Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F51373E7E9A11F08FE3FDA5DAE4EC9C.roa
File: 6F51373E7E9A11F08FE3FDA5DAE4EC9C.roa (raw, json)
Hash identifier: OtG2ZbjBNHjF+22oYQilS9zW/OG0xw3bZ8ragHdpLO8=
Subject key identifier: 35:AC:B2:3E:2F:BE:F4:D8:0D:81:F6:12:C1:A8:31:47:A7:F5:1D:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F51373E7E9A11F08FE3FDA5DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:23:41 +0000
ROA not before: Thu 21 Aug 2025 14:23:35 +0000
ROA not after: Wed 21 Aug 2030 14:23:35 +0000
asID: 17561
IP address blocks: 156.228.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93769 (0x16e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 14:23:35 2025 GMT
Not After : Aug 21 14:23:35 2030 GMT
Subject: CN=68a72bed-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:62:8e:c1:0a:a4:aa:fe:b9:1a:e2:0f:e2:
06:bf:27:e2:64:ca:cc:6c:39:40:c4:05:c2:48:05:
5d:be:d0:31:f4:75:a6:d5:b9:2a:e4:c7:de:34:27:
9e:0b:8c:d6:fa:a9:b5:ec:c4:ff:4d:0e:05:fc:03:
ad:5b:51:d3:9e:51:7d:23:56:6b:f1:b5:1f:9a:0b:
67:00:ad:4b:87:9f:5a:76:fe:68:36:a9:65:17:95:
21:1a:df:5a:19:ad:31:77:eb:19:47:a0:be:6e:de:
c0:eb:94:0f:72:84:3b:94:af:a8:82:56:16:a8:72:
2f:09:aa:3d:1f:d4:e1:e2:78:da:f5:a4:bc:b8:01:
12:9d:0a:f3:46:12:83:7b:c7:6d:21:49:93:7b:67:
d1:c6:59:f7:46:70:86:df:83:97:c0:b6:90:38:93:
26:bc:b6:02:2b:81:09:bb:ab:1d:ba:d0:91:fe:d7:
0f:56:bd:4b:d7:19:7c:28:0f:70:cb:dc:70:31:24:
10:6c:4b:c4:39:96:85:5e:5b:a5:d3:15:d3:bf:ee:
d6:98:7e:66:51:a1:37:9f:75:78:6b:fe:64:80:67:
6c:b6:84:e6:ba:45:e8:ee:5f:8b:cf:09:0b:3f:08:
23:75:44:61:5b:85:6b:a9:04:51:d0:78:cf:56:f3:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:B2:3E:2F:BE:F4:D8:0D:81:F6:12:C1:A8:31:47:A7:F5:1D:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F51373E7E9A11F08FE3FDA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:20:67:55:e9:45:23:06:7b:d5:d1:a4:43:45:20:50:f6:ee:
6a:c7:0b:03:dc:5e:36:5b:76:db:82:8b:97:49:54:c1:44:99:
19:a7:9a:68:e3:13:e1:39:f5:7a:5d:dc:f1:80:a7:4d:d1:0a:
ff:42:9a:4a:2f:2d:af:da:97:13:57:78:43:af:ea:42:c2:9c:
7e:83:cd:96:34:6c:78:65:31:53:80:b0:01:7b:17:c0:27:76:
d8:3c:14:57:32:3e:fc:ae:c9:a4:94:33:a5:1c:b1:dd:ba:e1:
c7:e1:ea:be:26:bb:af:8a:83:b4:e7:d9:a9:bd:76:d6:4e:f0:
30:b3:3e:39:31:2b:e0:c3:98:87:18:58:0e:7b:ec:9f:45:b5:
62:a5:7b:63:63:46:7d:55:77:a2:28:2b:da:b4:a2:a4:fe:b1:
65:96:51:6a:09:c3:06:b0:e0:91:3f:19:61:62:58:a4:c3:ee:
92:46:10:91:46:75:1e:7b:02:85:42:fb:bd:61:3b:ad:42:07:
fc:c4:57:40:3c:fe:76:90:c6:b1:a2:29:f3:4f:fd:66:02:1a:
37:e5:59:61:40:0a:ba:54:80:51:70:cc:24:e3:c6:a2:30:7d:
72:bf:49:5d:ae:22:6f:ee:27:a4:6c:7b:78:95:64:27:fb:24:
fc:64:be:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAW5JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIxMTQyMzM1WhcNMzAwODIxMTQyMzM1WjAYMRYw
FAYDVQQDEw02OGE3MmJlZC0xNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqsJijsEKpKr+uRriD+IGvyfiZMrMbDlAxAXCSAVdvtAx9HWm1bkq5Mfe
NCeeC4zW+qm17MT/TQ4F/AOtW1HTnlF9I1Zr8bUfmgtnAK1Lh59adv5oNqllF5Uh
Gt9aGa0xd+sZR6C+bt7A65QPcoQ7lK+oglYWqHIvCao9H9Th4nja9aS8uAESnQrz
RhKDe8dtIUmTe2fRxln3RnCG34OXwLaQOJMmvLYCK4EJu6sdutCR/tcPVr1L1xl8
KA9wy9xwMSQQbEvEOZaFXlul0xXTv+7WmH5mUaE3n3V4a/5kgGdstoTmukXo7l+L
zwkLPwgjdURhW4VrqQRR0HjPVvNHsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDWs
sj4vvvTYDYH2EsGoMUen9R2mMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RjUxMzczRTdFOUExMUYwOEZFM0ZEQTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOQIMA0GCSqGSIb3DQEBCwUA
A4IBAQB7IGdV6UUjBnvV0aRDRSBQ9u5qxwsD3F42W3bbgouXSVTBRJkZp5po4xPh
OfV6XdzxgKdN0Qr/QppKLy2v2pcTV3hDr+pCwpx+g82WNGx4ZTFTgLABexfAJ3bY
PBRXMj78rsmklDOlHLHduuHH4eq+JruvioO059mpvXbWTvAwsz45MSvgw5iHGFgO
e+yfRbVipXtjY0Z9VXeiKCvatKKk/rFlllFqCcMGsOCRPxlhYlikw+6SRhCRRnUe
ewKFQvu9YTutQgf8xFdAPP52kMaxoinzT/1mAho35VlhQAq6VIBRcMwk48aiMH1y
v0ldriJv7iekbHt4lWQn+yT8ZL7A
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:59:35 2025 by rpki-client