Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742034CCB8AB11F0BB9AE692DAE4EC9C.roa
File: 742034CCB8AB11F0BB9AE692DAE4EC9C.roa (raw, json)
Hash identifier: EWEHAdq/1N3dmvCiZ8a00FGq8oJhDQ5xOvinSbyPxgo=
Subject key identifier: E2:E5:AD:35:65:FA:D3:26:08:21:35:2F:75:4E:1E:CB:12:95:70:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742034CCB8AB11F0BB9AE692DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 11:51:38 +0000
ROA not before: Mon 03 Nov 2025 11:51:32 +0000
ROA not after: Wed 10 Dec 2025 11:51:32 +0000
asID: 401701
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99495 (0x184a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 11:51:32 2025 GMT
Not After : Dec 10 11:51:32 2025 GMT
Subject: CN=6908974a-d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:68:be:66:14:97:07:3f:32:ec:07:86:1c:
a8:6e:c8:b8:09:18:fe:70:b0:4f:dc:d1:dc:6d:a9:
3a:42:da:05:2a:2a:41:97:a6:bc:5c:eb:a9:10:6f:
1f:9b:dd:ae:5d:c3:89:6a:3d:00:c2:43:44:68:c0:
66:b4:2d:4f:1d:19:5d:e4:2a:84:75:69:c1:d0:c2:
1b:ef:64:09:12:0f:11:c9:17:57:b4:e0:72:26:59:
a1:40:18:04:88:47:ff:a5:da:dd:cf:e4:b2:1a:3e:
cc:bc:b8:33:35:b0:ba:e2:a2:49:2e:e8:30:db:3e:
dd:14:d4:ff:73:e9:a0:ee:c0:1e:7f:36:a5:e7:0d:
74:42:50:3a:e7:14:ac:ab:8e:03:16:98:9e:d9:b0:
79:d3:58:a3:40:c0:6e:79:a7:43:e7:27:e9:51:0e:
20:68:65:9a:61:03:88:81:ab:85:68:87:b8:57:77:
50:f6:81:4a:89:10:47:5c:22:10:96:6e:90:63:10:
55:e1:43:2d:f6:cd:90:a6:37:2e:cb:ed:0e:f9:1e:
f0:39:3a:ce:56:09:da:60:b1:08:18:b6:2a:26:d6:
d9:71:3b:c5:d6:8e:d6:83:28:af:bb:47:65:f5:39:
e9:4d:d9:16:8b:9c:1d:20:3c:18:38:0a:19:cd:5e:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:AD:35:65:FA:D3:26:08:21:35:2F:75:4E:1E:CB:12:95:70:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742034CCB8AB11F0BB9AE692DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:84:80:77:de:84:67:10:24:10:f5:76:da:a1:4f:36:9c:c8:
eb:a3:da:b6:5e:a4:67:c9:ef:da:47:00:0f:cf:ea:99:42:99:
39:4b:5a:35:98:14:3e:16:2e:49:5f:a0:5f:02:90:66:07:5c:
59:1d:b4:86:29:5c:72:04:37:54:61:0b:c1:2c:e4:83:5a:35:
dc:34:48:30:b7:6b:68:6f:9e:8d:e6:3a:a8:63:cb:d7:5b:08:
05:71:07:0b:a6:68:af:6d:6b:05:48:bb:4a:ca:eb:db:63:ad:
0b:e7:58:36:b8:81:e6:3b:08:9a:af:51:ef:5e:1e:97:b5:29:
b4:df:a4:e8:f4:a8:e1:a0:0e:09:80:12:95:4e:21:49:10:f4:
f8:6a:7c:1a:c3:b4:30:66:e3:53:22:89:bb:0b:e5:e4:59:65:
0a:97:54:a6:90:04:ef:5d:be:c6:53:20:58:8d:ad:9d:8c:e4:
f3:00:d8:51:12:b3:64:56:f8:8a:eb:14:cf:15:55:cf:c1:d6:
8e:c2:dd:fc:ad:12:55:8a:51:1f:8d:04:aa:c1:04:ee:5c:50:
d0:77:ba:47:f8:47:c1:75:7a:6d:30:d0:42:4e:54:7e:22:27:
16:35:12:4b:2d:ee:75:95:bd:76:6b:86:af:84:5b:68:fe:1f:
d3:5a:23:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYSnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMTE1MTMyWhcNMjUxMjEwMTE1MTMyWjAYMRYw
FAYDVQQDEw02OTA4OTc0YS1kMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1LtovmYUlwc/MuwHhhyobsi4CRj+cLBP3NHcbak6QtoFKipBl6a8XOup
EG8fm92uXcOJaj0AwkNEaMBmtC1PHRld5CqEdWnB0MIb72QJEg8RyRdXtOByJlmh
QBgEiEf/pdrdz+SyGj7MvLgzNbC64qJJLugw2z7dFNT/c+mg7sAefzal5w10QlA6
5xSsq44DFpie2bB501ijQMBueadD5yfpUQ4gaGWaYQOIgauFaIe4V3dQ9oFKiRBH
XCIQlm6QYxBV4UMt9s2Qpjcuy+0O+R7wOTrOVgnaYLEIGLYqJtbZcTvF1o7Wgyiv
u0dl9TnpTdkWi5wdIDwYOAoZzV4c5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOLl
rTVl+tMmCCE1L3VOHssSlXCeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDIwMzRDQ0I4QUIxMUYwQkI5QUU2OTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQCyhIB33oRnECQQ9XbaoU82nMjro9q2XqRnye/aRwAPz+qZQpk5S1o1mBQ+
Fi5JX6BfApBmB1xZHbSGKVxyBDdUYQvBLOSDWjXcNEgwt2tob56N5jqoY8vXWwgF
cQcLpmivbWsFSLtKyuvbY60L51g2uIHmOwiar1HvXh6XtSm036To9KjhoA4JgBKV
TiFJEPT4anwaw7QwZuNTIom7C+XkWWUKl1SmkATvXb7GUyBYja2djOTzANhRErNk
VviK6xTPFVXPwdaOwt38rRJVilEfjQSqwQTuXFDQd7pH+EfBdXptMNBCTlR+IicW
NRJLLe51lb12a4avhFto/h/TWiOH
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:49 2025 by rpki-client