Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D41D8FDE687C11F086A5ECF2DAE4EC9C.roa
File: D41D8FDE687C11F086A5ECF2DAE4EC9C.roa (raw, json)
Hash identifier: FXuB7DqQHNJEKohAGf8kZYBGR8TpfDEZdVSKep+T/I4=
Subject key identifier: 53:9B:08:57:08:E2:B6:A5:D7:AF:56:B4:40:B9:CE:25:E2:92:84:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016741
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D41D8FDE687C11F086A5ECF2DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:56:20 +0000
ROA not before: Thu 24 Jul 2025 10:56:15 +0000
ROA not after: Thu 28 Aug 2025 10:56:15 +0000
asID: 44559
IP address blocks: 156.246.179.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91969 (0x16741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:56:15 2025 GMT
Not After : Aug 28 10:56:15 2025 GMT
Subject: CN=68821153-a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:1b:cb:47:b9:09:28:85:68:84:75:f1:77:
56:7c:24:f9:eb:f8:55:5f:e3:ea:bb:08:54:2c:6e:
45:88:8e:40:c5:ad:38:a0:8e:8c:b9:8a:9e:88:a3:
f5:11:94:1f:05:c6:5c:95:f8:cd:4d:b8:38:55:43:
07:3c:e9:3f:cd:6b:bf:1f:03:b8:80:bd:3a:ee:5f:
cb:1e:de:f3:21:8e:84:d1:26:18:21:df:43:ea:c8:
05:cc:d7:0d:14:4c:8f:96:fc:d9:09:0e:c4:5f:d9:
99:67:bd:78:1f:a2:f0:39:8d:8b:ce:1f:db:e8:c3:
48:34:a3:3c:43:de:86:27:a3:02:2c:9d:2d:5f:c2:
d4:c5:f0:08:5f:3b:88:03:d5:9f:bc:51:ae:26:b7:
dd:f1:c8:a3:5a:b2:49:49:b4:d0:89:66:56:f5:cb:
f5:a6:e7:8a:3d:28:84:40:be:af:96:75:55:ce:9d:
c1:4b:cf:81:76:14:51:55:0e:3e:a7:c3:25:8f:78:
3c:14:76:43:5d:c5:75:4b:5f:af:58:5c:22:ad:f0:
66:fc:4a:b7:82:8d:49:35:2f:5c:88:8d:1d:6b:d9:
82:fb:76:ae:1e:97:53:da:25:68:91:05:74:69:ea:
26:a2:48:24:e9:57:5b:ec:be:a4:83:dd:8d:fe:47:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:08:57:08:E2:B6:A5:D7:AF:56:B4:40:B9:CE:25:E2:92:84:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D41D8FDE687C11F086A5ECF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.179.0-156.246.187.255
156.246.198.0/24
Signature Algorithm: sha256WithRSAEncryption
34:32:93:4e:ae:14:77:5e:e2:41:20:0f:a2:cf:c6:e6:aa:d0:
70:5b:9a:a6:b5:b2:94:09:dd:9b:28:cd:22:ab:f2:05:8a:d9:
72:a3:f5:60:c1:95:bf:4f:71:6b:cd:6f:c5:06:4f:99:75:d5:
33:fe:53:88:31:21:07:75:f7:77:01:22:5a:7d:a0:b0:27:6e:
cd:c6:7d:50:fd:19:88:ae:74:f9:bc:21:6b:f6:a6:a3:dc:c1:
f3:35:1b:4e:6c:b6:6a:53:db:79:ac:28:d1:98:df:86:ff:2b:
ae:3a:34:ee:26:31:1a:e2:88:26:50:4c:60:75:6e:a4:18:55:
2e:c8:0f:0c:89:4b:35:06:1e:b0:e1:0c:02:14:73:78:29:5e:
21:4c:87:6f:11:1a:ec:0f:f5:6d:b9:6b:2d:e1:f0:46:81:ff:
0c:66:f5:7f:da:73:74:a1:cf:b7:d6:5d:52:31:4e:60:c8:15:
cc:f1:5e:a0:fe:31:4b:1f:14:57:41:9e:1f:96:96:fc:36:1a:
fb:eb:ee:8c:fd:91:05:ee:83:f4:09:fb:6a:67:4d:bf:73:05:
db:64:2b:a1:50:0a:d1:ff:36:08:28:99:67:eb:50:60:ab:0c:
41:60:23:ad:05:cb:6e:6f:31:8c:f7:43:2c:b3:73:a5:a8:b3:
49:91:69:5f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAWdBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTA1NjE1WhcNMjUwODI4MTA1NjE1WjAYMRYw
FAYDVQQDEw02ODgyMTE1My1hMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2doby0e5CSiFaIR18XdWfCT56/hVX+PquwhULG5FiI5Axa04oI6MuYqe
iKP1EZQfBcZclfjNTbg4VUMHPOk/zWu/HwO4gL067l/LHt7zIY6E0SYYId9D6sgF
zNcNFEyPlvzZCQ7EX9mZZ714H6LwOY2Lzh/b6MNINKM8Q96GJ6MCLJ0tX8LUxfAI
XzuIA9WfvFGuJrfd8cijWrJJSbTQiWZW9cv1pueKPSiEQL6vlnVVzp3BS8+BdhRR
VQ4+p8Mlj3g8FHZDXcV1S1+vWFwirfBm/Eq3go1JNS9ciI0da9mC+3auHpdT2iVo
kQV0aeomokgk6Vdb7L6kg92N/kdp0QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFOb
CFcI4ral169WtEC5ziXikoReMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENDFEOEZERTY4N0MxMUYwODZBNUVDRjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc9rMDBAKc9rgDBACc9sYw
DQYJKoZIhvcNAQELBQADggEBADQyk06uFHde4kEgD6LPxuaq0HBbmqa1spQJ3Zso
zSKr8gWK2XKj9WDBlb9PcWvNb8UGT5l11TP+U4gxIQd193cBIlp9oLAnbs3GfVD9
GYiudPm8IWv2pqPcwfM1G05stmpT23msKNGY34b/K646NO4mMRriiCZQTGB1bqQY
VS7IDwyJSzUGHrDhDAIUc3gpXiFMh28RGuwP9W25ay3h8EaB/wxm9X/ac3Shz7fW
XVIxTmDIFczxXqD+MUsfFFdBnh+Wlvw2Gvvr7oz9kQXug/QJ+2pnTb9zBdtkK6FQ
CtH/NggomWfrUGCrDEFgI60Fy25vMYz3Qyyzc6Wos0mRaV8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:12 2025 by rpki-client