Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1EACF60B72111F0A6F7D1E2DAE4EC9C.roa
File: F1EACF60B72111F0A6F7D1E2DAE4EC9C.roa (raw, json)
Hash identifier: w9IJcACr0mGNroY1lJqd5hS4f+luoeQR8lr/nxTlj2c=
Subject key identifier: CD:B7:8E:85:D6:E3:4F:E2:57:5D:B5:6D:72:84:91:9C:FA:4E:C5:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018439
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1EACF60B72111F0A6F7D1E2DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 12:54:47 +0000
ROA not before: Sat 01 Nov 2025 12:54:39 +0000
ROA not after: Tue 11 Nov 2025 12:54:39 +0000
asID: 139057
IP address blocks: 156.238.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99385 (0x18439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 12:54:39 2025 GMT
Not After : Nov 11 12:54:39 2025 GMT
Subject: CN=69060317-726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:87:97:71:12:94:4a:62:a4:7f:af:9b:ab:
ba:ab:22:7e:55:85:be:d8:72:f2:6c:4d:dd:26:4c:
d8:d6:e2:a1:0c:df:6e:84:bb:ca:14:21:80:2b:f7:
ea:8d:c4:ef:ef:e0:fe:64:90:95:33:13:ca:d1:89:
3c:ee:6e:f1:65:33:af:c0:81:97:0e:6f:00:b3:33:
ae:18:c6:80:5f:6b:8d:db:05:81:80:6a:a6:62:87:
b9:81:13:44:cd:f8:ce:d2:0d:c1:31:1d:86:8f:a7:
03:77:d1:bd:80:32:05:3d:ff:07:79:1d:d4:cb:e2:
0f:c5:c0:ee:82:00:82:7a:22:44:ce:67:a9:5b:f1:
a7:e6:70:24:67:ae:72:55:74:e8:0f:ec:32:a5:3d:
83:79:76:01:55:b7:03:12:de:48:a8:4d:a1:32:fe:
42:49:fb:aa:d7:ca:9b:96:5d:a9:a8:64:9f:a8:90:
43:b5:31:cb:fa:18:95:9f:de:27:91:75:73:67:7a:
2f:d6:b5:1b:30:cf:d2:f5:52:3e:78:64:9b:07:6f:
55:4f:2d:cf:dd:d3:91:db:47:ba:a1:50:63:eb:d5:
fb:d2:31:8c:42:a0:41:d0:df:90:a9:03:a1:49:ac:
71:b1:aa:cf:b4:87:24:74:9c:be:55:34:5b:cb:84:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:8E:85:D6:E3:4F:E2:57:5D:B5:6D:72:84:91:9C:FA:4E:C5:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1EACF60B72111F0A6F7D1E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.128.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:91:01:52:d4:c1:40:ad:08:4f:85:cd:b7:df:0b:e6:b1:4b:
2b:1d:87:d3:c7:7d:06:64:25:70:ae:f3:03:5f:36:8b:59:09:
4e:16:ea:a4:f1:b4:8e:a7:dd:13:9b:fb:fa:74:3c:d7:35:b4:
7d:7e:8f:ca:e8:af:2d:d4:e6:3e:8a:55:f7:7d:61:4c:f5:09:
cb:ca:d5:45:a5:93:df:8c:04:86:68:d6:48:41:fe:bf:7e:ef:
a3:13:58:09:37:32:c9:cf:3d:62:43:95:61:5a:d8:29:25:e2:
86:2f:50:ca:0a:c3:fa:bb:15:5e:19:98:d2:ba:45:06:8d:bd:
17:f5:48:f1:c2:10:cc:d8:8e:28:f7:35:3a:6d:8c:af:49:d3:
67:67:d0:c5:93:12:7a:86:3f:ab:88:d8:65:55:1e:c8:b8:bc:
d4:16:0b:95:cc:b0:88:21:4c:8f:91:ab:3e:83:c6:97:45:3a:
b5:82:93:9a:a9:75:eb:a2:d0:62:79:26:15:5b:a8:8c:43:cf:
64:80:21:27:18:16:62:eb:33:c6:9d:4e:0a:cf:65:65:c3:a4:
71:f2:65:40:30:ea:5a:99:f3:e2:af:27:12:21:06:ec:2c:0a:
6e:17:fd:af:d3:49:df:cb:f9:08:6f:ef:60:17:a3:99:07:3f:
e4:0a:42:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYQ5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAxMTI1NDM5WhcNMjUxMTExMTI1NDM5WjAYMRYw
FAYDVQQDEw02OTA2MDMxNy03MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAplaHl3ESlEpipH+vm6u6qyJ+VYW+2HLybE3dJkzY1uKhDN9uhLvKFCGA
K/fqjcTv7+D+ZJCVMxPK0Yk87m7xZTOvwIGXDm8AszOuGMaAX2uN2wWBgGqmYoe5
gRNEzfjO0g3BMR2Gj6cDd9G9gDIFPf8HeR3Uy+IPxcDuggCCeiJEzmepW/Gn5nAk
Z65yVXToD+wypT2DeXYBVbcDEt5IqE2hMv5CSfuq18qbll2pqGSfqJBDtTHL+hiV
n94nkXVzZ3ov1rUbMM/S9VI+eGSbB29VTy3P3dOR20e6oVBj69X70jGMQqBB0N+Q
qQOhSaxxsarPtIckdJy+VTRby4Q0ZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM23
joXW40/iV121bXKEkZz6TsXOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMUVBQ0Y2MEI3MjExMUYwQTZGN0QxRTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO6AMA0GCSqGSIb3DQEBCwUA
A4IBAQBMkQFS1MFArQhPhc233wvmsUsrHYfTx30GZCVwrvMDXzaLWQlOFuqk8bSO
p90Tm/v6dDzXNbR9fo/K6K8t1OY+ilX3fWFM9QnLytVFpZPfjASGaNZIQf6/fu+j
E1gJNzLJzz1iQ5VhWtgpJeKGL1DKCsP6uxVeGZjSukUGjb0X9UjxwhDM2I4o9zU6
bYyvSdNnZ9DFkxJ6hj+riNhlVR7IuLzUFguVzLCIIUyPkas+g8aXRTq1gpOaqXXr
otBieSYVW6iMQ89kgCEnGBZi6zPGnU4Kz2Vlw6Rx8mVAMOpamfPirycSIQbsLApu
F/2v00nfy/kIb+9gF6OZBz/kCkIV
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:06 2025 by rpki-client