Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BFC5FA7EFE11F09E2F5CAFDAE4EC9C.roa
File: 56BFC5FA7EFE11F09E2F5CAFDAE4EC9C.roa (raw, json)
Hash identifier: AlbpLaoHi2eZiZ12tiwv6/Jo9+UcP6nxtfrMSPvi0rs=
Subject key identifier: 72:68:26:74:98:F4:77:72:76:28:37:AD:1F:1C:99:F6:BE:21:E6:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BFC5FA7EFE11F09E2F5CAFDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 02:18:49 +0000
ROA not before: Fri 22 Aug 2025 02:18:45 +0000
ROA not after: Mon 03 Nov 2025 02:18:45 +0000
asID: 150706
IP address blocks: 156.227.1.0/24 maxlen: 24
156.227.24.0/24 maxlen: 24
156.227.25.0/24 maxlen: 24
156.227.26.0/24 maxlen: 24
156.227.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93840 (0x16e90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 02:18:45 2025 GMT
Not After : Nov 3 02:18:45 2025 GMT
Subject: CN=68a7d389-1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:25:a7:d5:e9:26:39:15:84:a3:20:81:dc:
a3:33:b1:40:e7:fa:e8:7f:f2:8a:aa:38:35:fd:f7:
fe:24:8d:81:a4:5d:0b:d4:e1:82:09:a9:f8:0b:02:
e3:02:40:90:3f:30:b6:69:73:79:75:30:37:c1:e4:
dd:fe:f0:eb:d0:fa:09:2c:0c:1a:7a:18:c7:93:7e:
9b:c0:c9:d6:e8:4f:73:4c:79:2c:81:33:e7:2a:05:
1b:f9:d2:69:5a:e2:7d:c9:e3:ea:70:e4:94:cf:c8:
d7:9a:96:f9:3e:eb:e8:23:60:4b:7c:36:ff:af:9e:
e0:d2:83:81:48:94:46:54:68:b4:23:13:8f:ac:31:
3e:c9:a8:f1:c3:e2:da:03:12:b7:d1:56:f9:18:0b:
65:7a:b7:e0:8b:36:d4:66:13:94:5c:03:4c:6c:6e:
77:b8:be:bc:ce:7a:25:9c:13:1f:63:07:d6:52:84:
3a:bd:a8:d7:85:b0:41:66:6a:12:03:d4:b0:ec:be:
78:19:2b:b4:ad:74:02:c6:de:28:95:c7:5b:6d:8b:
c7:7d:9f:25:77:97:62:27:99:6c:ef:61:9b:e9:fb:
0c:4d:b0:05:15:de:c2:1f:1e:d8:9b:f9:4d:46:26:
25:08:79:fc:28:ef:d1:a6:26:67:ca:a3:16:df:2a:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:26:74:98:F4:77:72:76:28:37:AD:1F:1C:99:F6:BE:21:E6:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BFC5FA7EFE11F09E2F5CAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.1.0/24
156.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:12:3c:09:35:22:cc:a1:e7:0b:32:06:fe:de:17:9b:31:64:
3d:b7:11:a8:0a:3f:5a:0a:e2:1b:5c:06:59:34:95:c8:07:f5:
0d:64:39:90:b2:2a:70:d2:14:19:69:95:d2:a1:45:5f:63:0c:
fc:f9:98:ba:11:8d:07:07:b1:10:89:eb:a3:8d:2c:0b:35:74:
28:01:e7:de:3d:6d:30:35:60:5f:ee:87:35:03:f0:7c:be:92:
fb:07:a7:c0:90:92:12:91:17:61:5c:72:70:32:17:aa:55:9a:
2e:c3:ab:bd:92:4f:3c:bb:3b:c1:68:35:1b:46:76:df:b7:70:
b3:d0:89:99:9f:0e:2b:7d:40:02:97:f8:d8:86:b6:4a:8d:74:
df:af:9a:18:7e:cd:60:f8:dd:52:84:79:f8:ab:9a:0c:7a:1f:
25:44:59:da:c3:36:d6:f5:e9:54:b1:72:fe:0f:19:21:a0:81:
8c:01:7d:04:aa:a8:7d:0c:b9:54:af:2a:c2:20:8d:0f:b9:8d:
e0:a2:86:cd:6b:81:f9:2c:b0:41:e5:05:e2:ce:66:8b:3f:74:
14:f1:fb:18:45:09:89:c2:68:f9:cb:33:4a:f2:bc:2e:f0:28:
62:3c:e9:97:68:e8:cc:66:65:03:d9:9a:51:72:49:d1:61:65:
4e:ea:91:c1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAW6QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIyMDIxODQ1WhcNMjUxMTAzMDIxODQ1WjAYMRYw
FAYDVQQDEw02OGE3ZDM4OS0xMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyvIlp9XpJjkVhKMggdyjM7FA5/rof/KKqjg1/ff+JI2BpF0L1OGCCan4
CwLjAkCQPzC2aXN5dTA3weTd/vDr0PoJLAwaehjHk36bwMnW6E9zTHksgTPnKgUb
+dJpWuJ9yePqcOSUz8jXmpb5PuvoI2BLfDb/r57g0oOBSJRGVGi0IxOPrDE+yajx
w+LaAxK30Vb5GAtlerfgizbUZhOUXANMbG53uL68znolnBMfYwfWUoQ6vajXhbBB
ZmoSA9Sw7L54GSu0rXQCxt4olcdbbYvHfZ8ld5diJ5ls72Gb6fsMTbAFFd7CHx7Y
m/lNRiYlCHn8KO/RpiZnyqMW3yodIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJo
JnSY9Hdydig3rR8cmfa+IebDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NkJGQzVGQTdFRkUxMUYwOUUyRjVDQUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOMBAwQCnOMYMA0GCSqGSIb3
DQEBCwUAA4IBAQCtEjwJNSLMoecLMgb+3hebMWQ9txGoCj9aCuIbXAZZNJXIB/UN
ZDmQsipw0hQZaZXSoUVfYwz8+Zi6EY0HB7EQieujjSwLNXQoAefePW0wNWBf7oc1
A/B8vpL7B6fAkJISkRdhXHJwMheqVZouw6u9kk88uzvBaDUbRnbft3Cz0ImZnw4r
fUACl/jYhrZKjXTfr5oYfs1g+N1ShHn4q5oMeh8lRFnawzbW9elUsXL+DxkhoIGM
AX0Eqqh9DLlUryrCII0PuY3goobNa4H5LLBB5QXizmaLP3QU8fsYRQmJwmj5yzNK
8rwu8ChiPOmXaOjMZmUD2ZpRcknRYWVO6pHB
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:48 2025 by rpki-client