Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE2B036687F111F0A6C2B6A0DAE4EC9C.roa
File: BE2B036687F111F0A6C2B6A0DAE4EC9C.roa (raw, json)
Hash identifier: HW8q7b4h5RcjW1kh641xThOr8DSa79JXA8C7WYm02KY=
Subject key identifier: 70:12:CE:F9:1A:23:0D:B1:15:9C:28:F9:64:4E:93:28:4C:94:91:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE2B036687F111F0A6C2B6A0DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 11:41:20 +0000
ROA not before: Tue 02 Sep 2025 11:41:15 +0000
ROA not after: Fri 10 Oct 2025 11:41:15 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95846 (0x17666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 11:41:15 2025 GMT
Not After : Oct 10 11:41:15 2025 GMT
Subject: CN=68b6d7e0-914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:9d:1b:9d:3e:d9:2b:25:83:07:e7:52:97:
ae:46:19:80:38:a4:16:e7:fa:eb:5a:85:48:bf:48:
21:93:fb:a4:d3:d4:11:57:eb:09:c0:7d:f5:3b:69:
10:81:35:cf:d8:d1:82:7b:28:4c:31:35:02:6a:de:
8c:50:52:82:b3:d1:16:60:f6:63:74:d9:37:65:f4:
fd:e8:29:c6:0f:c2:9c:73:8e:1e:f7:5c:d6:7a:d1:
ff:38:7b:0a:95:ea:fe:66:04:f0:31:a4:b5:99:a3:
70:65:3e:5c:98:ca:f5:76:f5:5f:4d:58:0e:03:4c:
f1:99:d1:77:61:a0:d8:30:24:e6:b9:b2:38:42:da:
14:ab:45:e1:4b:71:78:63:2d:d0:8b:53:92:8d:1f:
b2:74:75:a8:da:89:47:3c:b4:b3:47:cc:33:57:83:
6c:ac:75:ab:98:7a:4f:93:b1:2f:1f:68:3f:b4:e8:
84:29:8a:0c:3c:6f:c2:cc:a0:17:4e:d0:97:d4:d7:
cc:56:71:41:ed:c7:1e:4b:e3:2c:7c:9c:93:34:70:
79:50:31:e2:27:4a:27:ea:76:09:13:ac:69:be:b0:
14:94:04:c9:7c:f9:13:2f:24:01:f4:e3:36:e4:59:
0e:4b:bf:29:74:74:63:9c:47:fa:a5:12:ad:3e:05:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:CE:F9:1A:23:0D:B1:15:9C:28:F9:64:4E:93:28:4C:94:91:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE2B036687F111F0A6C2B6A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
10:07:2e:8d:2d:4c:b8:ba:5a:0d:fc:03:4b:8b:13:1c:3c:e6:
7c:06:77:e6:f2:cb:05:0c:9f:90:60:48:d8:33:10:4e:32:6b:
75:b1:2b:40:8a:44:f1:4a:e1:65:ac:0e:3c:45:51:cc:e9:b7:
69:78:f6:ae:6f:78:e2:f1:9a:4d:89:60:03:cf:77:d0:d0:25:
aa:d0:bc:77:e7:5b:99:95:8d:89:85:94:62:70:df:77:d6:74:
78:62:ac:8c:9f:6c:fe:ce:12:76:28:d4:af:b2:6d:75:2d:f3:
9e:bb:95:d1:90:ec:a9:07:f1:d0:21:da:85:f1:86:9a:9f:4a:
27:a1:f5:c7:1d:7b:74:96:51:87:39:55:06:c7:77:0e:5f:15:
27:a4:27:98:22:28:c1:32:96:24:dc:9f:59:2f:a9:ad:65:4e:
e3:40:4f:85:57:f6:73:cc:87:b5:10:2b:38:b0:29:41:d6:22:
9c:b6:42:b3:15:56:e5:11:5b:57:84:2e:13:f4:1c:3a:74:5e:
d2:c4:3f:81:a8:06:50:bc:6d:d0:23:d2:d9:e0:1c:c4:da:e7:
05:91:c6:13:23:9f:87:31:e7:05:73:c5:d5:df:b8:af:e9:8a:
39:45:0a:3e:7f:8c:a9:d7:a7:b9:90:ec:4d:91:a0:36:2f:e8:
f4:8d:6b:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXZmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAyMTE0MTE1WhcNMjUxMDEwMTE0MTE1WjAYMRYw
FAYDVQQDEw02OGI2ZDdlMC05MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqpydG50+2SslgwfnUpeuRhmAOKQW5/rrWoVIv0ghk/uk09QRV+sJwH31
O2kQgTXP2NGCeyhMMTUCat6MUFKCs9EWYPZjdNk3ZfT96CnGD8Kcc44e91zWetH/
OHsKler+ZgTwMaS1maNwZT5cmMr1dvVfTVgOA0zxmdF3YaDYMCTmubI4QtoUq0Xh
S3F4Yy3Qi1OSjR+ydHWo2olHPLSzR8wzV4NsrHWrmHpPk7EvH2g/tOiEKYoMPG/C
zKAXTtCX1NfMVnFB7cceS+MsfJyTNHB5UDHiJ0on6nYJE6xpvrAUlATJfPkTLyQB
9OM25FkOS78pdHRjnEf6pRKtPgXrvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHAS
zvkaIw2xFZwo+WROkyhMlJHSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTJCMDM2Njg3RjExMUYwQTZDMkI2QTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQAQBy6NLUy4uloN/ANLixMcPOZ8Bnfm8ssFDJ+QYEjYMxBOMmt1sStAikTx
SuFlrA48RVHM6bdpePaub3ji8ZpNiWADz3fQ0CWq0Lx351uZlY2JhZRicN931nR4
YqyMn2z+zhJ2KNSvsm11LfOeu5XRkOypB/HQIdqF8Yaan0onofXHHXt0llGHOVUG
x3cOXxUnpCeYIijBMpYk3J9ZL6mtZU7jQE+FV/ZzzIe1ECs4sClB1iKctkKzFVbl
EVtXhC4T9Bw6dF7SxD+BqAZQvG3QI9LZ4BzE2ucFkcYTI5+HMecFc8XV37iv6Yo5
RQo+f4yp16e5kOxNkaA2L+j0jWsM
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:01 2025 by rpki-client