Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0D48466D1911F0A5BB007FDAE4EC9C.roa
File: 0F0D48466D1911F0A5BB007FDAE4EC9C.roa (raw, json)
Hash identifier: 67cZiqoWfOjx/y170ZBS+QmnX4oBP35IlOpkpKgbmMA=
Subject key identifier: F2:D0:D0:3A:B5:47:B9:05:AD:14:41:68:57:D9:49:67:45:78:C9:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016828
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0D48466D1911F0A5BB007FDAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:44:45 +0000
ROA not before: Wed 30 Jul 2025 07:44:40 +0000
ROA not after: Sun 17 Aug 2025 07:44:40 +0000
asID: 401783
IP address blocks: 156.230.160.0/24 maxlen: 24
156.254.116.0/24 maxlen: 24
156.254.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92200 (0x16828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 07:44:40 2025 GMT
Not After : Aug 17 07:44:40 2025 GMT
Subject: CN=6889cd6c-002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:03:ab:d8:18:5e:5d:c7:af:9d:e7:5c:8e:
47:ce:27:3b:22:23:10:60:71:ef:62:73:81:37:d8:
33:73:7a:38:3d:02:75:1c:bf:d4:5e:7a:ec:7e:82:
be:62:da:d4:61:b3:69:f5:5a:19:42:45:21:58:06:
da:5c:e6:d0:f1:71:91:b1:82:2f:b0:61:da:ee:ce:
82:74:22:55:53:9b:4e:d9:84:e6:03:57:28:91:38:
1c:55:ce:66:7a:4b:53:a9:e0:fe:80:ef:32:9b:29:
d0:7b:1b:61:09:56:08:4f:45:3e:5d:da:af:6e:b5:
fb:a5:8a:49:48:5a:ca:cd:ab:41:08:2d:b0:71:43:
12:62:d8:f6:98:78:f7:76:5f:b4:0a:77:92:6f:18:
74:14:61:20:f1:13:80:b7:99:09:ed:dc:44:61:0f:
30:c2:9a:9c:ec:8e:b6:5b:19:b9:20:e6:f1:24:05:
1c:db:69:4f:c5:7f:c3:b6:8c:a0:50:48:74:f4:3d:
4b:85:65:5b:ae:14:bd:58:63:63:09:6e:a1:94:b7:
a1:05:f3:dc:fc:06:0f:b6:c8:be:72:26:64:c2:e7:
5a:17:9c:91:3a:8b:c3:71:8a:7e:5f:29:f0:5f:01:
47:09:de:18:71:7e:79:41:14:7d:8a:0b:3b:d2:05:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:D0:3A:B5:47:B9:05:AD:14:41:68:57:D9:49:67:45:78:C9:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0D48466D1911F0A5BB007FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
156.254.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ff:47:d0:34:8c:a4:3e:6c:33:c7:2a:b3:71:42:a5:4d:30:
0d:88:71:9e:a8:e4:8e:e8:ae:7b:6b:17:57:69:50:14:32:64:
23:ef:5d:eb:b7:62:71:e4:01:20:8b:6a:ea:28:67:5e:7e:9e:
5f:c9:71:bc:8f:5a:08:29:46:f2:2b:ec:04:05:51:86:bb:37:
af:cd:54:8f:09:9d:58:b5:e8:1d:98:2f:66:07:68:ba:64:33:
e9:29:54:f3:5d:7a:1f:c5:39:c8:13:b2:17:d9:35:d8:ee:b9:
64:1e:88:37:96:a0:48:ce:51:ab:2d:34:2c:c4:ff:51:32:ba:
58:9d:89:2e:d6:b8:f2:bb:f3:d1:9e:19:d9:ab:95:05:d9:69:
21:ef:33:80:3c:88:95:05:91:1e:c9:4b:6b:be:68:79:dd:c3:
ee:38:df:ca:9f:e2:80:bd:0f:17:1a:2a:12:33:79:0d:54:c5:
21:d3:e9:6f:33:c8:de:04:85:52:b6:a9:b7:6d:1c:38:d2:27:
56:ff:3c:d8:b2:eb:56:10:6f:5f:bb:48:9c:94:23:3a:e3:44:
49:27:e4:c0:a4:0a:98:23:cf:e1:b8:4e:ca:6a:9e:3a:b9:07:
9e:63:d2:97:cf:36:bd:4b:38:22:ec:d7:04:f4:17:a0:de:c8:
ee:26:23:ca
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWgoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzMwMDc0NDQwWhcNMjUwODE3MDc0NDQwWjAYMRYw
FAYDVQQDEw02ODg5Y2Q2Yy0wMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAozIDq9gYXl3Hr53nXI5Hzic7IiMQYHHvYnOBN9gzc3o4PQJ1HL/UXnrs
foK+YtrUYbNp9VoZQkUhWAbaXObQ8XGRsYIvsGHa7s6CdCJVU5tO2YTmA1cokTgc
Vc5mektTqeD+gO8ymynQexthCVYIT0U+XdqvbrX7pYpJSFrKzatBCC2wcUMSYtj2
mHj3dl+0CneSbxh0FGEg8ROAt5kJ7dxEYQ8wwpqc7I62Wxm5IObxJAUc22lPxX/D
toygUEh09D1LhWVbrhS9WGNjCW6hlLehBfPc/AYPtsi+ciZkwudaF5yROovDcYp+
XynwXwFHCd4YcX55QRR9igs70gVgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLQ
0Dq1R7kFrRRBaFfZSWdFeMmcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRjBENDg0NjZEMTkxMUYwQTVCQjAwN0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOagAwQBnP50MA0GCSqGSIb3
DQEBCwUAA4IBAQCy/0fQNIykPmwzxyqzcUKlTTANiHGeqOSO6K57axdXaVAUMmQj
713rt2Jx5AEgi2rqKGdefp5fyXG8j1oIKUbyK+wEBVGGuzevzVSPCZ1YtegdmC9m
B2i6ZDPpKVTzXXofxTnIE7IX2TXY7rlkHog3lqBIzlGrLTQsxP9RMrpYnYku1rjy
u/PRnhnZq5UF2Wkh7zOAPIiVBZEeyUtrvmh53cPuON/Kn+KAvQ8XGioSM3kNVMUh
0+lvM8jeBIVStqm3bRw40idW/zzYsutWEG9fu0iclCM640RJJ+TApAqYI8/huE7K
ap46uQeeY9KXzza9Szgi7NcE9Beg3sjuJiPK
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:54 2025 by rpki-client