Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178E839E7F6211F0962C97C2DAE4EC9C.roa
File: 178E839E7F6211F0962C97C2DAE4EC9C.roa (raw, json)
Hash identifier: kABzRzCcaiGUdhh9dfEcv3LqfyL+1VTNX+KR4eAddjI=
Subject key identifier: 39:A3:6F:24:42:22:E7:54:6B:BC:FC:36:38:70:FB:96:89:83:45:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016ED0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178E839E7F6211F0962C97C2DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 14:12:53 +0000
ROA not before: Fri 22 Aug 2025 14:12:48 +0000
ROA not after: Sat 06 Sep 2025 14:12:48 +0000
asID: 54801
IP address blocks: 156.225.76.0/22 maxlen: 24
156.238.120.0/21 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93904 (0x16ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 14:12:48 2025 GMT
Not After : Sep 6 14:12:48 2025 GMT
Subject: CN=68a87ae5-045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:9d:9a:a4:17:5c:6d:d1:12:39:46:79:21:
53:11:ad:23:14:80:8a:9b:fd:b2:4c:9d:59:bc:5d:
83:af:b5:7f:1b:ef:f3:a5:54:1a:75:3d:6b:bb:34:
49:cc:87:a1:53:b4:88:e0:9b:46:73:08:10:9f:bf:
55:1b:3a:ca:22:29:cd:5d:a9:2d:9b:04:a3:d1:58:
e7:a4:da:6f:44:2a:b5:73:a1:bd:1b:9b:c0:a8:30:
55:88:5d:13:a5:bc:5b:8f:e9:d8:67:f8:00:e8:95:
1f:c0:1c:a2:02:dc:cf:f8:93:fc:21:65:f7:38:28:
6e:c6:6c:e3:10:e3:2e:c2:f5:96:7c:4c:6d:8f:39:
1b:2b:cd:0d:dd:ba:9a:01:60:07:4f:3b:9d:53:e1:
c2:df:51:13:3b:6e:f3:08:d8:f3:db:54:f4:aa:22:
84:9e:2f:91:9d:97:4d:bb:f4:6c:28:57:e6:ec:a7:
8c:1d:9a:d3:d8:9f:99:f6:98:6f:72:05:6c:e2:56:
76:5f:33:7c:e1:1d:ba:6d:fc:dd:0b:09:14:90:98:
0f:8a:14:09:3b:17:e2:d1:92:fb:7a:40:3c:46:2e:
a8:8b:5e:21:52:b1:60:b1:50:db:d6:d4:44:0e:31:
57:f7:da:32:46:17:6e:11:11:f2:a6:94:0a:c7:0b:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:6F:24:42:22:E7:54:6B:BC:FC:36:38:70:FB:96:89:83:45:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178E839E7F6211F0962C97C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.245.144.0/22
156.245.232.0/21
Signature Algorithm: sha256WithRSAEncryption
70:86:c5:ed:3c:08:33:b4:4d:5b:45:c6:9e:63:ab:d9:c5:4b:
0f:f0:5f:79:d6:19:20:b9:6f:fb:a7:a4:0c:dc:2c:c7:bc:99:
ff:14:c6:24:66:b1:41:8d:ac:b4:b9:5b:cd:15:0f:eb:ee:8b:
4a:32:7d:11:12:ef:e8:8b:33:fd:2f:bb:e3:77:27:ea:07:ba:
be:24:e9:ee:c0:bf:fb:bf:70:c6:8d:a5:03:5a:fa:b1:d8:39:
3b:cb:ae:ee:b3:47:b2:e9:c0:c3:b8:28:04:3a:1b:e9:94:03:
08:55:2f:be:31:14:a3:97:02:6c:11:0f:c1:a6:d3:6a:8c:e9:
a6:51:85:0d:92:6c:b3:79:0e:c7:04:07:11:94:8e:8b:6e:5b:
11:9b:89:e1:18:22:bb:9e:b9:6f:65:7d:fe:90:31:a9:91:37:
cd:58:32:a0:d9:59:56:93:a5:0e:7b:d1:b3:4c:85:04:53:a8:
50:26:7c:cd:b8:ed:0d:13:0b:6f:47:9c:df:ee:93:83:07:3c:
bc:55:8d:61:70:2c:a3:ca:2d:b8:23:5f:0e:73:bc:8a:0f:b0:
08:22:d3:4c:4e:a0:0d:e1:ab:05:46:f8:72:94:98:00:67:ca:
2d:e8:13:88:91:cb:6e:07:63:e4:74:ff:79:1d:92:f1:46:e8:
57:ba:03:2a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAW7QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIyMTQxMjQ4WhcNMjUwOTA2MTQxMjQ4WjAYMRYw
FAYDVQQDEw02OGE4N2FlNS0wNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4FmdmqQXXG3REjlGeSFTEa0jFICKm/2yTJ1ZvF2Dr7V/G+/zpVQadT1r
uzRJzIehU7SI4JtGcwgQn79VGzrKIinNXaktmwSj0VjnpNpvRCq1c6G9G5vAqDBV
iF0Tpbxbj+nYZ/gA6JUfwByiAtzP+JP8IWX3OChuxmzjEOMuwvWWfExtjzkbK80N
3bqaAWAHTzudU+HC31ETO27zCNjz21T0qiKEni+RnZdNu/RsKFfm7KeMHZrT2J+Z
9phvcgVs4lZ2XzN84R26bfzdCwkUkJgPihQJOxfi0ZL7ekA8Ri6oi14hUrFgsVDb
1tREDjFX99oyRhduERHyppQKxwtHoQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDmj
byRCIudUa7z8Njhw+5aJg0UjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzhFODM5RTdGNjIxMUYwOTYyQzk3QzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnOFMAwQDnO54AwQCnPWQAwQD
nPXoMA0GCSqGSIb3DQEBCwUAA4IBAQBwhsXtPAgztE1bRcaeY6vZxUsP8F951hkg
uW/7p6QM3CzHvJn/FMYkZrFBjay0uVvNFQ/r7otKMn0REu/oizP9L7vjdyfqB7q+
JOnuwL/7v3DGjaUDWvqx2Dk7y67us0ey6cDDuCgEOhvplAMIVS++MRSjlwJsEQ/B
ptNqjOmmUYUNkmyzeQ7HBAcRlI6LblsRm4nhGCK7nrlvZX3+kDGpkTfNWDKg2VlW
k6UOe9GzTIUEU6hQJnzNuO0NEwtvR5zf7pODBzy8VY1hcCyjyi24I18Oc7yKD7AI
ItNMTqAN4asFRvhylJgAZ8ot6BOIkctuB2PkdP95HZLxRuhXugMq
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:03 2025 by rpki-client