Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57B2AB4EB88811F09616C3B5DAE4EC9C.roa
File: 57B2AB4EB88811F09616C3B5DAE4EC9C.roa (raw, json)
Hash identifier: 0llrVVJ63iO9cerpJVxETM8A+PEGSk9SOPZjmwRCGIg=
Subject key identifier: C9:D0:26:CA:44:23:EC:62:39:19:F1:CA:53:4E:2A:0A:4B:59:83:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018459
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57B2AB4EB88811F09616C3B5DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 07:40:18 +0000
ROA not before: Mon 03 Nov 2025 07:40:13 +0000
ROA not after: Sun 09 Nov 2025 07:40:13 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Nov 2025 00:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99417 (0x18459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 07:40:13 2025 GMT
Not After : Nov 9 07:40:13 2025 GMT
Subject: CN=69085c62-392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:71:2a:77:19:05:17:3a:34:03:71:5b:33:
21:a7:50:c6:ec:ec:1c:f8:e5:79:19:84:d2:bb:50:
76:a2:f3:15:8b:2b:dd:13:fb:78:4a:79:c3:aa:4e:
9f:09:cd:68:1e:4f:81:0f:26:2e:71:fe:7f:05:55:
7b:af:db:d9:db:38:f3:ef:11:46:37:24:4d:35:3a:
7d:da:1a:5b:9d:ea:99:cb:03:1d:72:d6:c9:be:f1:
d6:6d:80:dd:9c:b5:95:e9:05:4f:5c:b6:72:35:76:
1d:86:65:07:36:0f:2c:fd:b0:99:c0:ed:a9:a6:0c:
f5:92:a2:44:fd:00:4a:c9:e9:20:86:49:0c:40:75:
94:9e:0b:ea:ea:94:6c:ee:7d:7a:c5:31:69:ff:be:
9d:b0:08:41:f3:98:32:82:3e:4b:4d:1b:d7:fc:06:
22:dc:06:e4:0e:32:31:85:cd:ed:bd:bb:e3:2a:ef:
15:c1:0c:b9:e9:82:ac:0e:36:76:86:de:1c:4c:0b:
0a:25:2d:43:0d:4d:70:e3:a1:4b:d0:78:b1:35:91:
99:1f:6d:18:f2:ab:5e:f5:5b:d0:69:27:d3:98:61:
cb:64:45:f2:ad:c5:91:19:45:ff:c2:1a:a5:c3:d0:
b7:ef:b8:fe:03:f9:bd:3d:8b:9f:07:76:09:86:1f:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:26:CA:44:23:EC:62:39:19:F1:CA:53:4E:2A:0A:4B:59:83:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57B2AB4EB88811F09616C3B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
70:05:d5:c5:db:5d:42:00:fe:8e:17:60:d3:4e:50:c2:76:84:
fc:a0:25:27:8c:67:f5:2c:62:36:dc:d2:46:16:39:17:90:8c:
88:5e:76:26:b6:ba:2f:d7:92:41:9b:e5:42:be:d3:d9:4e:93:
96:bb:0d:27:13:7a:27:c6:c9:a8:fd:fc:81:79:ce:8f:f2:6b:
db:f2:16:b1:d6:4c:04:f4:54:96:cb:5c:4c:dd:2e:83:a9:74:
c8:29:96:c1:d2:c4:b7:75:26:75:3b:f4:36:98:2d:4f:2d:f7:
c7:2c:b7:d7:03:eb:32:d4:24:41:3c:61:14:ad:2e:11:b5:ea:
c8:b8:de:f3:dd:b8:19:fe:78:1d:bc:50:59:d6:4e:5f:22:a3:
f0:d4:a7:b4:01:96:de:8a:44:69:e8:c4:8e:63:8a:20:bc:d7:
21:c7:4f:0d:19:68:2b:4f:e2:e1:53:bf:ec:ba:ef:f6:9d:01:
d5:c7:43:44:2d:96:77:94:43:9f:f5:a4:bf:b8:d5:18:09:5d:
c3:68:c3:1b:5a:df:35:48:a0:d7:32:a4:48:54:ba:ef:e3:34:
9e:c4:f3:8e:1a:5c:42:3a:33:89:f7:0f:fa:e7:48:1b:9a:35:
da:0e:4a:03:c5:ff:25:13:fb:66:b0:e0:29:ec:37:d3:46:f9:
f8:d2:19:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYRZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMDc0MDEzWhcNMjUxMTA5MDc0MDEzWjAYMRYw
FAYDVQQDEw02OTA4NWM2Mi0zOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzqpxKncZBRc6NANxWzMhp1DG7Owc+OV5GYTSu1B2ovMViyvdE/t4SnnD
qk6fCc1oHk+BDyYucf5/BVV7r9vZ2zjz7xFGNyRNNTp92hpbneqZywMdctbJvvHW
bYDdnLWV6QVPXLZyNXYdhmUHNg8s/bCZwO2ppgz1kqJE/QBKyekghkkMQHWUngvq
6pRs7n16xTFp/76dsAhB85gygj5LTRvX/AYi3AbkDjIxhc3tvbvjKu8VwQy56YKs
DjZ2ht4cTAsKJS1DDU1w46FL0HixNZGZH20Y8qte9VvQaSfTmGHLZEXyrcWRGUX/
whqlw9C377j+A/m9PYufB3YJhh9h4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMnQ
JspEI+xiORnxylNOKgpLWYPjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81N0IyQUI0RUI4ODgxMUYwOTYxNkMzQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO6wMA0GCSqGSIb3DQEBCwUA
A4IBAQBwBdXF211CAP6OF2DTTlDCdoT8oCUnjGf1LGI23NJGFjkXkIyIXnYmtrov
15JBm+VCvtPZTpOWuw0nE3onxsmo/fyBec6P8mvb8hax1kwE9FSWy1xM3S6DqXTI
KZbB0sS3dSZ1O/Q2mC1PLffHLLfXA+sy1CRBPGEUrS4RterIuN7z3bgZ/ngdvFBZ
1k5fIqPw1Ke0AZbeikRp6MSOY4ogvNchx08NGWgrT+LhU7/suu/2nQHVx0NELZZ3
lEOf9aS/uNUYCV3DaMMbWt81SKDXMqRIVLrv4zSexPOOGlxCOjOJ9w/650gbmjXa
DkoDxf8lE/tmsOAp7DfTRvn40hlk
-----END CERTIFICATE-----
Generated at Mon Nov 3 17:12:25 2025 by rpki-client