Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B8C50A994011F08B456BF1DAE4EC9C.roa
File: C4B8C50A994011F08B456BF1DAE4EC9C.roa (raw, json)
Hash identifier: ungvssa1WaOxjDNq8S+zPNIsE4EJ+BUEZvOonrRoOdQ=
Subject key identifier: 5F:59:81:12:41:0F:1E:08:6F:F7:1A:79:2C:FB:27:9F:A5:7A:7B:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B8C50A994011F08B456BF1DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:19:51 +0000
ROA not before: Wed 24 Sep 2025 12:19:46 +0000
ROA not after: Sun 26 Oct 2025 12:19:46 +0000
asID: 274728
IP address blocks: 156.235.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97483 (0x17ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 12:19:46 2025 GMT
Not After : Oct 26 12:19:46 2025 GMT
Subject: CN=68d3e1e7-45ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:9a:f3:37:0a:89:56:ee:e9:fa:3d:b1:77:
75:54:c0:7f:01:9e:69:1c:73:8c:b4:1f:43:b1:9b:
f4:4c:b5:96:28:8e:35:fb:8c:c1:07:5d:06:e2:03:
b6:41:ac:f3:8f:4c:37:6a:cc:ef:69:56:89:0c:f3:
00:33:ec:d4:31:87:a2:09:23:3c:f4:26:28:21:66:
f0:61:29:c4:aa:d6:6d:1b:94:51:f6:d1:99:12:bd:
ec:26:ca:dc:1b:f8:0b:6f:06:e7:30:fd:bc:6e:d1:
aa:b9:24:11:40:ef:14:86:98:bf:e5:5e:d7:e8:a3:
49:f4:23:e7:78:0d:51:09:19:89:78:bd:8d:84:04:
93:00:f5:ee:4d:7a:65:6e:10:84:cf:9a:0b:83:db:
02:77:1c:b4:8e:62:66:f9:b7:f6:4e:61:b7:50:42:
8a:d0:9a:42:0e:18:80:c7:6f:0d:a5:a0:7b:fc:9e:
84:f4:a6:c7:49:06:42:05:9a:0b:f3:fe:b4:63:10:
4c:82:cf:c3:4b:7b:46:f1:19:71:df:3d:2d:a2:02:
4c:b0:b0:9a:78:05:25:df:30:70:44:cd:2c:c5:05:
c1:c2:cf:e6:29:58:54:7e:51:82:e6:7e:d2:27:c0:
2e:b4:fd:41:b9:bf:b8:e6:99:23:10:8e:fd:3c:b0:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:59:81:12:41:0F:1E:08:6F:F7:1A:79:2C:FB:27:9F:A5:7A:7B:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B8C50A994011F08B456BF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.49.0/24
Signature Algorithm: sha256WithRSAEncryption
72:89:75:0e:10:5f:ea:94:31:ff:f7:67:e1:2e:1c:53:7f:52:
34:d9:f3:7b:41:9f:f2:c7:ef:74:c5:94:5e:7b:b0:ec:3b:52:
6f:35:1e:45:72:7b:56:63:68:17:24:55:dd:e3:b0:8c:c0:3a:
82:02:d6:b5:92:aa:53:c6:9c:c5:df:bc:44:68:af:fc:d8:ba:
16:5c:53:88:0c:e1:e6:1c:c3:ff:ec:38:f8:73:8c:ef:79:ff:
d6:85:49:b3:b6:24:8b:e2:41:8f:fa:55:2e:16:ec:90:c3:67:
b1:fb:77:d8:85:9d:d7:89:69:16:da:e4:df:db:08:e6:c4:d6:
40:f7:4e:a3:d5:6c:fc:89:3e:d3:b4:47:08:f7:e6:ad:42:32:
15:58:33:bb:f3:b9:fa:80:bd:d7:2e:4a:2a:49:b6:1b:f0:28:
ae:a6:7e:54:26:6a:7c:09:dd:27:cd:0a:bc:64:be:7b:6c:52:
ec:e9:04:35:b8:9e:d9:c2:93:60:3c:0f:5a:7c:c6:b2:14:af:
3a:e0:06:71:85:81:ca:45:da:bf:a3:10:54:6b:c6:b1:bf:d2:
99:cc:9e:33:d7:8c:de:04:f2:9b:ba:ad:9b:8b:03:88:99:f8:
a3:f6:7b:83:4f:53:23:e1:bc:69:d3:d6:18:ac:7a:0d:99:0b:
a3:f8:22:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXzLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTIxOTQ2WhcNMjUxMDI2MTIxOTQ2WjAYMRYw
FAYDVQQDEw02OGQzZTFlNy00NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzmSa8zcKiVbu6fo9sXd1VMB/AZ5pHHOMtB9DsZv0TLWWKI41+4zBB10G
4gO2Qazzj0w3aszvaVaJDPMAM+zUMYeiCSM89CYoIWbwYSnEqtZtG5RR9tGZEr3s
JsrcG/gLbwbnMP28btGquSQRQO8Uhpi/5V7X6KNJ9CPneA1RCRmJeL2NhASTAPXu
TXplbhCEz5oLg9sCdxy0jmJm+bf2TmG3UEKK0JpCDhiAx28NpaB7/J6E9KbHSQZC
BZoL8/60YxBMgs/DS3tG8Rlx3z0togJMsLCaeAUl3zBwRM0sxQXBws/mKVhUflGC
5n7SJ8AutP1Bub+45pkjEI79PLBhxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF9Z
gRJBDx4Ib/caeSz7J5+lensCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNEI4QzUwQTk5NDAxMUYwOEI0NTZCRjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsxMA0GCSqGSIb3DQEBCwUA
A4IBAQByiXUOEF/qlDH/92fhLhxTf1I02fN7QZ/yx+90xZRee7DsO1JvNR5FcntW
Y2gXJFXd47CMwDqCAta1kqpTxpzF37xEaK/82LoWXFOIDOHmHMP/7Dj4c4zvef/W
hUmztiSL4kGP+lUuFuyQw2ex+3fYhZ3XiWkW2uTf2wjmxNZA906j1Wz8iT7TtEcI
9+atQjIVWDO787n6gL3XLkoqSbYb8Ciupn5UJmp8Cd0nzQq8ZL57bFLs6QQ1uJ7Z
wpNgPA9afMayFK864AZxhYHKRdq/oxBUa8axv9KZzJ4z14zeBPKbuq2biwOImfij
9nuDT1Mj4bxp09YYrHoNmQuj+CJC
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:41 2025 by rpki-client