Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0E3471CB3F611F0AD88897CDAE4EC9C.roa
File: D0E3471CB3F611F0AD88897CDAE4EC9C.roa (raw, json)
Hash identifier: jlY3qfUchKmjxYskl+kp08dgMSZiRUBFq90Hvl8paBw=
Subject key identifier: 51:56:EF:7C:CC:C6:92:30:B1:C5:F9:D1:18:AB:44:9F:56:13:C4:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018374
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0E3471CB3F611F0AD88897CDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 12:08:30 +0000
ROA not before: Tue 28 Oct 2025 12:08:23 +0000
ROA not after: Wed 10 Dec 2025 12:08:23 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
156.244.42.0/24 maxlen: 24
156.244.43.0/24 maxlen: 24
156.244.44.0/24 maxlen: 24
156.244.45.0/24 maxlen: 24
156.244.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99188 (0x18374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 12:08:23 2025 GMT
Not After : Dec 10 12:08:23 2025 GMT
Subject: CN=6900b23e-c983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:c2:72:56:23:9f:d4:8b:6c:cc:1d:9a:bd:
f9:15:72:56:ae:5f:f0:8d:58:55:ff:9c:34:65:c4:
28:c7:78:ac:95:8e:0e:27:91:4a:29:dc:1b:4c:17:
2d:80:8e:03:94:bc:e0:61:ad:f2:4d:d4:44:74:93:
76:8c:57:7a:46:71:b7:21:7c:99:93:10:45:03:a8:
cd:a7:d3:d8:2e:3c:3e:75:f1:91:28:f4:98:32:e9:
0a:e3:e7:65:14:fe:95:4c:fc:9f:0f:8a:fa:d2:d5:
4f:af:02:d0:13:99:d6:07:ae:21:dd:13:3f:79:05:
43:91:0e:3c:49:1d:17:3f:7b:55:f8:cd:b6:f2:47:
18:36:bc:3c:ce:d8:b7:bc:48:9f:71:de:b8:cd:9f:
42:8e:85:24:68:0a:24:cc:55:fa:21:22:8b:d2:d2:
35:ac:0e:cb:65:fd:8c:8b:8d:5e:c7:1e:8f:5d:7e:
6a:72:4e:a2:64:5f:b0:c9:87:ab:08:35:46:c7:bd:
87:9b:33:e2:72:fe:1f:b7:01:b4:e3:b2:b3:29:57:
e7:c4:b2:be:29:46:eb:7a:69:7d:65:05:c8:3a:81:
d8:cb:1f:65:30:b4:b4:44:b4:12:53:35:0a:f0:f0:
00:7d:ab:66:5c:2d:41:db:84:63:33:71:8c:64:5a:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:EF:7C:CC:C6:92:30:B1:C5:F9:D1:18:AB:44:9F:56:13:C4:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0E3471CB3F611F0AD88897CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
156.244.39.0-156.244.46.255
Signature Algorithm: sha256WithRSAEncryption
4e:e2:f8:ba:3b:4c:9e:bc:13:45:f6:9d:fe:0e:6b:8c:3e:88:
f2:d6:c1:1b:9b:cc:7c:d1:a3:be:94:e8:be:0e:f1:23:31:b8:
60:b1:d5:6a:36:65:0b:66:b4:00:71:0b:ea:27:8c:4f:7b:9f:
f1:6e:d6:c9:55:83:43:5e:a8:01:d4:b4:ee:44:c4:3c:76:41:
ff:de:31:aa:c5:fb:76:fd:48:5e:8a:bd:95:89:fd:e9:0c:ce:
7e:d7:24:6d:cd:1f:42:5b:36:ee:92:cd:91:be:15:6c:9c:27:
fd:34:11:dc:7d:f5:eb:58:cf:6a:71:5b:82:28:a7:c0:f2:ed:
50:39:bd:03:3f:7a:e4:9f:7d:91:09:ed:e3:a1:23:ac:b6:f1:
fa:83:6e:3b:b3:da:c2:85:f7:2f:5c:4f:5b:6b:fd:8d:05:f0:
fd:6b:23:42:07:20:85:03:b5:01:85:af:01:d2:aa:9e:54:b7:
2f:b3:b7:00:86:8a:ba:d4:2a:b2:af:c6:7c:06:9a:41:10:4c:
75:fd:67:99:9a:8d:c3:37:cb:5a:f2:2c:3f:0d:e0:75:90:8f:
13:2d:80:73:57:ae:7d:de:80:75:2b:84:bf:e7:84:6e:d0:29:
1e:b7:a6:1c:33:be:c0:3f:1c:b0:ef:cc:e9:8b:7f:7c:69:7a:
87:65:ce:bb
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAYN0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MTIwODIzWhcNMjUxMjEwMTIwODIzWjAYMRYw
FAYDVQQDEw02OTAwYjIzZS1jOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnnvCclYjn9SLbMwdmr35FXJWrl/wjVhV/5w0ZcQox3islY4OJ5FKKdwb
TBctgI4DlLzgYa3yTdREdJN2jFd6RnG3IXyZkxBFA6jNp9PYLjw+dfGRKPSYMukK
4+dlFP6VTPyfD4r60tVPrwLQE5nWB64h3RM/eQVDkQ48SR0XP3tV+M228kcYNrw8
zti3vEifcd64zZ9CjoUkaAokzFX6ISKL0tI1rA7LZf2Mi41exx6PXX5qck6iZF+w
yYerCDVGx72HmzPicv4ftwG047KzKVfnxLK+KUbreml9ZQXIOoHYyx9lMLS0RLQS
UzUK8PAAfatmXC1B24RjM3GMZFqdrQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFFFW
73zMxpIwscX50RirRJ9WE8Q4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMEUzNDcxQ0IzRjYxMUYwQUQ4ODg5N0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACc9BcDBACc9BgwDAMEAJz0
JwMEAJz0LjANBgkqhkiG9w0BAQsFAAOCAQEATuL4ujtMnrwTRfad/g5rjD6I8tbB
G5vMfNGjvpTovg7xIzG4YLHVajZlC2a0AHEL6ieMT3uf8W7WyVWDQ16oAdS07kTE
PHZB/94xqsX7dv1IXoq9lYn96QzOftckbc0fQls27pLNkb4VbJwn/TQR3H3161jP
anFbgiinwPLtUDm9Az965J99kQnt46EjrLbx+oNuO7PawoX3L1xPW2v9jQXw/Wsj
QgcghQO1AYWvAdKqnlS3L7O3AIaKutQqsq/GfAaaQRBMdf1nmZqNwzfLWvIsPw3g
dZCPEy2Ac1eufd6AdSuEv+eEbtApHremHDO+wD8csO/M6Yt/fGl6h2XOuw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:40 2025 by rpki-client