Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C1095272A411F0805D9898DAE4EC9C.roa
File: 39C1095272A411F0805D9898DAE4EC9C.roa (raw, json)
Hash identifier: xlmzDcZNwegr5r7l0kH/oApu21VVctcK6dyBcLvrIxE=
Subject key identifier: 3E:A2:CC:A4:90:C0:2D:81:3F:0E:54:5C:28:8B:69:99:7F:0B:E4:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016942
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C1095272A411F0805D9898DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 09:03:32 +0000
ROA not before: Wed 06 Aug 2025 09:03:27 +0000
ROA not after: Sat 13 Sep 2025 09:03:27 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92482 (0x16942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 09:03:27 2025 GMT
Not After : Sep 13 09:03:27 2025 GMT
Subject: CN=68931a64-a66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:2c:58:49:50:cc:2f:86:ac:74:39:7c:c7:
09:26:ab:25:bd:0c:46:23:fb:da:9e:4d:bd:fd:26:
47:37:ba:ea:96:59:10:5c:d0:a9:3c:3c:95:0d:17:
e8:81:b7:50:fa:24:87:7f:0f:8d:8a:9b:62:ee:71:
f5:bc:e7:b7:a4:4e:16:b1:7e:cc:1f:c2:27:cb:8b:
30:93:cd:e2:2b:4c:59:3a:70:8d:66:b2:73:e7:fa:
2b:c1:f2:b7:dd:7a:9a:0d:59:21:75:11:88:5e:5f:
10:b1:bb:9c:6d:11:f7:1a:33:9f:bd:2b:7a:f7:0e:
de:3f:ae:40:0f:dc:68:cb:ac:62:8f:c8:b8:1e:e5:
3a:29:09:fa:ef:19:a4:6f:b1:2f:db:14:52:07:ab:
8f:cc:d0:4c:6a:1b:25:3f:c0:b6:33:8a:52:95:c6:
b1:4c:3a:bc:1d:d0:44:bb:a7:8f:b8:f8:7b:b4:3e:
13:80:3d:c7:1f:ec:17:79:e9:20:c8:c7:f5:01:49:
33:03:5e:17:a3:c0:1d:60:a7:2b:eb:b2:e0:97:66:
5b:96:19:a0:14:bd:e6:61:e9:cc:36:b4:d4:76:9c:
2e:00:7c:3d:29:02:36:5c:db:a4:de:96:fb:b3:50:
51:ea:21:86:7c:2f:7c:12:3f:65:f5:ef:31:f7:7e:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:CC:A4:90:C0:2D:81:3F:0E:54:5C:28:8B:69:99:7F:0B:E4:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C1095272A411F0805D9898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
29:84:5b:01:36:da:2b:f4:5f:82:ff:ca:e4:64:66:9a:24:43:
5b:b9:3c:e7:38:c3:72:e8:be:1a:9a:40:d6:c9:af:9a:86:06:
a4:21:e9:28:d7:d3:a4:07:d8:00:9e:23:b8:a0:73:b8:1b:8d:
62:ef:fc:2e:a3:cb:18:e4:0c:94:9f:6b:09:0a:9d:7b:d7:19:
85:ea:5f:28:c5:d4:39:72:d9:dd:1a:e3:d3:ab:70:31:58:4e:
e1:c2:14:c7:00:8c:45:68:c4:34:78:25:f7:df:77:f5:35:c1:
b9:f8:e4:6d:7e:e3:9c:7b:6c:bb:6c:c7:98:87:25:22:68:16:
00:d5:aa:e1:36:13:1c:25:d4:c5:7c:a3:45:bd:1b:3b:9c:be:
cb:3f:67:15:fc:0e:be:b9:2a:f2:19:7c:ea:f5:32:af:22:53:
78:af:65:a2:e8:a4:63:51:bf:cd:23:f5:05:13:56:a6:d8:23:
88:4c:d9:ed:67:cf:1d:2b:6a:0a:9e:28:52:6d:6c:23:c1:5d:
cc:65:0b:47:da:40:37:17:3a:7c:8c:25:bc:45:73:17:3f:96:
11:d2:3d:17:10:64:e0:d6:f7:36:04:cf:91:0e:03:10:d5:02:
e0:8f:cf:25:14:a3:f4:46:48:80:0a:c3:52:de:b3:ff:23:82:
46:bb:38:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWlCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA2MDkwMzI3WhcNMjUwOTEzMDkwMzI3WjAYMRYw
FAYDVQQDEw02ODkzMWE2NC1hNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0mAsWElQzC+GrHQ5fMcJJqslvQxGI/vank29/SZHN7rqllkQXNCpPDyV
DRfogbdQ+iSHfw+Nipti7nH1vOe3pE4WsX7MH8Iny4swk83iK0xZOnCNZrJz5/or
wfK33XqaDVkhdRGIXl8QsbucbRH3GjOfvSt69w7eP65AD9xoy6xij8i4HuU6KQn6
7xmkb7Ev2xRSB6uPzNBMahslP8C2M4pSlcaxTDq8HdBEu6ePuPh7tD4TgD3HH+wX
eekgyMf1AUkzA14Xo8AdYKcr67Lgl2ZblhmgFL3mYenMNrTUdpwuAHw9KQI2XNuk
3pb7s1BR6iGGfC98Ej9l9e8x937KgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD6i
zKSQwC2BPw5UXCiLaZl/C+Q8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOUMxMDk1MjcyQTQxMUYwODA1RDk4OThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFBMA0GCSqGSIb3DQEBCwUA
A4IBAQAphFsBNtor9F+C/8rkZGaaJENbuTznOMNy6L4amkDWya+ahgakIeko19Ok
B9gAniO4oHO4G41i7/wuo8sY5AyUn2sJCp171xmF6l8oxdQ5ctndGuPTq3AxWE7h
whTHAIxFaMQ0eCX333f1NcG5+ORtfuOce2y7bMeYhyUiaBYA1arhNhMcJdTFfKNF
vRs7nL7LP2cV/A6+uSryGXzq9TKvIlN4r2Wi6KRjUb/NI/UFE1am2COITNntZ88d
K2oKnihSbWwjwV3MZQtH2kA3Fzp8jCW8RXMXP5YR0j0XEGTg1vc2BM+RDgMQ1QLg
j88lFKP0RkiACsNS3rP/I4JGuzi7
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:16 2025 by rpki-client