Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7AE4FA775011F0A513948BDAE4EC9C.roa
File: 5A7AE4FA775011F0A513948BDAE4EC9C.roa (raw, json)
Hash identifier: /6A86Mg8BQ6n/8PNWx1wehugcDqZ0/DNuGkPRgN61LM=
Subject key identifier: CC:75:B0:BF:72:4E:19:51:1C:5F:29:52:E6:19:0E:12:79:18:76:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7AE4FA775011F0A513948BDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 07:45:45 +0000
ROA not before: Tue 12 Aug 2025 07:45:40 +0000
ROA not after: Wed 05 Nov 2025 07:45:40 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92802 (0x16a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 07:45:40 2025 GMT
Not After : Nov 5 07:45:40 2025 GMT
Subject: CN=689af129-e089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:07:61:b0:b3:b9:8e:e9:51:ed:95:06:28:
00:5c:3d:e6:02:f0:30:a1:66:0f:d6:b0:eb:cc:20:
7d:89:63:0e:6f:02:b8:13:7a:2c:08:95:ac:01:93:
2a:30:9b:d2:19:47:d0:16:6c:da:bc:1c:e3:bf:4b:
fd:2e:cd:65:bf:ef:c6:3e:31:13:f6:c7:9a:6f:25:
f3:bd:eb:58:f8:39:80:18:64:1f:8c:87:bc:73:69:
e5:2a:cb:1f:f6:b5:98:2f:fd:78:c8:2b:0b:c0:19:
d1:0d:50:dc:ec:ad:e6:33:18:50:68:d5:7a:96:86:
95:78:98:6d:e6:0c:a8:82:df:4e:97:4b:75:3d:8b:
4c:29:49:07:d0:ae:66:da:50:2d:80:c4:e9:45:ad:
08:7a:f3:a4:49:b3:43:e2:ac:8f:09:2c:ed:db:71:
d6:3b:a4:22:ec:34:ef:d7:96:1c:2c:a9:a8:b6:39:
d6:a4:9d:bc:d3:8a:ab:4e:36:3a:0a:d4:44:05:f0:
65:c1:67:f9:9d:f3:81:ff:71:f7:8f:b5:3c:fb:ae:
29:33:0e:0a:47:e4:4e:3b:79:9b:9c:cc:b5:d3:4a:
5a:a6:57:2c:48:36:22:8c:46:25:26:d8:4e:41:fe:
3e:47:b4:be:2c:3f:10:36:21:e6:c1:3e:f8:94:3e:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:B0:BF:72:4E:19:51:1C:5F:29:52:E6:19:0E:12:79:18:76:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7AE4FA775011F0A513948BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4e:19:20:ed:26:73:11:b2:04:0e:1f:ed:cc:d6:88:b0:a6:
80:14:1e:8d:3d:b3:31:3c:f1:09:09:9f:5f:93:17:93:65:1c:
37:06:ef:aa:f5:d0:b1:05:73:2b:68:0b:3f:0c:ff:c1:72:a6:
f1:bd:7e:fe:53:f9:48:43:15:7c:f3:84:4f:d4:9d:46:93:29:
98:b0:58:f0:95:ed:32:f3:a6:37:ff:64:d3:71:85:ac:05:92:
8b:6f:11:38:5d:3c:d2:45:d9:93:67:ae:dc:1e:3d:97:15:77:
d3:83:a0:4a:5b:4f:e0:8f:24:2a:d8:ae:59:b5:f6:44:02:b0:
b3:6e:db:00:ba:4e:da:6c:54:2e:6e:86:ea:07:48:3d:e1:c3:
bf:08:e9:ff:b4:f1:72:fa:52:47:c5:47:69:67:82:fd:02:95:
cb:3c:66:db:3a:1e:e8:0c:b6:ed:98:be:bc:58:34:5d:ec:94:
d0:87:da:03:49:a7:a5:cd:54:e9:2c:0e:78:5f:37:e7:ef:9b:
ac:0e:b8:f4:b9:ca:c6:ad:4e:3a:50:8e:67:0e:a6:43:fb:e9:
31:af:21:bb:ab:e4:23:00:ac:14:cd:00:df:1b:df:25:62:a4:
4f:89:ab:2b:92:9b:35:39:9f:c1:7d:99:d6:b3:26:30:b5:06:
77:f3:de:1a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWqCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODEyMDc0NTQwWhcNMjUxMTA1MDc0NTQwWjAYMRYw
FAYDVQQDEw02ODlhZjEyOS1lMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqoHYbCzuY7pUe2VBigAXD3mAvAwoWYP1rDrzCB9iWMObwK4E3osCJWs
AZMqMJvSGUfQFmzavBzjv0v9Ls1lv+/GPjET9seabyXzvetY+DmAGGQfjIe8c2nl
Kssf9rWYL/14yCsLwBnRDVDc7K3mMxhQaNV6loaVeJht5gyogt9Ol0t1PYtMKUkH
0K5m2lAtgMTpRa0IevOkSbND4qyPCSzt23HWO6Qi7DTv15YcLKmotjnWpJ2804qr
TjY6CtREBfBlwWf5nfOB/3H3j7U8+64pMw4KR+ROO3mbnMy100paplcsSDYijEYl
JthOQf4+R7S+LD8QNiHmwT74lD63xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx1
sL9yThlRHF8pUuYZDhJ5GHbRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QTdBRTRGQTc3NTAxMUYwQTUxMzk0OEJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOMAAwQAnOxMMA0GCSqGSIb3
DQEBCwUAA4IBAQAZThkg7SZzEbIEDh/tzNaIsKaAFB6NPbMxPPEJCZ9fkxeTZRw3
Bu+q9dCxBXMraAs/DP/BcqbxvX7+U/lIQxV884RP1J1GkymYsFjwle0y86Y3/2TT
cYWsBZKLbxE4XTzSRdmTZ67cHj2XFXfTg6BKW0/gjyQq2K5ZtfZEArCzbtsAuk7a
bFQubobqB0g94cO/COn/tPFy+lJHxUdpZ4L9ApXLPGbbOh7oDLbtmL68WDRd7JTQ
h9oDSaelzVTpLA54Xzfn75usDrj0ucrGrU46UI5nDqZD++kxryG7q+QjAKwUzQDf
G98lYqRPiasrkps1OZ/BfZnWsyYwtQZ3894a
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:14:19 2025 by rpki-client