Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB9F886AA6311F0929982CBDAE4EC9C.roa
File: 9EB9F886AA6311F0929982CBDAE4EC9C.roa (raw, json)
Hash identifier: upLI0lq2bZdqkT/2xYXAJ3CEnPsV2Hb26wamKiUxRUA=
Subject key identifier: 81:19:8E:0E:A0:95:50:2A:04:05:C7:2C:34:4D:37:8C:49:89:A2:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB9F886AA6311F0929982CBDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 07:42:09 +0000
ROA not before: Thu 16 Oct 2025 07:42:05 +0000
ROA not after: Mon 20 Oct 2025 07:42:05 +0000
asID: 9009
IP address blocks: 156.238.4.0/22 maxlen: 24
156.238.8.0/23 maxlen: 24
156.238.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98528 (0x180e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 07:42:05 2025 GMT
Not After : Oct 20 07:42:05 2025 GMT
Subject: CN=68f0a1d1-5f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:88:a4:75:38:e9:2e:78:73:bc:6f:ea:0d:
91:ce:45:1d:cf:dd:8e:e4:4c:cd:59:1e:3f:e0:91:
ad:48:b8:e2:0c:26:29:3a:36:4a:5c:04:88:19:98:
4b:74:65:37:38:21:c8:67:ab:c2:25:59:a7:03:a2:
84:3a:ab:74:19:06:8c:95:8b:f1:c9:d5:fd:43:4b:
96:2b:40:8e:07:ed:43:85:2b:e7:5b:15:f7:9e:ad:
90:95:df:93:ea:5c:da:ac:82:e0:48:4e:9c:fe:37:
06:90:82:87:e7:52:08:9b:4a:0f:c1:00:4f:c4:0f:
b0:8d:8e:68:b1:17:d9:00:5b:a7:0e:73:9a:7b:7f:
91:6f:6f:37:62:0a:87:8c:22:9a:ee:68:72:50:50:
d5:bf:53:b3:f6:ce:4c:c5:88:0f:36:9d:ec:b3:4e:
dd:01:5c:25:19:18:e9:a7:14:df:04:c0:fc:03:7c:
72:dd:10:dd:81:6a:d8:19:dd:2c:2f:c2:5e:df:15:
5c:05:db:8b:84:db:57:d4:7f:3f:ff:d2:b1:b1:1b:
28:b0:97:64:87:d8:01:a7:be:d9:b8:9f:84:8c:98:
c2:9f:95:08:b2:8c:a9:be:a9:9f:9c:3f:b3:a6:35:
19:75:46:55:11:ec:d9:5d:5c:d3:f9:a5:a8:fb:78:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:8E:0E:A0:95:50:2A:04:05:C7:2C:34:4D:37:8C:49:89:A2:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB9F886AA6311F0929982CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.4.0-156.238.11.255
Signature Algorithm: sha256WithRSAEncryption
af:81:2b:8d:76:f0:7d:60:f0:17:6f:df:f6:b8:50:79:66:18:
02:a1:be:74:dd:d7:c1:44:58:d6:ab:50:44:7d:1c:6d:4e:9d:
da:2e:20:9a:6f:43:70:97:f0:2c:e6:4f:83:60:2f:f6:55:d8:
c3:2f:4b:de:ea:b1:75:84:41:b5:69:ae:53:02:8f:e1:7f:d9:
9a:91:2d:2c:82:44:8a:1b:c8:01:bb:d9:9d:31:c8:c2:59:3c:
6c:72:9b:ad:ed:a6:10:eb:c3:54:b6:85:87:3e:0d:87:d5:2c:
b0:fd:b9:bf:32:d5:0a:b8:1e:ac:74:f7:5a:72:95:8b:8e:83:
38:cb:0b:3f:e7:3d:d9:e6:3b:89:c7:28:78:8b:e7:e8:43:a2:
6e:44:f5:e4:2a:d8:d4:80:cf:9c:b6:e2:ea:0f:de:98:3e:22:
f5:ad:aa:5b:ae:bc:eb:c0:e4:c7:22:fc:0c:7c:c8:d2:00:e5:
64:98:62:25:c4:c5:55:1a:07:ee:37:8e:79:59:aa:ae:c9:a9:
42:f5:fc:00:a8:74:73:fa:67:95:cf:7d:d8:2d:19:68:7f:d6:
54:4c:45:aa:b6:0b:a8:f3:85:2b:c6:8a:cb:ae:b4:dc:1d:02:
1d:3e:87:53:10:61:c6:49:90:87:e2:c4:e3:b9:ef:09:93:a1:
15:c3:00:7e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYDgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDE2MDc0MjA1WhcNMjUxMDIwMDc0MjA1WjAYMRYw
FAYDVQQDEw02OGYwYTFkMS01ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz96IpHU46S54c7xv6g2RzkUdz92O5EzNWR4/4JGtSLjiDCYpOjZKXASI
GZhLdGU3OCHIZ6vCJVmnA6KEOqt0GQaMlYvxydX9Q0uWK0COB+1DhSvnWxX3nq2Q
ld+T6lzarILgSE6c/jcGkIKH51IIm0oPwQBPxA+wjY5osRfZAFunDnOae3+Rb283
YgqHjCKa7mhyUFDVv1Oz9s5MxYgPNp3ss07dAVwlGRjppxTfBMD8A3xy3RDdgWrY
Gd0sL8Je3xVcBduLhNtX1H8//9KxsRsosJdkh9gBp77ZuJ+EjJjCn5UIsoypvqmf
nD+zpjUZdUZVEezZXVzT+aWo+3jE7wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIEZ
jg6glVAqBAXHLDRNN4xJiaLOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUI5Rjg4NkFBNjMxMUYwOTI5OTgyQ0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc7gQDBAKc7ggwDQYJKoZI
hvcNAQELBQADggEBAK+BK4128H1g8Bdv3/a4UHlmGAKhvnTd18FEWNarUER9HG1O
ndouIJpvQ3CX8CzmT4NgL/ZV2MMvS97qsXWEQbVprlMCj+F/2ZqRLSyCRIobyAG7
2Z0xyMJZPGxym63tphDrw1S2hYc+DYfVLLD9ub8y1Qq4Hqx091pylYuOgzjLCz/n
PdnmO4nHKHiL5+hDom5E9eQq2NSAz5y24uoP3pg+IvWtqluuvOvA5Mci/Ax8yNIA
5WSYYiXExVUaB+43jnlZqq7JqUL1/ACodHP6Z5XPfdgtGWh/1lRMRaq2C6jzhSvG
isuutNwdAh0+h1MQYcZJkIfixOO57wmToRXDAH4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:08:04 2025 by rpki-client