Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D231DC89F7311F08F95E8A1DAE4EC9C.roa
File: 3D231DC89F7311F08F95E8A1DAE4EC9C.roa (raw, json)
Hash identifier: BSNK3t11FPKE19ScV4X7lhRXuqTIv+mvqX7iqs/luOo=
Subject key identifier: DE:0F:9B:96:C9:DE:15:2D:DC:AD:1C:E2:59:4A:D8:C2:07:58:C7:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D231DC89F7311F08F95E8A1DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:36:15 +0000
ROA not before: Thu 02 Oct 2025 09:36:10 +0000
ROA not after: Sun 09 Nov 2025 09:36:10 +0000
asID: 200373
IP address blocks: 156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.242.32.0/20 maxlen: 24
156.242.51.0/24 maxlen: 24
156.248.80.0/21 maxlen: 24
156.249.56.0/21 maxlen: 24
156.249.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97898 (0x17e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 09:36:10 2025 GMT
Not After : Nov 9 09:36:10 2025 GMT
Subject: CN=68de478f-c35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:80:79:7e:50:20:fc:48:00:62:28:fc:1a:
ef:74:8d:4c:f5:1a:ed:c5:61:93:3a:8e:3c:2e:2f:
a2:e5:65:d2:9b:9b:d4:02:11:6a:56:92:d4:33:a2:
08:af:16:de:c2:d0:64:88:4b:52:72:23:12:57:59:
76:31:e2:df:9e:ad:8a:ab:c4:d0:50:d3:f7:26:07:
88:a1:bf:d1:09:62:5f:78:83:ff:c3:a4:38:95:e2:
b7:7b:4b:9f:c9:8e:6d:ca:ca:bb:5b:d8:5b:3e:2a:
c7:45:6d:73:ab:0c:3c:20:da:23:b5:53:18:d8:bf:
e7:d9:29:0e:e8:05:d1:9d:d5:17:3f:d0:07:f1:e2:
c7:6f:8a:e3:5e:46:a5:8a:a8:55:1f:23:c4:be:41:
e6:0d:48:bb:fd:21:7f:28:04:6d:34:c3:1c:bb:a3:
2b:79:df:4f:a1:12:f5:06:da:6c:95:8a:dc:d2:9f:
d2:21:81:a0:a4:b1:b0:31:45:be:2c:4b:db:86:af:
10:06:cf:e6:46:15:54:b5:96:7c:d2:54:05:34:84:
45:58:38:d8:f8:c2:86:0a:56:06:86:31:cc:3c:b3:
17:c4:52:a2:d0:aa:3b:57:0b:9f:82:1a:88:ed:07:
9f:b0:a5:30:6a:c0:e5:11:8b:e6:52:f9:e7:f8:17:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:9B:96:C9:DE:15:2D:DC:AD:1C:E2:59:4A:D8:C2:07:58:C7:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D231DC89F7311F08F95E8A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.156.0/23
156.239.192.0/19
156.242.32.0/20
156.242.51.0/24
156.248.80.0/21
156.249.56.0/21
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
75:79:36:99:94:38:68:82:41:62:6b:62:95:ce:b7:79:8c:91:
88:d1:9c:93:a5:e7:fc:d2:e5:88:f6:74:56:24:01:b1:5b:5e:
0b:10:79:6b:0e:11:3e:89:99:9c:5f:93:04:6d:90:97:09:e7:
3a:1c:7d:61:98:7b:6b:90:bd:e8:10:51:3f:a9:20:cb:ec:95:
fc:6b:91:c6:90:1e:86:6d:04:34:a4:f9:68:1c:0f:6b:2d:95:
bf:7c:07:68:01:fc:e8:00:fc:0d:4d:b0:fa:0f:e0:68:53:ad:
12:aa:65:01:f5:3b:56:c7:8c:2e:e9:92:28:d8:2a:d8:12:70:
41:a6:e3:cc:64:fa:e1:e5:97:c6:31:93:c8:6d:36:81:0f:b7:
2e:b4:c9:d7:be:fa:de:19:8a:4e:f0:0c:1b:53:27:07:c2:0b:
02:04:70:e0:91:36:b1:00:37:f3:0f:cd:a2:e1:b3:f5:77:40:
be:ff:8c:05:2e:14:6d:e9:bb:6a:8a:87:dd:4e:9d:cf:05:bc:
10:9d:2b:b3:49:eb:5e:d6:41:42:b1:4c:f0:46:43:cf:b5:3f:
99:06:86:f6:3f:10:a5:18:66:8c:e8:66:4f:36:13:56:8c:f0:
6f:ab:bc:78:84:d3:c1:14:e6:17:5d:3e:2e:8b:a1:ca:2c:94:
eb:59:e0:6a
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAX5qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDAyMDkzNjEwWhcNMjUxMTA5MDkzNjEwWjAYMRYw
FAYDVQQDEw02OGRlNDc4Zi1jMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArDuAeX5QIPxIAGIo/BrvdI1M9RrtxWGTOo48Li+i5WXSm5vUAhFqVpLU
M6IIrxbewtBkiEtSciMSV1l2MeLfnq2Kq8TQUNP3JgeIob/RCWJfeIP/w6Q4leK3
e0ufyY5tysq7W9hbPirHRW1zqww8INojtVMY2L/n2SkO6AXRndUXP9AH8eLHb4rj
XkaliqhVHyPEvkHmDUi7/SF/KARtNMMcu6Mred9PoRL1BtpslYrc0p/SIYGgpLGw
MUW+LEvbhq8QBs/mRhVUtZZ80lQFNIRFWDjY+MKGClYGhjHMPLMXxFKi0Ko7Vwuf
ghqI7QefsKUwasDlEYvmUvnn+BeRgwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFN4P
m5bJ3hUt3K0c4llK2MIHWMeOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDIzMURDODlGNzMxMUYwOEY5NUU4QTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBnO+cAwQFnO/AAwQEnPIgAwQA
nPIzAwQDnPhQAwQDnPk4AwQCnPl8MA0GCSqGSIb3DQEBCwUAA4IBAQB1eTaZlDho
gkFia2KVzrd5jJGI0ZyTpef80uWI9nRWJAGxW14LEHlrDhE+iZmcX5MEbZCXCec6
HH1hmHtrkL3oEFE/qSDL7JX8a5HGkB6GbQQ0pPloHA9rLZW/fAdoAfzoAPwNTbD6
D+BoU60SqmUB9TtWx4wu6ZIo2CrYEnBBpuPMZPrh5ZfGMZPIbTaBD7cutMnXvvre
GYpO8AwbUycHwgsCBHDgkTaxADfzD82i4bP1d0C+/4wFLhRt6btqiofdTp3PBbwQ
nSuzSete1kFCsUzwRkPPtT+ZBob2PxClGGaM6GZPNhNWjPBvq7x4hNPBFOYXXT4u
i6HKLJTrWeBq
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:56 2025 by rpki-client