Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0693B346FE811F08C75FABCDAE4EC9C.roa
File: F0693B346FE811F08C75FABCDAE4EC9C.roa (raw, json)
Hash identifier: 02c/zbsuoCbmm00ZLU2yQyqflj8le7ZoLhgTsVzBxeI=
Subject key identifier: 73:5C:58:DE:DA:52:7B:90:20:19:13:7B:90:A5:61:59:64:F6:1E:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0693B346FE811F08C75FABCDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 21:37:51 +0000
ROA not before: Sat 02 Aug 2025 21:37:43 +0000
ROA not after: Wed 24 Sep 2025 21:37:43 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92394 (0x168ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 21:37:43 2025 GMT
Not After : Sep 24 21:37:43 2025 GMT
Subject: CN=688e852f-6f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b9:1f:5c:fe:d6:4e:d0:e6:d9:d2:0e:02:eb:
23:07:5b:74:58:68:f6:59:56:0f:29:09:b1:f2:79:
09:35:35:ef:c1:9a:b5:b4:4e:a7:64:45:39:62:70:
9f:88:5b:51:22:d4:d7:2a:c4:63:91:67:9b:38:1f:
9b:d3:cb:31:30:42:08:ab:27:b4:88:05:a4:9b:8a:
c7:81:73:9c:a8:c1:2d:a3:09:72:79:b2:1d:44:3a:
e9:8a:01:5b:06:b1:28:29:df:53:d7:b8:7c:6e:64:
de:73:c0:ed:32:ba:a9:1b:d3:31:ce:da:e6:03:89:
80:6d:06:5f:03:c4:01:29:6e:c4:d9:ce:c7:ad:89:
74:ca:69:91:db:22:a7:d7:6b:6a:68:df:86:15:11:
4c:4c:d2:a8:ee:13:b3:b2:34:30:18:3c:be:a2:23:
7f:c3:8f:29:75:0e:58:63:81:9b:ae:0d:cc:90:eb:
d8:0e:f5:db:fc:e8:c3:0c:67:41:c5:79:f2:13:80:
13:61:65:54:dc:6a:98:0d:8b:37:8e:c2:84:88:c9:
ae:8c:39:ac:50:13:1f:03:53:c6:55:af:30:29:e2:
34:aa:1b:73:45:ac:7c:fc:60:de:4b:37:9a:c6:1c:
ce:77:6f:41:6e:aa:6b:04:c8:a0:a6:25:ae:ec:44:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:58:DE:DA:52:7B:90:20:19:13:7B:90:A5:61:59:64:F6:1E:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0693B346FE811F08C75FABCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
68:66:6f:97:6f:3f:65:34:f9:95:f3:7f:0f:0c:2c:aa:96:36:
e7:a7:da:36:11:ed:d0:05:80:5c:4d:08:5d:3e:f9:e6:fb:54:
19:fa:51:6a:f3:d8:8a:a7:fe:d7:24:42:f9:30:41:7b:8f:df:
72:90:df:ff:6b:24:99:ac:c1:1a:e1:6e:05:02:9b:a1:ec:a4:
c3:6d:5c:4a:24:33:0d:3e:f7:d4:13:08:4f:f4:2a:73:58:16:
a0:12:1a:63:bc:7f:8a:63:8d:b1:0f:1f:61:19:3f:0c:4b:aa:
cf:b6:34:d7:a5:4a:f9:86:fb:fe:f7:e7:01:7a:45:0c:fe:86:
79:9d:fb:c0:fa:60:78:cb:a4:5b:75:a4:fa:bc:86:aa:23:04:
fb:f5:91:5d:c6:8c:8d:82:9c:d9:6f:35:30:86:44:d9:04:7d:
a1:fd:3b:56:c2:f0:01:8e:c3:1c:2f:4a:ae:9f:f2:3e:45:20:
e4:7f:81:f3:f5:7d:74:00:d4:10:5a:63:01:3e:c9:a3:18:73:
d2:78:6a:16:f5:07:e0:72:80:7a:a7:36:f4:09:27:a0:ee:75:
5c:f1:3a:e9:cf:33:ab:b9:8e:6a:e4:4b:98:94:4e:75:67:dc:
c7:1b:e4:2e:7a:23:dc:2d:7d:8a:1b:56:d9:d0:80:36:26:ca:
36:14:2a:96
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWjqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODAyMjEzNzQzWhcNMjUwOTI0MjEzNzQzWjAYMRYw
FAYDVQQDEw02ODhlODUyZi02ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/LkfXP7WTtDm2dIOAusjB1t0WGj2WVYPKQmx8nkJNTXvwZq1tE6nZEU5
YnCfiFtRItTXKsRjkWebOB+b08sxMEIIqye0iAWkm4rHgXOcqMEtowlyebIdRDrp
igFbBrEoKd9T17h8bmTec8DtMrqpG9MxztrmA4mAbQZfA8QBKW7E2c7HrYl0ymmR
2yKn12tqaN+GFRFMTNKo7hOzsjQwGDy+oiN/w48pdQ5YY4Gbrg3MkOvYDvXb/OjD
DGdBxXnyE4ATYWVU3GqYDYs3jsKEiMmujDmsUBMfA1PGVa8wKeI0qhtzRax8/GDe
SzeaxhzOd29BbqprBMigpiWu7ETe3QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHNc
WN7aUnuQIBkTe5ClYVlk9h4PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMDY5M0IzNDZGRTgxMUYwOEM3NUZBQkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOc7xgDBAGc7zQwDQYJKoZI
hvcNAQELBQADggEBAGhmb5dvP2U0+ZXzfw8MLKqWNuen2jYR7dAFgFxNCF0++eb7
VBn6UWrz2Iqn/tckQvkwQXuP33KQ3/9rJJmswRrhbgUCm6HspMNtXEokMw0+99QT
CE/0KnNYFqASGmO8f4pjjbEPH2EZPwxLqs+2NNelSvmG+/735wF6RQz+hnmd+8D6
YHjLpFt1pPq8hqojBPv1kV3GjI2CnNlvNTCGRNkEfaH9O1bC8AGOwxwvSq6f8j5F
IOR/gfP1fXQA1BBaYwE+yaMYc9J4ahb1B+BygHqnNvQJJ6DudVzxOunPM6u5jmrk
S5iUTnVn3Mcb5C56I9wtfYobVtnQgDYmyjYUKpY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:57 2025 by rpki-client