Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8E8F9A995F11F0BCFF68BADAE4EC9C.roa
File: AC8E8F9A995F11F0BCFF68BADAE4EC9C.roa (raw, json)
Hash identifier: eopJC48pP0KEyzBTkGlgfo7ItI2u2Qt9NaQanw60lH4=
Subject key identifier: 4C:C9:D0:B4:F3:FF:CF:7C:80:BE:D5:EF:50:C7:9C:75:E7:3B:B4:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8E8F9A995F11F0BCFF68BADAE4EC9C.roa
Signing time: Wed 24 Sep 2025 16:01:05 +0000
ROA not before: Wed 24 Sep 2025 16:00:59 +0000
ROA not after: Wed 29 Oct 2025 16:00:59 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97517 (0x17ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 16:00:59 2025 GMT
Not After : Oct 29 16:00:59 2025 GMT
Subject: CN=68d415c1-0406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:b4:42:3a:e5:7c:7a:72:5e:19:17:44:f7:
a5:c5:dc:46:ec:15:3c:25:f8:34:80:e7:e8:bd:6b:
49:35:6e:c7:8b:79:ac:79:5f:54:de:9f:3a:5d:05:
12:97:61:93:35:1e:6c:55:1a:a8:0f:3e:6e:71:27:
13:3c:bc:c5:b5:4c:ea:3b:59:6f:42:4a:47:40:5d:
5a:8a:44:b5:10:28:e2:85:e1:7c:8b:1a:a1:ef:f5:
35:35:34:7e:bc:b7:68:54:a3:96:38:a5:78:aa:ba:
08:1d:43:b1:7c:53:94:ae:a9:ca:2a:7c:a9:15:36:
8b:0a:8b:6c:a6:5e:a9:2e:7c:8d:1a:02:6b:27:12:
1a:39:83:05:31:1a:2a:58:8e:cb:42:7a:89:87:9c:
ad:cd:cf:5f:a0:ff:a0:38:01:72:9a:c9:f0:7b:18:
3e:a1:4f:d0:0b:60:e9:36:58:92:8d:93:72:0e:98:
4f:be:fe:7d:42:fd:c4:26:20:86:d7:3b:9c:48:dd:
a5:ba:92:aa:e2:94:67:f3:99:82:27:f0:b7:39:b8:
41:ce:bd:e9:b6:2b:04:c7:eb:e9:e1:ef:17:f3:92:
93:39:37:0d:bb:f3:d9:d5:2c:40:8a:5e:3c:76:7b:
f8:1a:27:62:d6:80:a6:27:11:29:a6:a4:e6:b5:37:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:D0:B4:F3:FF:CF:7C:80:BE:D5:EF:50:C7:9C:75:E7:3B:B4:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8E8F9A995F11F0BCFF68BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0d:b2:c9:bd:4d:c9:83:1b:cf:70:88:f9:c0:f8:c9:dd:1e:
23:40:e4:8c:ef:59:8c:77:04:16:0a:bb:2f:dd:a3:e1:19:be:
58:84:c1:e8:e3:98:9c:d0:be:12:45:56:98:fc:92:df:e4:38:
b3:f4:bd:3c:ff:86:72:12:ab:eb:e8:16:b0:ba:72:d4:24:b4:
63:e9:57:80:12:2c:24:5f:86:46:e0:11:e4:a4:20:db:37:e8:
99:82:b6:9d:3d:e2:d0:c1:b1:2d:23:c0:2f:00:05:b0:cc:2e:
73:ad:b3:19:d9:01:0e:f2:5d:0a:3e:83:a9:7d:d0:55:9a:c0:
c3:32:eb:3c:c8:1d:e3:bb:a6:63:61:90:1b:32:aa:5c:0d:6e:
c5:62:1e:03:c1:13:c7:98:c1:0b:2d:74:a8:db:99:dc:12:50:
dd:cd:3e:85:ac:5d:28:98:67:ac:9d:66:c0:da:bd:28:d4:0c:
85:c7:94:9c:15:ee:22:11:5b:67:92:bc:0f:50:da:00:b3:af:
43:c8:c6:d6:d4:39:51:5d:44:27:07:33:d6:96:e6:71:e8:a7:
02:04:aa:9b:0f:4b:0b:fd:9f:07:f0:4f:59:2f:4e:0b:b4:9a:
09:7d:cb:b9:7f:46:f5:aa:e7:15:bd:b6:3b:2f:ae:78:77:b7:
7b:6c:34:28
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXztMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTYwMDU5WhcNMjUxMDI5MTYwMDU5WjAYMRYw
FAYDVQQDEw02OGQ0MTVjMS0wNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv9W0QjrlfHpyXhkXRPelxdxG7BU8Jfg0gOfovWtJNW7Hi3mseV9U3p86
XQUSl2GTNR5sVRqoDz5ucScTPLzFtUzqO1lvQkpHQF1aikS1ECjiheF8ixqh7/U1
NTR+vLdoVKOWOKV4qroIHUOxfFOUrqnKKnypFTaLCotspl6pLnyNGgJrJxIaOYMF
MRoqWI7LQnqJh5ytzc9foP+gOAFymsnwexg+oU/QC2DpNliSjZNyDphPvv59Qv3E
JiCG1zucSN2lupKq4pRn85mCJ/C3ObhBzr3ptisEx+vp4e8X85KTOTcNu/PZ1SxA
il48dnv4Gidi1oCmJxEppqTmtTdYAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEzJ
0LTz/898gL7V71DHnHXnO7R6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQzhFOEY5QTk5NUYxMUYwQkNGRjY4QkFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQFMA0GCSqGSIb3DQEBCwUA
A4IBAQCMDbLJvU3JgxvPcIj5wPjJ3R4jQOSM71mMdwQWCrsv3aPhGb5YhMHo45ic
0L4SRVaY/JLf5Diz9L08/4ZyEqvr6BawunLUJLRj6VeAEiwkX4ZG4BHkpCDbN+iZ
gradPeLQwbEtI8AvAAWwzC5zrbMZ2QEO8l0KPoOpfdBVmsDDMus8yB3ju6ZjYZAb
MqpcDW7FYh4DwRPHmMELLXSo25ncElDdzT6FrF0omGesnWbA2r0o1AyFx5ScFe4i
EVtnkrwPUNoAs69DyMbW1DlRXUQnBzPWluZx6KcCBKqbD0sL/Z8H8E9ZL04LtJoJ
fcu5f0b1qucVvbY7L654d7d7bDQo
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:59 2025 by rpki-client