2f:f1:f0:10:87:70:
53:ac:7b:8e:57:af:45:44:64:3a:dc:ef:ef:c1:e2:bd:c7:1c:
3a:03:26:fa:a9:88:b0:bb:57:a8:9e:86:8a:66:40:43:73:d8:
06:73:90:f2:70:ca:65:71:8e:0e:91:f9:e3:16:69:8c:91:10:
60:ae:6a:c4:c1:c2:68:84:35:53:73:11:bf:3a:bd:c7:7c:aa:
95:8b:2d:8c:39:33:9e:f7:66:03:e4:e9:c0:4d:0d:84:ca:31:
50:fe:27:d6:c9:ec:39:56:08:03:4c:43:b1:ec:3f:e7:a4:08:
df:3a:d1:b5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAYN+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MTI0MDI3WhcNMjUxMjEwMTI0MDI3WjAYMRYw
FAYDVQQDEw02OTAwYjliZi1kNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyMo4FY/d//pqWZf+jDFuZF6VQjcf5XaK6gWo1AMTt7bTaSMuCcmWxt8+
+6RgPZwaoHz3Vw/oBr81Y5uFAy4uh/3tDNOLW0l5caPtkZk1B6fFpvEMZb8rb0gP
kOFFn9c+EA32/k+1OXbR9d0honZ10gixFRpZfEWo+GZnQ1RN8r1RsNG0zmSuAqlb
cjaiotxbtZSh4axR/VgX9ZKY4RYTbzZ0A0pyDeKSl94fQRDLSkLbR9nFpu92f0v4
d4wp0W46kSHn/WGSYABb2mE2m2Y9034sa2DAPoh1xRW/N68Q5tolcHB7VYBa45ru
deETbxPoC56Yd4Bwzeidn/TCUtxzmwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFEz/
QUJu6olDAsyfsYFu/DWdYedyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QTQ4OTUzNkIzRkIxMUYwQTI3REExOThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAGc9AoDBASc9AAwDAMEAJz0
JQMEAJz0JgMEAJz0NwMEAZz0PjANBgkqhkiG9w0BAQsFAAOCAQEApFmnkt9XnFQI
VGsGggVi+Bj3EZ/kW+o/kWlzKLDPFnk5cLMbxNz214i34QtJHApi+f+PlSkrE0+t
w2JZ6YfY1O9K+kGgcDj0gxJkTyztOwDn7j//Qkbyl9L/VtEXKV0Kk0UI/VPNgM2u
ut2Uqx87nbAddZFqLvs4k6jJOuqlpu4R1pN6rX3RxiqCL/HwEIdwU6x7jlevRURk
Otzv78HivcccOgMm+qmIsLtXqJ6GimZAQ3PYBnOQ8nDKZXGODpH54xZpjJEQYK5q
xMHCaIQ1U3MRvzq9x3yqlYstjDkznvdmA+TpwE0NhMoxUP4n1snsOVYIA0xDsew/
56QI3zrRtQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:52 2025 by rpki-client