Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CE1A12A35011F0BD3EDCB7DAE4EC9C.roa
File: 47CE1A12A35011F0BD3EDCB7DAE4EC9C.roa (raw, json)
Hash identifier: v5Od2d/RSE/HOTmVmfgPLlQmLDHHlrauRA3QpxlWSRM=
Subject key identifier: 2A:CC:AF:C0:56:52:A3:36:D2:5B:B6:78:93:22:95:59:0F:B2:E0:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CE1A12A35011F0BD3EDCB7DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 07:36:05 +0000
ROA not before: Tue 07 Oct 2025 07:35:56 +0000
ROA not after: Thu 13 Nov 2025 07:35:56 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98084 (0x17f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 07:35:56 2025 GMT
Not After : Nov 13 07:35:56 2025 GMT
Subject: CN=68e4c2e5-35e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:ab:58:fe:a6:28:98:c3:e9:f5:fb:c4:ec:
d5:f6:e5:10:e4:a1:4e:61:bc:50:04:7f:60:2f:88:
51:95:47:33:58:f4:58:69:25:d7:d9:e0:ec:48:ab:
10:1c:c7:c4:47:16:56:f1:2f:2c:80:f8:00:e9:c7:
77:19:01:76:ef:7c:73:8e:9d:38:99:c7:9c:b5:98:
e2:cc:dc:a7:8c:45:f0:6b:6d:39:34:a0:f7:26:d7:
c0:a3:71:fa:4e:a5:94:d9:d9:22:43:30:e9:82:5f:
fe:84:89:b9:f4:75:bb:bc:2c:ee:fc:a3:55:45:d9:
13:ee:b4:43:f1:48:fb:e8:c9:cf:4a:6b:3f:58:9b:
bb:11:4b:5e:a5:90:ae:71:37:38:6f:ae:67:ae:02:
17:8c:2f:81:79:f6:a6:b5:2c:58:ad:f1:ca:f3:3a:
1f:f1:ac:8d:24:05:0f:97:6e:3c:35:a4:fd:13:a9:
e7:db:16:ba:da:30:3a:07:2e:f9:b0:13:78:6b:8e:
d4:c6:cf:1f:a2:c7:ce:e1:2b:1e:69:43:d2:36:eb:
ab:fc:cc:65:1d:7e:fd:12:78:72:d5:17:ce:9d:18:
5c:25:6d:a5:68:a3:69:14:3c:02:bf:e8:d1:85:bf:
51:a1:72:78:4c:91:35:1b:9f:8f:1a:43:eb:1b:f2:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:AF:C0:56:52:A3:36:D2:5B:B6:78:93:22:95:59:0F:B2:E0:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CE1A12A35011F0BD3EDCB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
70:de:73:d5:64:69:1d:e4:b0:1a:1f:26:da:f6:7e:54:de:56:
58:19:f0:02:70:4a:1d:6f:7b:87:0c:4e:ae:9e:34:58:42:a1:
4a:73:e4:26:ff:34:11:6c:92:da:04:51:a4:4d:29:fb:fa:26:
64:42:9d:c0:ba:a1:98:ba:cf:7d:45:a7:99:11:7d:8e:e3:fa:
a1:e1:b6:33:0c:73:a3:52:dd:6d:65:5f:12:5b:0d:41:23:5c:
0c:18:5a:48:33:3d:f7:28:f8:1b:eb:96:93:55:94:c0:87:93:
67:05:de:54:4c:d7:59:3c:5f:ae:ec:1d:dc:b3:81:aa:76:a9:
0c:bc:31:ba:52:94:ee:18:06:ae:26:fb:b2:47:04:a2:f8:1c:
99:84:f4:a3:77:26:ca:3d:09:0e:69:4b:3c:3a:2c:2c:d5:fb:
07:89:24:17:ec:37:4b:3e:4a:f6:a1:66:b3:64:e8:d6:2e:e5:
87:35:c2:28:2f:9d:53:4f:32:6c:3b:f8:3a:0e:4d:74:59:c6:
03:94:c4:ed:1f:ce:77:17:fb:2b:b9:0e:25:3a:82:58:fc:e9:
31:4f:ab:73:ac:bc:a1:14:f8:65:8f:7f:39:2a:e0:65:07:89:
b6:c0:7b:12:bf:c9:97:63:25:6b:26:e5:3b:da:39:92:f5:0d:
9e:52:0c:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX8kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA3MDczNTU2WhcNMjUxMTEzMDczNTU2WjAYMRYw
FAYDVQQDEw02OGU0YzJlNS0zNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1FirWP6mKJjD6fX7xOzV9uUQ5KFOYbxQBH9gL4hRlUczWPRYaSXX2eDs
SKsQHMfERxZW8S8sgPgA6cd3GQF273xzjp04mcectZjizNynjEXwa205NKD3JtfA
o3H6TqWU2dkiQzDpgl/+hIm59HW7vCzu/KNVRdkT7rRD8Uj76MnPSms/WJu7EUte
pZCucTc4b65nrgIXjC+BefamtSxYrfHK8zof8ayNJAUPl248NaT9E6nn2xa62jA6
By75sBN4a47Uxs8fosfO4SseaUPSNuur/MxlHX79Enhy1RfOnRhcJW2laKNpFDwC
v+jRhb9RoXJ4TJE1G5+PGkPrG/KDhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCrM
r8BWUqM20lu2eJMilVkPsuCoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80N0NFMUExMkEzNTAxMUYwQkQzRURDQjdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwNMA0GCSqGSIb3DQEBCwUA
A4IBAQBw3nPVZGkd5LAaHyba9n5U3lZYGfACcEodb3uHDE6unjRYQqFKc+Qm/zQR
bJLaBFGkTSn7+iZkQp3AuqGYus99RaeZEX2O4/qh4bYzDHOjUt1tZV8SWw1BI1wM
GFpIMz33KPgb65aTVZTAh5NnBd5UTNdZPF+u7B3cs4GqdqkMvDG6UpTuGAauJvuy
RwSi+ByZhPSjdybKPQkOaUs8Oiws1fsHiSQX7DdLPkr2oWazZOjWLuWHNcIoL51T
TzJsO/g6Dk10WcYDlMTtH853F/sruQ4lOoJY/OkxT6tzrLyhFPhlj385KuBlB4m2
wHsSv8mXYyVrJuU72jmS9Q2eUgyY
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:11 2025 by rpki-client