Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99456AA6FC911F0B8E31179DAE4EC9C.roa
File: E99456AA6FC911F0B8E31179DAE4EC9C.roa (raw, json)
Hash identifier: V1l2DA/1MZrj9w0PKJs/Zh6Zo+w4eSrleLbGT4VMt1w=
Subject key identifier: 10:3C:8C:77:04:92:3F:87:A9:92:36:CE:29:33:60:88:EA:D4:01:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99456AA6FC911F0B8E31179DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 17:55:45 +0000
ROA not before: Sat 02 Aug 2025 17:55:40 +0000
ROA not after: Wed 10 Sep 2025 17:55:40 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92354 (0x168c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 17:55:40 2025 GMT
Not After : Sep 10 17:55:40 2025 GMT
Subject: CN=688e5121-f299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:6d:80:d5:e4:db:71:b3:63:29:17:83:dd:
91:58:52:ba:32:e2:41:9f:f4:a9:33:6e:38:54:d5:
f8:f7:d1:79:f6:55:35:a9:99:ba:3f:fa:ab:f6:5b:
15:04:06:b7:9c:b3:a9:4b:1c:0c:e6:99:86:39:96:
f3:86:44:08:14:89:43:61:84:1a:92:ce:c1:1e:e5:
7a:c1:53:27:13:69:d2:aa:f9:6e:ea:62:28:5c:f8:
3b:d6:6a:fc:5e:be:88:48:86:7d:a6:90:8d:5c:15:
27:3f:8d:2e:84:6f:c0:c4:0a:10:66:e2:ba:03:c4:
54:44:0a:f9:db:e1:61:d1:5a:fc:6b:1a:c5:c0:02:
4b:b8:8b:3b:b2:5d:8c:84:85:95:ee:f3:eb:1e:da:
cb:c8:a7:a9:16:d6:4a:7b:69:25:a4:30:6c:64:7c:
eb:2b:1d:60:5e:b4:0e:c9:f1:c4:61:79:b0:f1:91:
55:9c:7c:90:39:94:68:97:35:37:1d:54:89:26:95:
1c:dc:46:e8:95:22:24:73:a7:9a:d2:4a:1e:a6:fa:
fd:07:83:60:c8:19:d0:3e:54:ef:74:af:12:28:38:
aa:07:56:a1:a3:e1:a3:6f:fb:80:72:b0:7f:99:f5:
47:ac:85:a9:02:f3:7a:3e:6d:33:22:68:b1:f4:33:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:8C:77:04:92:3F:87:A9:92:36:CE:29:33:60:88:EA:D4:01:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99456AA6FC911F0B8E31179DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
97:69:84:81:51:90:c9:9e:46:d7:31:f3:da:fe:76:a0:9e:a2:
d4:4b:42:f1:23:b8:8b:ce:88:43:47:88:fd:ea:10:ba:33:09:
69:4e:a4:09:32:45:3c:2a:33:bf:30:a2:76:88:3c:6e:a8:11:
2b:aa:73:1f:1d:f4:a7:28:14:85:4e:51:d3:e7:b3:d8:2e:93:
c2:b0:65:5a:9e:7e:e7:25:33:a8:22:11:ff:dc:35:cf:f3:29:
4f:79:b6:7f:11:e9:d0:57:de:82:0a:89:ee:c8:93:f8:ee:71:
8d:16:e3:32:de:49:82:4a:61:89:f3:c1:db:30:d3:d8:e4:d5:
ce:be:76:69:15:fc:38:b4:0d:43:1d:84:be:89:f5:8a:d7:e9:
22:b2:e1:9e:55:39:fd:97:12:05:65:98:cc:ba:e4:65:60:a2:
1c:90:04:87:d9:7e:ac:8d:45:0d:d6:68:1e:57:0b:75:ce:15:
16:9e:bb:ed:f8:fa:6c:19:7d:db:bf:62:40:1b:04:88:ee:cd:
e3:aa:57:d7:46:bf:9b:ab:b5:8a:ed:1f:d7:b3:0d:39:25:77:
9d:53:35:ac:bf:a4:db:66:9f:56:45:8b:ca:26:9c:b9:19:f6:
08:06:73:e6:01:5f:4b:31:85:04:88:17:c9:02:6d:fb:91:db:
88:52:93:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWjCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODAyMTc1NTQwWhcNMjUwOTEwMTc1NTQwWjAYMRYw
FAYDVQQDEw02ODhlNTEyMS1mMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1GJtgNXk23GzYykXg92RWFK6MuJBn/SpM244VNX499F59lU1qZm6P/qr
9lsVBAa3nLOpSxwM5pmGOZbzhkQIFIlDYYQaks7BHuV6wVMnE2nSqvlu6mIoXPg7
1mr8Xr6ISIZ9ppCNXBUnP40uhG/AxAoQZuK6A8RURAr52+Fh0Vr8axrFwAJLuIs7
sl2MhIWV7vPrHtrLyKepFtZKe2klpDBsZHzrKx1gXrQOyfHEYXmw8ZFVnHyQOZRo
lzU3HVSJJpUc3EbolSIkc6ea0koepvr9B4NgyBnQPlTvdK8SKDiqB1aho+Gjb/uA
crB/mfVHrIWpAvN6Pm0zImix9DMNhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBA8
jHcEkj+HqZI2zikzYIjq1AF/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOTk0NTZBQTZGQzkxMUYwQjhFMzExNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQCXaYSBUZDJnkbXMfPa/nagnqLUS0LxI7iLzohDR4j96hC6MwlpTqQJMkU8
KjO/MKJ2iDxuqBErqnMfHfSnKBSFTlHT57PYLpPCsGVann7nJTOoIhH/3DXP8ylP
ebZ/EenQV96CConuyJP47nGNFuMy3kmCSmGJ88HbMNPY5NXOvnZpFfw4tA1DHYS+
ifWK1+kisuGeVTn9lxIFZZjMuuRlYKIckASH2X6sjUUN1mgeVwt1zhUWnrvt+Pps
GX3bv2JAGwSI7s3jqlfXRr+bq7WK7R/Xsw05JXedUzWsv6TbZp9WRYvKJpy5GfYI
BnPmAV9LMYUEiBfJAm37kduIUpPV
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:39 2025 by rpki-client