Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E32C74687E11F0842FF181DAE4EC9C.roa
File: D4E32C74687E11F0842FF181DAE4EC9C.roa (raw, json)
Hash identifier: R8KtS1Z0wrIJzx58L3+zPoxULxLjNRN7j4vL0P8GE+8=
Subject key identifier: E3:1E:A4:3B:98:45:86:47:9B:AE:DD:6C:9D:37:BB:2A:33:AE:3D:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016747
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E32C74687E11F0842FF181DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:10:40 +0000
ROA not before: Thu 24 Jul 2025 11:10:35 +0000
ROA not after: Thu 28 Aug 2025 11:10:35 +0000
asID: 44559
IP address blocks: 156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.174.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91975 (0x16747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:10:35 2025 GMT
Not After : Aug 28 11:10:35 2025 GMT
Subject: CN=688214b0-9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:59:ba:aa:c4:45:ff:c9:99:57:06:78:7b:
aa:d3:cc:52:6a:74:2f:30:69:ec:5f:b6:88:41:53:
97:be:80:75:ed:9f:ea:27:a2:4f:8e:50:ea:c5:de:
87:79:5b:61:7a:49:c0:e2:42:37:51:b3:43:eb:04:
c0:27:0f:2d:70:65:c3:e9:2f:26:d9:b0:0c:59:24:
06:50:98:89:58:23:f9:08:4f:28:74:f3:f4:4b:8b:
ee:00:9a:fc:40:3b:f0:a7:a6:a9:69:91:02:6d:88:
2a:7c:4b:ab:a9:0f:c9:f8:56:21:84:10:15:b4:d1:
b5:fa:88:bd:f6:92:43:4b:01:b7:ae:82:51:01:73:
ab:a7:c3:b2:7d:3e:74:ba:3f:cb:fe:f2:c6:89:b3:
76:6b:22:f7:04:ff:3a:72:a7:ed:2b:09:19:78:08:
c0:ac:02:2d:fb:dd:bb:d5:f6:11:e9:5a:f6:a3:a3:
e8:75:1b:e0:7d:a8:0e:ae:ff:29:63:e3:a1:49:84:
e5:9c:8d:93:c8:82:93:d4:eb:92:b4:d1:f6:04:6a:
88:db:ca:a0:69:01:d1:fb:23:46:cc:36:6d:87:f9:
ab:5c:d1:82:48:c4:38:68:35:96:97:80:1d:0e:be:
20:0d:00:0a:79:fe:78:95:c5:06:06:ab:c6:77:3b:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:A4:3B:98:45:86:47:9B:AE:DD:6C:9D:37:BB:2A:33:AE:3D:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E32C74687E11F0842FF181DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.169.0-156.246.178.255
Signature Algorithm: sha256WithRSAEncryption
44:51:b6:15:06:a8:ed:f6:63:7d:6e:67:64:bc:5a:aa:56:b3:
4e:86:02:82:f4:fb:27:af:84:2e:db:1f:d5:5f:95:7f:64:86:
37:54:b2:8c:f9:62:34:8d:11:7e:44:0d:8c:83:76:71:d6:93:
d6:09:ab:0e:f5:29:22:2f:ec:74:4b:00:1c:68:bf:d8:c4:30:
d3:af:03:1f:85:c3:ab:5d:54:bb:08:13:2d:a7:03:60:65:14:
05:6f:83:2f:79:99:5d:3b:36:7a:90:e1:00:7e:5b:40:34:44:
b9:7a:13:8d:0b:81:07:25:78:a9:6c:56:75:79:4c:8a:6b:39:
75:f6:d8:01:a6:65:0a:28:42:48:41:fc:73:99:e2:03:12:80:
e2:38:e8:92:83:14:0b:86:5e:3e:11:64:1c:6e:3e:01:da:62:
d1:93:08:b1:9e:b6:e9:e5:1b:ca:b3:41:f0:39:fe:05:22:96:
2c:7d:bb:20:96:10:75:e1:d9:70:b6:5e:07:0a:65:a5:27:84:
52:de:b8:dd:4e:9e:6e:f6:00:6a:26:cf:4f:88:10:a5:7a:73:
6a:9e:58:63:0b:02:0f:8f:3a:50:12:e1:1d:77:d6:15:6a:86:
f4:f8:50:e7:b3:63:f8:5c:be:0b:b4:0d:a1:49:40:67:4f:95:
af:17:22:22
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWdHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTExMDM1WhcNMjUwODI4MTExMDM1WjAYMRYw
FAYDVQQDEw02ODgyMTRiMC05YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxCBZuqrERf/JmVcGeHuq08xSanQvMGnsX7aIQVOXvoB17Z/qJ6JPjlDq
xd6HeVtheknA4kI3UbND6wTAJw8tcGXD6S8m2bAMWSQGUJiJWCP5CE8odPP0S4vu
AJr8QDvwp6apaZECbYgqfEurqQ/J+FYhhBAVtNG1+oi99pJDSwG3roJRAXOrp8Oy
fT50uj/L/vLGibN2ayL3BP86cqftKwkZeAjArAIt+9271fYR6Vr2o6PodRvgfagO
rv8pY+OhSYTlnI2TyIKT1OuStNH2BGqI28qgaQHR+yNGzDZth/mrXNGCSMQ4aDWW
l4AdDr4gDQAKef54lcUGBqvGdztMawIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOMe
pDuYRYZHm67dbJ03uyozrj1jMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENEUzMkM3NDY4N0UxMUYwODQyRkYxODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9qkDBACc9rIwDQYJKoZI
hvcNAQELBQADggEBAERRthUGqO32Y31uZ2S8WqpWs06GAoL0+yevhC7bH9VflX9k
hjdUsoz5YjSNEX5EDYyDdnHWk9YJqw71KSIv7HRLABxov9jEMNOvAx+Fw6tdVLsI
Ey2nA2BlFAVvgy95mV07NnqQ4QB+W0A0RLl6E40LgQcleKlsVnV5TIprOXX22AGm
ZQooQkhB/HOZ4gMSgOI46JKDFAuGXj4RZBxuPgHaYtGTCLGetunlG8qzQfA5/gUi
lix9uyCWEHXh2XC2XgcKZaUnhFLeuN1Onm72AGomz0+IEKV6c2qeWGMLAg+POlAS
4R131hVqhvT4UOezY/hcvgu0DaFJQGdPla8XIiI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:24 2025 by rpki-client