Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65ADB826B9B11F09A0AA3C8DAE4EC9C.roa
File: C65ADB826B9B11F09A0AA3C8DAE4EC9C.roa (raw, json)
Hash identifier: UKuSyVPKGY7+oqoU+bK0s3HjyXgjTN8WWHQ8tYBRokk=
Subject key identifier: 91:4A:62:69:6D:F4:7B:06:D7:22:85:42:2E:8B:9E:7A:B2:FA:B4:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65ADB826B9B11F09A0AA3C8DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 10:15:24 +0000
ROA not before: Mon 28 Jul 2025 10:15:20 +0000
ROA not after: Mon 01 Sep 2025 10:15:20 +0000
asID: 209968
IP address blocks: 156.225.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92142 (0x167ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 10:15:20 2025 GMT
Not After : Sep 1 10:15:20 2025 GMT
Subject: CN=68874dbc-9cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:d2:88:e6:db:34:12:96:2e:5c:26:c8:db:
d8:28:38:70:e3:ed:5a:e6:02:81:7c:db:03:02:08:
b7:5c:46:c4:68:60:ae:54:6b:c4:bb:74:41:41:d0:
58:fa:ab:55:6a:41:30:4c:35:41:71:ed:e8:74:f2:
bb:50:03:4e:45:ff:57:86:56:3a:f4:19:f9:93:ec:
ca:6c:7f:e7:20:75:2f:f1:5e:9d:8b:0a:ec:98:11:
eb:3f:2a:5f:81:0e:bd:76:f5:b7:11:2d:f9:e8:36:
c5:70:a8:6d:c5:06:7f:b1:47:6d:de:a8:4c:b9:27:
04:73:2f:44:09:4e:68:5d:db:19:63:be:9a:3b:c9:
62:49:70:05:b1:6a:1c:21:c6:c5:17:c2:9a:b6:04:
c3:31:d6:f9:80:14:5e:47:7f:db:7c:92:a1:d3:b5:
85:bb:6f:1f:b4:d3:05:47:6f:06:36:1e:0b:7d:14:
bb:59:0b:09:a0:07:14:a9:59:0f:3c:bd:81:f4:42:
eb:e1:33:5a:85:39:17:73:2b:ea:89:0b:8d:1f:f6:
46:b2:f6:e4:b6:56:3c:38:51:9e:46:4c:6d:4c:02:
1d:81:b6:89:d1:52:fa:85:e2:80:eb:4a:39:5d:9a:
cc:ea:72:45:02:d8:70:b4:01:3b:a1:bd:ff:73:f1:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:62:69:6D:F4:7B:06:D7:22:85:42:2E:8B:9E:7A:B2:FA:B4:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65ADB826B9B11F09A0AA3C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.45.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fd:60:8e:38:ab:44:ff:91:70:3e:cd:4f:0c:ef:1e:ca:52:
92:d7:75:41:59:90:c3:c1:16:f2:36:5c:87:03:53:ad:06:98:
3f:74:80:82:20:f8:f0:b6:83:fa:cb:66:9e:ac:e7:ab:7b:87:
a8:ba:ea:34:08:c7:da:ea:71:75:29:f2:f0:75:73:1f:df:79:
a1:f0:c7:71:a0:37:a7:71:35:51:e1:cb:3f:7b:4c:b1:4e:27:
eb:ce:05:45:11:1c:a1:08:75:4f:19:1c:3f:10:49:12:c8:12:
23:a5:f5:0a:80:32:0d:68:0c:ba:b3:58:f7:9a:3c:eb:ed:9b:
c2:c7:48:77:17:60:30:05:ee:2b:de:ee:c4:ca:6e:53:1d:db:
f3:80:42:a7:6a:4a:22:21:35:d8:8c:71:05:6c:5a:d5:a7:4a:
c3:a5:83:2a:db:9a:3e:8f:9a:b0:e2:63:7b:6e:95:45:f6:cc:
f7:3f:15:d8:28:2d:66:4a:06:5c:9f:75:2c:22:54:0e:84:7f:
7f:04:57:be:85:5d:01:23:9f:91:cd:a7:b7:63:35:30:61:4c:
bb:77:a6:6a:8e:86:28:8a:79:91:67:9c:b0:64:d9:df:22:21:
04:5a:9c:4e:4a:ad:c5:eb:ff:39:52:2e:3b:74:99:a0:09:63:
65:ac:c0:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWfuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI4MTAxNTIwWhcNMjUwOTAxMTAxNTIwWjAYMRYw
FAYDVQQDEw02ODg3NGRiYy05Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm/XSiObbNBKWLlwmyNvYKDhw4+1a5gKBfNsDAgi3XEbEaGCuVGvEu3RB
QdBY+qtVakEwTDVBce3odPK7UANORf9XhlY69Bn5k+zKbH/nIHUv8V6diwrsmBHr
PypfgQ69dvW3ES356DbFcKhtxQZ/sUdt3qhMuScEcy9ECU5oXdsZY76aO8liSXAF
sWocIcbFF8KatgTDMdb5gBReR3/bfJKh07WFu28ftNMFR28GNh4LfRS7WQsJoAcU
qVkPPL2B9ELr4TNahTkXcyvqiQuNH/ZGsvbktlY8OFGeRkxtTAIdgbaJ0VL6heKA
60o5XZrM6nJFAthwtAE7ob3/c/GktwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJFK
Ymlt9HsG1yKFQi6Lnnqy+rTCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjVBREI4MjZCOUIxMUYwOUEwQUEzQzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEtMA0GCSqGSIb3DQEBCwUA
A4IBAQBQ/WCOOKtE/5FwPs1PDO8eylKS13VBWZDDwRbyNlyHA1OtBpg/dICCIPjw
toP6y2aerOere4eouuo0CMfa6nF1KfLwdXMf33mh8MdxoDencTVR4cs/e0yxTifr
zgVFERyhCHVPGRw/EEkSyBIjpfUKgDINaAy6s1j3mjzr7ZvCx0h3F2AwBe4r3u7E
ym5THdvzgEKnakoiITXYjHEFbFrVp0rDpYMq25o+j5qw4mN7bpVF9sz3PxXYKC1m
SgZcn3UsIlQOhH9/BFe+hV0BI5+Rzae3YzUwYUy7d6ZqjoYoinmRZ5ywZNnfIiEE
WpxOSq3F6/85Ui47dJmgCWNlrMDY
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:21 2025 by rpki-client