Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC9AD3246B9011F0A121DB81DAE4EC9C.roa
File: FC9AD3246B9011F0A121DB81DAE4EC9C.roa (raw, json)
Hash identifier: rWOnhSX+2Q4/uOPVzXa7sJslJ9OJnDCXuMV5/oCApw8=
Subject key identifier: 2E:94:BB:9E:60:C8:95:32:4C:41:35:2E:33:8C:D5:E4:14:6D:A5:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC9AD3246B9011F0A121DB81DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:58:11 +0000
ROA not before: Mon 28 Jul 2025 08:58:06 +0000
ROA not after: Thu 07 Aug 2025 08:58:06 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92134 (0x167e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:58:06 2025 GMT
Not After : Aug 7 08:58:06 2025 GMT
Subject: CN=68873ba3-2102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:83:cf:c8:28:ed:91:48:ca:d3:d5:4c:74:
63:39:13:e8:3c:28:7c:8e:aa:c6:cd:eb:55:ec:b3:
20:6e:75:58:be:ff:ab:94:cc:ed:32:ab:7a:6b:c3:
86:30:bb:4f:b6:e6:e8:49:57:d9:0f:0b:75:4b:03:
8a:f8:88:1f:75:bf:73:d4:f3:5f:1a:e4:fc:86:a5:
e5:2d:65:05:2a:80:f7:d7:2c:22:b9:38:7c:a1:6a:
5c:3a:4a:97:ae:8c:f5:3a:a0:70:3f:96:70:e0:58:
ec:eb:e6:04:3c:de:94:a7:a6:ec:51:5f:92:e0:93:
ee:f7:86:dd:bf:cc:54:7b:43:5e:7c:40:b0:51:aa:
05:ab:94:fc:6a:2f:76:cf:21:83:2e:1c:4f:3f:d0:
75:51:25:7e:11:9e:06:3e:60:aa:05:a9:db:3c:d0:
bd:14:a5:aa:48:08:cb:85:5d:0e:7a:35:00:2c:fc:
33:ef:ec:e8:71:0e:f1:65:41:a4:0a:d5:95:a4:99:
04:59:a8:ed:a9:97:03:4a:f0:6a:b5:38:17:a5:8c:
a2:67:3d:f9:19:a7:e4:0f:1f:9d:12:f5:91:e5:a0:
bd:4f:2e:f3:ce:7f:f0:bd:7a:a0:ba:35:1b:46:b8:
ef:d4:88:09:66:fa:52:cf:94:a7:e9:94:b2:a1:8d:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:BB:9E:60:C8:95:32:4C:41:35:2E:33:8C:D5:E4:14:6D:A5:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC9AD3246B9011F0A121DB81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0a:cf:f2:fd:c8:3d:2f:17:e0:d3:38:94:8f:f0:9e:3d:28:63:
33:25:c7:24:f7:87:f6:c0:1d:bb:42:ca:16:95:7a:74:7d:28:
77:0a:fb:38:08:32:38:9b:ff:01:ad:2e:9a:5a:6d:ff:20:9e:
cc:67:09:d3:97:8d:f0:8e:0c:c7:d6:45:cb:69:d8:3f:de:c4:
63:fb:6e:b2:48:26:9e:f7:e4:85:bc:1c:70:91:ee:f2:88:73:
1f:e4:8f:81:bc:a9:ca:90:8c:09:0d:10:5a:1b:ee:6f:99:d9:
5b:49:6a:7e:27:70:15:34:55:fb:a6:f3:87:c1:aa:74:ae:19:
2b:c8:3f:ab:9f:a0:28:54:35:79:0b:f3:c3:08:02:6e:d6:13:
78:46:0f:5c:8a:8c:ee:9b:42:ad:91:08:b9:c6:10:40:11:8e:
5e:2e:47:5e:a1:2f:2c:fd:64:22:98:a0:6c:4f:bb:23:ff:6a:
86:68:e0:18:6b:a6:da:de:05:13:2c:2b:49:70:88:ce:4a:b5:
ae:9e:67:07:5f:3e:c5:4a:8c:ef:f7:0f:c0:d7:d4:41:36:94:
f4:54:1d:d6:2f:7f:a6:80:b4:5d:2c:5a:90:7c:60:83:49:ad:
40:56:a9:a0:51:83:0e:fd:ae:af:47:bc:9a:4b:18:24:a8:80:
de:29:89:2b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWfmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI4MDg1ODA2WhcNMjUwODA3MDg1ODA2WjAYMRYw
FAYDVQQDEw02ODg3M2JhMy0yMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthWDz8go7ZFIytPVTHRjORPoPCh8jqrGzetV7LMgbnVYvv+rlMztMqt6
a8OGMLtPtuboSVfZDwt1SwOK+Igfdb9z1PNfGuT8hqXlLWUFKoD31ywiuTh8oWpc
OkqXroz1OqBwP5Zw4Fjs6+YEPN6Up6bsUV+S4JPu94bdv8xUe0NefECwUaoFq5T8
ai92zyGDLhxPP9B1USV+EZ4GPmCqBanbPNC9FKWqSAjLhV0OejUALPwz7+zocQ7x
ZUGkCtWVpJkEWajtqZcDSvBqtTgXpYyiZz35GafkDx+dEvWR5aC9Ty7zzn/wvXqg
ujUbRrjv1IgJZvpSz5Sn6ZSyoY0vbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6U
u55gyJUyTEE1LjOM1eQUbaX6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzlBRDMyNDZCOTAxMUYwQTEyMURCODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnPeAAwQHnP+AMA0GCSqGSIb3
DQEBCwUAA4IBAQAKz/L9yD0vF+DTOJSP8J49KGMzJcck94f2wB27QsoWlXp0fSh3
Cvs4CDI4m/8BrS6aWm3/IJ7MZwnTl43wjgzH1kXLadg/3sRj+26ySCae9+SFvBxw
ke7yiHMf5I+BvKnKkIwJDRBaG+5vmdlbSWp+J3AVNFX7pvOHwap0rhkryD+rn6Ao
VDV5C/PDCAJu1hN4Rg9ciozum0KtkQi5xhBAEY5eLkdeoS8s/WQimKBsT7sj/2qG
aOAYa6ba3gUTLCtJcIjOSrWunmcHXz7FSozv9w/A19RBNpT0VB3WL3+mgLRdLFqQ
fGCDSa1AVqmgUYMO/a6vR7yaSxgkqIDeKYkr
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:37 2025 by rpki-client