Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FC796A76811F0B0F7B4BDDAE4EC9C.roa
File: EE1FC796A76811F0B0F7B4BDDAE4EC9C.roa (raw, json)
Hash identifier: E3Y/5xF1fv0nDCIdRArnMZataFCC/Q4MgYssu6sw+TQ=
Subject key identifier: EE:5B:B6:DD:80:5F:00:53:38:99:E1:A1:82:40:4B:38:3C:65:38:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018024
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FC796A76811F0B0F7B4BDDAE4EC9C.roa
Signing time: Sun 12 Oct 2025 12:42:37 +0000
ROA not before: Sun 12 Oct 2025 12:42:32 +0000
ROA not after: Sun 16 Nov 2025 12:42:32 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98340 (0x18024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 12:42:32 2025 GMT
Not After : Nov 16 12:42:32 2025 GMT
Subject: CN=68eba23c-4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:41:04:6a:f2:3b:77:8e:2d:54:6c:43:f6:
bf:e1:2f:62:49:13:05:5c:19:ff:e2:6d:33:a9:0c:
13:96:bb:99:d4:ca:ef:9b:3f:0a:b6:6f:c2:c2:65:
6f:49:d5:33:c1:b4:63:b3:5f:4a:2e:27:b2:06:03:
a5:35:2b:09:c9:ca:47:99:34:2f:7a:61:ad:af:e7:
88:69:ee:0a:2c:f2:5e:e1:5d:9d:66:30:54:7b:cd:
03:34:01:c1:fe:29:72:eb:e6:1c:9f:53:3b:88:ff:
e2:e7:22:d4:99:c7:3b:ec:45:a5:9e:f2:fa:ce:f3:
f6:07:23:75:e4:15:b1:1c:5f:a2:f6:9c:a8:b3:d4:
e1:8d:62:c2:b9:c8:03:a0:85:0b:20:32:b5:6b:6f:
54:45:36:ab:cf:e5:e6:22:16:fb:74:61:04:99:1b:
e2:3a:1b:24:8e:58:76:37:a2:8c:d1:19:16:34:3a:
13:4d:e8:4a:de:9a:95:c4:3e:41:27:f1:f9:52:e2:
94:fb:6f:0d:c9:ac:bd:8f:4b:82:8e:bb:fd:d7:b4:
4a:e1:8b:76:00:0f:ce:7d:50:3d:cd:a9:de:8b:d8:
2c:ce:74:8f:43:9e:73:50:2b:08:ff:a7:20:60:4d:
17:aa:36:bc:b9:23:4a:ac:c8:c8:f4:79:3d:29:56:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:B6:DD:80:5F:00:53:38:99:E1:A1:82:40:4B:38:3C:65:38:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FC796A76811F0B0F7B4BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:10:75:04:24:11:e7:c8:63:28:13:f0:8a:b1:8a:09:cc:ea:
ab:b6:d1:78:bf:84:be:fd:79:bf:3a:06:ee:47:00:59:d5:99:
18:61:25:62:66:e2:46:8d:d5:9b:39:98:5e:f8:15:40:8c:74:
ed:bb:16:5a:df:e8:f8:ae:3f:bc:0f:d1:c4:9f:51:f6:9a:3d:
52:72:39:6e:a1:3b:bd:52:49:f5:ab:56:71:be:7e:51:5f:65:
35:6b:60:1a:17:26:7a:3e:49:50:77:99:e3:d8:60:95:a7:af:
64:eb:d7:02:47:f9:7b:c3:09:ad:85:50:44:31:a5:48:d4:53:
09:ff:4e:80:f4:38:e3:02:b4:09:1f:79:1e:a9:33:02:15:de:
29:ad:2c:c8:26:67:59:f3:a3:1c:49:fe:68:66:fd:84:ea:0b:
b2:fc:0a:32:ee:71:73:71:16:55:e5:33:85:05:9c:dc:06:a1:
56:dd:14:13:2c:10:ef:17:7c:22:83:8c:1f:5b:ac:c2:02:fa:
37:62:f5:4f:c4:90:a8:40:ba:0b:88:76:0a:bf:bc:62:ce:22:
97:cb:ec:4f:95:bb:21:41:f9:cb:22:7d:ac:90:c2:c4:25:3e:
4d:6d:70:5c:8f:04:62:7a:bd:e3:39:ee:43:8d:4d:4f:d2:4e:
1f:fc:84:65
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYAkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDEyMTI0MjMyWhcNMjUxMTE2MTI0MjMyWjAYMRYw
FAYDVQQDEw02OGViYTIzYy00YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApgxBBGryO3eOLVRsQ/a/4S9iSRMFXBn/4m0zqQwTlruZ1Mrvmz8Ktm/C
wmVvSdUzwbRjs19KLieyBgOlNSsJycpHmTQvemGtr+eIae4KLPJe4V2dZjBUe80D
NAHB/ily6+Ycn1M7iP/i5yLUmcc77EWlnvL6zvP2ByN15BWxHF+i9pyos9ThjWLC
ucgDoIULIDK1a29URTarz+XmIhb7dGEEmRviOhskjlh2N6KM0RkWNDoTTehK3pqV
xD5BJ/H5UuKU+28Nyay9j0uCjrv917RK4Yt2AA/OfVA9zanei9gsznSPQ55zUCsI
/6cgYE0Xqja8uSNKrMjI9Hk9KVZ+sQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO5b
tt2AXwBTOJnhoYJASzg8ZTieMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTFGQzc5NkE3NjgxMUYwQjBGN0I0QkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQBbEHUEJBHnyGMoE/CKsYoJzOqrttF4v4S+/Xm/OgbuRwBZ1ZkYYSViZuJG
jdWbOZhe+BVAjHTtuxZa3+j4rj+8D9HEn1H2mj1ScjluoTu9Ukn1q1Zxvn5RX2U1
a2AaFyZ6PklQd5nj2GCVp69k69cCR/l7wwmthVBEMaVI1FMJ/06A9DjjArQJH3ke
qTMCFd4prSzIJmdZ86McSf5oZv2E6guy/Aoy7nFzcRZV5TOFBZzcBqFW3RQTLBDv
F3wig4wfW6zCAvo3YvVPxJCoQLoLiHYKv7xiziKXy+xPlbshQfnLIn2skMLEJT5N
bXBcjwRier3jOe5DjU1P0k4f/IRl
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:55 2025 by rpki-client