Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C0B6C6687911F0AECD0AE1DAE4EC9C.roa
File: D9C0B6C6687911F0AECD0AE1DAE4EC9C.roa (raw, json)
Hash identifier: OZnblmx2nv6UCo2Rmxis9kjWbc9vE5bj8YC5Noqtv+s=
Subject key identifier: 97:58:3F:3B:EA:90:A1:61:48:4D:A3:76:D0:E6:7E:BC:1D:EA:50:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01673B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C0B6C6687911F0AECD0AE1DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:35:01 +0000
ROA not before: Thu 24 Jul 2025 10:34:55 +0000
ROA not after: Thu 28 Aug 2025 10:34:55 +0000
asID: 44559
IP address blocks: 156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91963 (0x1673b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:34:55 2025 GMT
Not After : Aug 28 10:34:55 2025 GMT
Subject: CN=68820c54-34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:4d:0f:bc:93:a8:24:13:bc:27:b1:d2:8f:
dd:db:be:8c:8d:d1:c5:f9:a7:08:af:f8:c0:d0:20:
fa:da:a7:27:1c:8e:0c:53:e0:c2:98:81:ce:e4:a3:
2c:04:48:91:2b:db:8a:e4:3d:da:0f:c4:45:c8:9b:
83:e9:a3:6b:69:e8:2d:5c:db:2a:49:6e:d6:5f:2e:
aa:58:52:83:53:08:ca:bc:66:c2:92:bd:72:72:ae:
85:44:7f:7b:a2:44:99:95:db:8d:a5:f1:f5:bb:b1:
66:cb:da:18:5e:8c:23:4f:2e:35:bc:0e:06:72:da:
b6:eb:af:06:3a:04:2f:ed:d0:c2:13:69:30:a4:fe:
bc:a8:7c:df:51:c5:b1:1d:87:88:0a:f5:30:a6:96:
f0:a1:62:5b:b9:42:be:1b:19:7d:fb:a7:a7:76:27:
93:f0:b9:c7:38:be:8e:ad:27:f8:72:51:d8:1b:11:
1b:63:c4:ac:f5:3d:78:f0:19:72:f0:ed:76:c3:e2:
74:3f:2a:24:71:e3:00:10:4b:91:cc:c1:24:f1:9c:
dd:e7:fc:bb:c7:99:51:35:23:82:10:87:a9:b4:3b:
75:85:21:94:cf:6b:e0:5c:4f:92:8f:f6:28:f5:2c:
18:f5:8d:26:a4:f9:3a:66:29:12:3b:80:bc:17:9d:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:3F:3B:EA:90:A1:61:48:4D:A3:76:D0:E6:7E:BC:1D:EA:50:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C0B6C6687911F0AECD0AE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.219.0-156.246.228.255
Signature Algorithm: sha256WithRSAEncryption
02:60:ea:b4:05:7d:17:74:60:8c:13:06:12:aa:89:db:b3:c8:
37:27:33:fe:68:6b:47:83:47:40:06:36:02:c6:98:b5:89:f2:
23:70:12:5e:c7:d9:2e:10:40:64:82:64:79:cb:7b:66:5b:fe:
9c:36:17:e6:7f:d2:88:4d:a2:79:c7:aa:a1:66:6a:76:10:3b:
0f:22:88:96:50:1b:a9:b8:76:10:70:a6:ca:cc:0a:4e:10:33:
80:52:7b:d4:cf:c6:05:5c:14:07:3c:fd:9a:fb:9c:66:de:0f:
f8:a3:a5:76:07:f7:5f:b0:e6:3d:b8:f4:14:da:97:48:b8:71:
79:c7:91:49:ff:40:1f:49:0d:5e:3e:98:d5:63:d1:30:0c:b8:
3f:e7:3f:23:e7:12:98:b6:41:16:8a:58:3a:b2:3b:1c:f6:cf:
08:21:71:0d:6a:25:0a:ae:29:fd:ed:06:86:9a:cd:05:56:c8:
27:8f:1f:74:1e:b4:86:1e:ea:16:0c:16:e0:27:8a:13:ef:74:
ca:f4:b5:97:e8:99:83:fe:fc:3e:cb:42:12:55:14:1e:b2:43:
29:13:c2:29:a7:d2:69:1c:c2:9a:70:d2:c4:e2:fa:76:9c:3c:
7c:1d:1a:e5:72:87:c9:b5:b9:63:bc:c7:9e:94:a2:1c:61:36:
cf:3b:23:75
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWc7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTAzNDU1WhcNMjUwODI4MTAzNDU1WjAYMRYw
FAYDVQQDEw02ODgyMGM1NC0zNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz+ZND7yTqCQTvCex0o/d276MjdHF+acIr/jA0CD62qcnHI4MU+DCmIHO
5KMsBEiRK9uK5D3aD8RFyJuD6aNraegtXNsqSW7WXy6qWFKDUwjKvGbCkr1ycq6F
RH97okSZlduNpfH1u7Fmy9oYXowjTy41vA4Gctq2668GOgQv7dDCE2kwpP68qHzf
UcWxHYeICvUwppbwoWJbuUK+Gxl9+6endieT8LnHOL6OrSf4clHYGxEbY8Ss9T14
8Bly8O12w+J0PyokceMAEEuRzMEk8Zzd5/y7x5lRNSOCEIeptDt1hSGUz2vgXE+S
j/Yo9SwY9Y0mpPk6ZikSO4C8F51cZwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJdY
PzvqkKFhSE2jdtDmfrwd6lDTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOUMwQjZDNjY4NzkxMUYwQUVDRDBBRTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9tsDBACc9uQwDQYJKoZI
hvcNAQELBQADggEBAAJg6rQFfRd0YIwTBhKqiduzyDcnM/5oa0eDR0AGNgLGmLWJ
8iNwEl7H2S4QQGSCZHnLe2Zb/pw2F+Z/0ohNonnHqqFmanYQOw8iiJZQG6m4dhBw
psrMCk4QM4BSe9TPxgVcFAc8/Zr7nGbeD/ijpXYH91+w5j249BTal0i4cXnHkUn/
QB9JDV4+mNVj0TAMuD/nPyPnEpi2QRaKWDqyOxz2zwghcQ1qJQquKf3tBoaazQVW
yCePH3QetIYe6hYMFuAnihPvdMr0tZfomYP+/D7LQhJVFB6yQykTwimn0mkcwppw
0sTi+nacPHwdGuVyh8m1uWO8x56UohxhNs87I3U=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:05 2025 by rpki-client