Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E2C558B91811F0B42B38B1DAE4EC9C.roa
File: B3E2C558B91811F0B42B38B1DAE4EC9C.roa (raw, json)
Hash identifier: 9UoxAOtcToMX9bwDVzW1jX8W8+yqXfO0tdqmBDYkZms=
Subject key identifier: 29:9D:06:34:68:43:A3:CC:E6:3F:16:1B:81:67:26:F7:E8:F1:FD:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E2C558B91811F0B42B38B1DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 00:53:42 +0000
ROA not before: Tue 04 Nov 2025 00:00:31 +0000
ROA not after: Tue 11 Nov 2025 00:00:31 +0000
asID: 137263
IP address blocks: 156.224.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99511 (0x184b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 00:00:31 2025 GMT
Not After : Nov 11 00:00:31 2025 GMT
Subject: CN=69094e96-89be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:c5:5a:24:80:22:fb:69:db:f4:d5:27:7e:
22:2e:a9:48:12:23:38:64:6e:bf:a4:84:b3:73:60:
82:d8:32:38:aa:ac:4b:c8:6b:99:b7:75:25:0e:77:
84:30:2f:1b:22:34:bc:be:c9:7f:8b:2f:2d:e3:be:
ec:d5:df:92:d9:4e:00:6c:f2:43:d0:be:4c:80:c8:
bc:03:c8:a1:7d:5b:42:44:88:67:d3:f3:b1:20:4e:
ce:4d:d5:59:12:ac:86:74:fd:b4:84:3e:c8:81:a3:
26:ab:23:e0:97:1e:17:2d:b0:d8:93:af:b5:59:2a:
e2:70:0e:27:38:19:dc:fd:ba:87:a1:56:fc:d7:60:
ac:d6:eb:fe:d0:84:8a:ed:dc:87:05:5c:99:29:6e:
19:8e:cc:b0:c4:52:39:32:fc:0d:6e:31:fa:54:6a:
80:e1:82:96:f6:eb:85:29:1d:cd:6f:51:e6:60:95:
62:a9:7d:a8:b4:1e:53:75:cd:9d:dd:af:25:d0:ac:
c2:15:35:7b:ed:33:74:ec:ef:ff:a8:4a:d8:83:d6:
3b:ec:53:a6:36:b5:2b:d7:d9:5c:c3:f7:2b:e2:5a:
84:cf:02:b9:4e:40:0e:e4:9a:e6:90:f5:38:60:90:
60:53:11:08:10:28:2b:46:fb:6c:d9:c9:cb:cc:15:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:06:34:68:43:A3:CC:E6:3F:16:1B:81:67:26:F7:E8:F1:FD:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E2C558B91811F0B42B38B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:60:f7:78:60:a2:90:3a:34:f9:fa:9d:e2:11:7b:f7:22:6b:
9f:1e:af:ea:07:68:ea:5d:ab:62:3c:d3:b2:6b:8a:f2:39:cd:
7b:ad:04:ff:0e:fe:6f:68:e5:ff:cd:57:93:e8:52:8a:58:0e:
62:18:70:2a:38:07:5e:5b:a3:99:bf:1e:d4:3b:58:15:6d:5f:
a1:3a:ba:cb:9a:59:d0:a9:70:5a:d9:8f:ea:7c:f1:c3:93:ee:
64:53:09:d9:31:2e:16:44:6c:91:96:8a:1e:bb:94:aa:86:56:
e2:fa:d1:c7:3b:70:5e:25:91:e0:87:85:1c:6c:1e:84:7a:31:
57:9f:c1:c7:a1:5d:9f:ea:a1:8c:3d:fd:a5:ee:ed:52:44:3d:
83:1d:04:35:29:c4:95:e4:de:bb:81:76:20:dc:99:71:43:e9:
57:60:69:20:d4:59:6d:20:35:d2:7d:2a:bd:5b:5c:e4:e2:85:
16:00:bc:35:5f:17:16:29:d1:fa:d2:5a:37:49:06:52:f6:a7:
24:12:26:7b:95:1f:08:ae:18:20:18:18:f0:f4:a3:92:49:0f:
82:a7:aa:60:89:82:95:02:d5:28:55:ad:6d:b7:03:6c:9b:d2:
68:ad:6e:38:ff:2d:a3:ba:ab:61:f7:dd:21:a7:9e:ca:78:1e:
16:be:75:aa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYS3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA0MDAwMDMxWhcNMjUxMTExMDAwMDMxWjAYMRYw
FAYDVQQDEw02OTA5NGU5Ni04OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtXfFWiSAIvtp2/TVJ34iLqlIEiM4ZG6/pISzc2CC2DI4qqxLyGuZt3Ul
DneEMC8bIjS8vsl/iy8t477s1d+S2U4AbPJD0L5MgMi8A8ihfVtCRIhn0/OxIE7O
TdVZEqyGdP20hD7IgaMmqyPglx4XLbDYk6+1WSricA4nOBnc/bqHoVb812Cs1uv+
0ISK7dyHBVyZKW4ZjsywxFI5MvwNbjH6VGqA4YKW9uuFKR3Nb1HmYJViqX2otB5T
dc2d3a8l0KzCFTV77TN07O//qErYg9Y77FOmNrUr19lcw/cr4lqEzwK5TkAO5Jrm
kPU4YJBgUxEIECgrRvts2cnLzBVlDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCmd
BjRoQ6PM5j8WG4FnJvfo8f2wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CM0UyQzU1OEI5MTgxMUYwQjQyQjM4QjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOBRMA0GCSqGSIb3DQEBCwUA
A4IBAQBaYPd4YKKQOjT5+p3iEXv3ImufHq/qB2jqXatiPNOya4ryOc17rQT/Dv5v
aOX/zVeT6FKKWA5iGHAqOAdeW6OZvx7UO1gVbV+hOrrLmlnQqXBa2Y/qfPHDk+5k
UwnZMS4WRGyRlooeu5Sqhlbi+tHHO3BeJZHgh4UcbB6EejFXn8HHoV2f6qGMPf2l
7u1SRD2DHQQ1KcSV5N67gXYg3JlxQ+lXYGkg1FltIDXSfSq9W1zk4oUWALw1XxcW
KdH60lo3SQZS9qckEiZ7lR8IrhggGBjw9KOSSQ+Cp6pgiYKVAtUoVa1ttwNsm9Jo
rW44/y2juqth990hp57KeB4WvnWq
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:49 2025 by rpki-client