Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C34EE926ABA11F0B5501191DAE4EC9C.roa
File: 9C34EE926ABA11F0B5501191DAE4EC9C.roa (raw, json)
Hash identifier: c92abIniLTUULju8wLt/qkvcUPATgkywnfPqEX0lJSY=
Subject key identifier: A3:02:ED:C8:E0:1E:18:48:54:FF:2A:7B:89:32:3A:71:CC:D4:32:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C34EE926ABA11F0B5501191DAE4EC9C.roa
Signing time: Sun 27 Jul 2025 07:23:37 +0000
ROA not before: Sun 27 Jul 2025 07:23:32 +0000
ROA not after: Wed 27 Aug 2025 07:23:32 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92105 (0x167c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 07:23:32 2025 GMT
Not After : Aug 27 07:23:32 2025 GMT
Subject: CN=6885d3f9-614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:0f:4c:dc:54:45:92:34:8d:87:d5:c9:25:
2c:32:20:54:36:ae:1d:61:9f:db:e8:b9:6d:1b:93:
89:af:28:f0:24:35:2e:ca:7a:25:2b:1a:8c:16:78:
72:53:00:9d:c2:96:71:7d:1a:da:45:ac:6e:70:31:
09:e1:1a:ad:04:c6:9d:d9:36:94:cf:11:dd:1c:a4:
b6:09:5e:7a:af:97:8a:ae:c6:98:5b:b9:de:77:48:
c6:af:32:5e:be:62:d0:49:d7:9b:e5:8f:72:23:9e:
ca:3a:ca:88:82:f1:ff:36:4a:5e:16:c0:b5:cb:87:
dc:47:dd:fe:ea:a6:2e:26:e7:38:f1:17:1b:23:6b:
79:18:4d:f1:b7:63:4e:c6:10:38:57:b1:bf:a0:4c:
c9:aa:51:5c:12:67:23:22:11:1d:95:89:6f:91:ef:
7c:bf:a9:ca:d6:8e:57:f6:b0:80:bc:66:19:e0:bd:
ee:b3:1b:2e:04:ea:c8:a3:34:9a:1a:e8:74:45:22:
23:49:78:61:9c:0a:e4:de:fd:4a:74:3e:ad:58:6d:
03:7a:96:6c:76:06:56:85:96:fe:2b:0a:d1:7a:f9:
12:82:d5:6e:5c:4f:12:67:9f:07:cc:70:bf:66:0c:
ad:4b:a2:8a:db:b1:31:65:d1:3e:3a:9c:78:19:74:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:ED:C8:E0:1E:18:48:54:FF:2A:7B:89:32:3A:71:CC:D4:32:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C34EE926ABA11F0B5501191DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:e5:7b:7d:b6:d6:ad:df:fe:81:77:64:25:ae:cb:fa:36:ee:
22:01:8f:da:3a:e3:cd:bb:54:43:22:71:2d:0a:01:c6:23:2c:
8e:67:b9:6b:9e:bf:94:d4:c7:2b:eb:51:b8:a3:64:30:bf:7f:
f3:de:88:e4:92:66:ec:81:b5:0e:43:17:ed:be:76:6a:58:96:
e7:a0:68:c6:49:bb:a8:a1:b2:06:d6:45:ac:9d:67:df:14:ba:
dc:21:74:c6:cb:4c:c0:6b:07:cd:6e:ed:3d:a0:7f:0a:7f:0f:
b8:d3:f6:44:85:42:3d:49:82:d4:44:95:fa:2a:bf:19:1e:df:
23:95:2a:69:e7:c8:f7:9f:e8:4a:cb:32:b5:07:59:e5:68:39:
7e:be:d8:31:c2:17:03:18:45:51:7f:c6:a8:4e:f7:c6:6f:cc:
68:d0:e5:2c:4e:1a:39:81:a2:47:b5:06:c1:e6:b1:6a:3f:2b:
b5:3c:3f:79:65:10:60:0f:5d:d0:8d:04:e2:73:46:b0:0c:98:
5e:1f:d3:5e:b5:4b:c5:d1:10:04:e2:7e:82:20:b3:0a:8f:58:
07:0a:3a:3d:71:a1:57:92:1d:9d:9d:83:ca:fe:44:c9:1a:bf:
26:e7:94:3a:bc:c4:38:0c:c0:73:08:a3:2c:10:68:42:04:ec:
91:65:da:d8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAWfJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI3MDcyMzMyWhcNMjUwODI3MDcyMzMyWjAYMRYw
FAYDVQQDEw02ODg1ZDNmOS02MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA13EPTNxURZI0jYfVySUsMiBUNq4dYZ/b6LltG5OJryjwJDUuynolKxqM
FnhyUwCdwpZxfRraRaxucDEJ4RqtBMad2TaUzxHdHKS2CV56r5eKrsaYW7ned0jG
rzJevmLQSdeb5Y9yI57KOsqIgvH/NkpeFsC1y4fcR93+6qYuJuc48RcbI2t5GE3x
t2NOxhA4V7G/oEzJqlFcEmcjIhEdlYlvke98v6nK1o5X9rCAvGYZ4L3usxsuBOrI
ozSaGuh0RSIjSXhhnArk3v1KdD6tWG0DepZsdgZWhZb+KwrRevkSgtVuXE8SZ58H
zHC/ZgytS6KK27ExZdE+Opx4GXTRTwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKMC
7cjgHhhIVP8qe4kyOnHM1DKXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QzM0RUU5MjZBQkExMUYwQjU1MDExOTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBAJ3le3221q3f/oF3ZCWuy/o27iIBj9o64827VEMicS0KAcYjLI5nuWuev5TU
xyvrUbijZDC/f/PeiOSSZuyBtQ5DF+2+dmpYluegaMZJu6ihsgbWRaydZ98Uutwh
dMbLTMBrB81u7T2gfwp/D7jT9kSFQj1JgtRElfoqvxke3yOVKmnnyPef6ErLMrUH
WeVoOX6+2DHCFwMYRVF/xqhO98ZvzGjQ5SxOGjmBoke1BsHmsWo/K7U8P3llEGAP
XdCNBOJzRrAMmF4f0161S8XREATifoIgswqPWAcKOj1xoVeSHZ2dg8r+RMkavybn
lDq8xDgMwHMIoywQaEIE7JFl2tg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:27 2025 by rpki-client