Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E8C9C27E9D11F0965EF5B3DAE4EC9C.roa
File: 18E8C9C27E9D11F0965EF5B3DAE4EC9C.roa (raw, json)
Hash identifier: YLcNkZHdR5Go/+z/EVPnk85+gypLfHXI/QXxy2UkJ64=
Subject key identifier: 36:C4:C4:59:78:C2:0C:39:5F:62:44:D9:F6:2C:3B:EC:F2:25:E1:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E8C9C27E9D11F0965EF5B3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:42:45 +0000
ROA not before: Thu 21 Aug 2025 14:42:40 +0000
ROA not after: Wed 14 Aug 2030 14:42:40 +0000
asID: 17561
IP address blocks: 156.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93774 (0x16e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 14:42:40 2025 GMT
Not After : Aug 14 14:42:40 2030 GMT
Subject: CN=68a73064-6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:bc:01:e5:20:92:7f:70:18:2a:3f:7d:b4:
43:ba:b0:3f:da:e0:d3:c5:88:d1:8f:c3:97:b9:a9:
38:2d:90:15:17:16:d4:29:3d:c9:ab:ac:70:45:79:
79:ca:b7:dc:b7:1c:0a:89:90:67:a0:90:55:c3:0f:
5f:66:27:78:ea:95:65:df:ee:b8:25:69:16:91:31:
5e:23:b1:81:36:40:11:6e:aa:d6:45:08:fe:c8:cf:
20:91:d2:d7:50:31:70:8c:49:6d:a8:09:f6:86:8d:
cb:11:ad:d2:f6:2a:cc:be:39:1f:c0:c4:df:02:23:
20:38:e9:7b:76:3f:6b:47:09:5c:44:cd:13:67:68:
0e:fb:97:9f:13:f8:05:61:4e:b9:51:d3:32:21:21:
0b:d0:11:3c:9f:40:4a:af:a7:86:da:ca:9b:10:7b:
b9:a2:d8:73:7a:55:85:4e:9d:9b:aa:4d:7c:c0:32:
70:d3:95:e9:ce:ce:3a:59:bf:00:29:c1:3a:fa:af:
9b:62:df:19:28:ae:6a:e2:35:11:42:7d:14:aa:89:
43:1c:3b:c5:8d:fc:40:0e:62:fc:da:84:21:78:9b:
6a:03:84:9f:3e:e8:9b:06:10:0c:5e:fe:3a:b4:8f:
cf:83:b5:f6:36:b5:51:84:fa:19:1c:24:16:86:17:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:C4:59:78:C2:0C:39:5F:62:44:D9:F6:2C:3B:EC:F2:25:E1:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E8C9C27E9D11F0965EF5B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:11:0f:52:2f:e8:35:5f:bf:4b:c2:bd:fe:cd:8e:fe:de:21:
92:fa:78:f8:c2:b2:b2:16:9e:31:ab:11:9b:53:44:4f:d8:de:
2e:b8:5f:b2:34:b3:2d:ae:56:36:4c:e3:26:db:d4:01:06:79:
64:67:7b:ba:20:20:e9:c0:f9:ed:21:7d:38:af:8f:92:8a:cc:
c6:a1:63:78:dc:1f:c4:0f:00:08:bc:76:08:9e:65:fa:0a:0e:
81:99:0d:9b:62:40:71:5f:5f:a4:67:7b:1e:f4:69:d3:b5:74:
65:7f:0e:df:bd:17:49:25:4c:c7:ea:8e:3f:7a:60:a3:24:cc:
9a:95:ed:ec:c3:73:03:f5:f9:ab:4d:ea:7d:49:98:54:8a:99:
76:cd:88:c5:21:f7:41:a8:ad:af:68:57:64:f9:9e:9d:d9:50:
5e:a9:e3:49:c4:e7:a7:ad:c1:bd:d9:55:3a:d0:83:14:65:9c:
cd:cf:24:b2:dd:50:9d:47:23:8c:b5:ac:14:13:7d:d6:c1:a8:
04:ab:3e:6a:7d:0b:08:6d:0f:6c:51:d7:42:fa:65:e0:02:72:
7c:49:72:0a:74:0a:4f:2c:8f:2c:9e:67:07:12:e6:99:80:29:
19:de:3b:6b:14:71:74:de:5f:f9:4c:16:bf:49:32:d0:9f:89:
a5:ff:d4:99
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAW5OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIxMTQ0MjQwWhcNMzAwODE0MTQ0MjQwWjAYMRYw
FAYDVQQDEw02OGE3MzA2NC02NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzPW8AeUgkn9wGCo/fbRDurA/2uDTxYjRj8OXuak4LZAVFxbUKT3Jq6xw
RXl5yrfctxwKiZBnoJBVww9fZid46pVl3+64JWkWkTFeI7GBNkARbqrWRQj+yM8g
kdLXUDFwjEltqAn2ho3LEa3S9irMvjkfwMTfAiMgOOl7dj9rRwlcRM0TZ2gO+5ef
E/gFYU65UdMyISEL0BE8n0BKr6eG2sqbEHu5othzelWFTp2bqk18wDJw05Xpzs46
Wb8AKcE6+q+bYt8ZKK5q4jURQn0UqolDHDvFjfxADmL82oQheJtqA4SfPuibBhAM
Xv46tI/Pg7X2NrVRhPoZHCQWhhcBBwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDbE
xFl4wgw5X2JE2fYsO+zyJeGrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOEU4QzlDMjdFOUQxMUYwOTY1RUY1QjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnPUwDQYJKoZIhvcNAQELBQAD
ggEBAHARD1Iv6DVfv0vCvf7Njv7eIZL6ePjCsrIWnjGrEZtTRE/Y3i64X7I0sy2u
VjZM4ybb1AEGeWRne7ogIOnA+e0hfTivj5KKzMahY3jcH8QPAAi8dgieZfoKDoGZ
DZtiQHFfX6Rnex70adO1dGV/Dt+9F0klTMfqjj96YKMkzJqV7ezDcwP1+atN6n1J
mFSKmXbNiMUh90Gora9oV2T5np3ZUF6p40nE56etwb3ZVTrQgxRlnM3PJLLdUJ1H
I4y1rBQTfdbBqASrPmp9CwhtD2xR10L6ZeACcnxJcgp0Ck8sjyyeZwcS5pmAKRne
O2sUcXTeX/lMFr9JMtCfiaX/1Jk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:04:46 2025 by rpki-client