Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82718FF86D2E11F0869D0A86DAE4EC9C.roa
File: 82718FF86D2E11F0869D0A86DAE4EC9C.roa (raw, json)
Hash identifier: kgRJmzWTCpJnrhfjLh1h11VJ3gAb6dgZt7hVqQ18Ppc=
Subject key identifier: 5A:8B:83:D5:D8:B6:08:4C:20:9E:31:5B:3A:9B:D9:DA:98:DE:E6:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016850
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82718FF86D2E11F0869D0A86DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 10:18:18 +0000
ROA not before: Wed 30 Jul 2025 10:18:13 +0000
ROA not after: Thu 04 Sep 2025 10:18:13 +0000
asID: 214590
IP address blocks: 156.225.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92240 (0x16850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 10:18:13 2025 GMT
Not After : Sep 4 10:18:13 2025 GMT
Subject: CN=6889f16a-178a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:c8:dc:3f:d9:12:6a:3c:fd:01:a9:15:48:
38:38:27:39:65:98:1a:c1:2f:31:6a:65:ab:be:fd:
04:82:b8:27:12:42:85:54:59:ee:79:da:bc:6d:f7:
06:85:4e:da:2a:3b:8f:02:9c:e9:e4:56:41:8d:0f:
c8:58:07:ca:66:e6:3b:df:de:aa:07:59:ff:ee:15:
d9:a4:f8:d0:3b:be:37:fb:83:2c:91:5c:a6:79:04:
5d:43:a5:1b:40:9a:9e:71:04:c5:1d:45:82:35:b2:
88:0d:66:52:cf:98:b2:10:d9:5c:06:d4:91:12:26:
16:01:02:ea:d5:6e:c2:2b:bd:3b:f5:26:da:37:3e:
9a:fc:8a:c3:87:ec:fd:50:6e:7f:6a:ff:76:35:50:
4d:9f:53:ec:3c:3b:e3:06:aa:a6:fe:23:e4:80:9f:
ca:f8:a8:f5:c7:08:49:97:b1:14:df:e0:a1:20:ad:
20:90:bc:8b:9b:57:b5:65:bb:e1:57:58:38:04:07:
8c:63:ff:fd:74:fb:6f:98:20:3a:66:3d:84:0e:c1:
7a:56:a0:4c:38:9d:43:3a:52:07:dd:e2:90:ca:3b:
e1:88:e9:94:9d:0c:db:f4:58:1b:78:55:04:66:07:
c4:3f:a0:d3:3c:b9:35:cd:42:1a:18:b5:fa:eb:4a:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:83:D5:D8:B6:08:4C:20:9E:31:5B:3A:9B:D9:DA:98:DE:E6:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82718FF86D2E11F0869D0A86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6e:f2:cc:ba:10:ea:4c:73:1f:37:59:17:f3:71:24:4e:58:
a4:0a:d8:f3:13:76:e0:6c:af:8d:63:19:d2:21:11:ac:36:e6:
b4:d3:bd:cd:77:0f:5e:64:87:f9:e4:73:8d:e7:32:51:f9:72:
68:7b:ed:c7:d4:39:8c:ca:36:30:b7:13:31:79:78:76:df:02:
a0:1e:c3:80:14:61:84:3d:ef:f6:5b:8a:be:7b:d2:95:7d:ab:
a5:09:c4:fb:3c:8d:9f:fd:71:80:50:a3:d1:0b:83:7e:b3:50:
f4:21:b3:a5:3a:d8:f5:dd:f8:a6:eb:ce:10:cb:0f:fb:f5:9c:
e5:83:e3:24:9e:d9:50:a9:88:04:19:a8:d7:3c:22:43:8d:9e:
e1:2f:04:25:b4:25:3c:4a:bf:0b:05:2c:97:08:27:c7:55:31:
83:e7:fb:40:48:97:8f:69:66:5e:78:67:90:a5:25:e3:f9:85:
79:22:92:09:d7:9a:1f:f2:0d:b3:c5:82:04:b1:6d:ae:a6:90:
e4:d0:81:51:e3:7a:6f:4d:57:e6:af:c2:4a:bf:00:0b:72:a6:
05:62:42:bb:ab:18:e4:41:bb:93:cb:40:ee:f4:28:03:0f:bb:
84:dc:9f:95:74:7a:48:4b:a8:4b:fd:26:05:f5:cd:bd:0d:3d:
af:99:a7:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWhQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzMwMTAxODEzWhcNMjUwOTA0MTAxODEzWjAYMRYw
FAYDVQQDEw02ODg5ZjE2YS0xNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAouzI3D/ZEmo8/QGpFUg4OCc5ZZgawS8xamWrvv0EgrgnEkKFVFnuedq8
bfcGhU7aKjuPApzp5FZBjQ/IWAfKZuY7396qB1n/7hXZpPjQO743+4MskVymeQRd
Q6UbQJqecQTFHUWCNbKIDWZSz5iyENlcBtSREiYWAQLq1W7CK7079SbaNz6a/IrD
h+z9UG5/av92NVBNn1PsPDvjBqqm/iPkgJ/K+Kj1xwhJl7EU3+ChIK0gkLyLm1e1
ZbvhV1g4BAeMY//9dPtvmCA6Zj2EDsF6VqBMOJ1DOlIH3eKQyjvhiOmUnQzb9Fgb
eFUEZgfEP6DTPLk1zUIaGLX660oc6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFqL
g9XYtghMIJ4xWzqb2dqY3ubnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjcxOEZGODZEMkUxMUYwODY5RDBBODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFJMA0GCSqGSIb3DQEBCwUA
A4IBAQA3bvLMuhDqTHMfN1kX83EkTlikCtjzE3bgbK+NYxnSIRGsNua0073Ndw9e
ZIf55HON5zJR+XJoe+3H1DmMyjYwtxMxeXh23wKgHsOAFGGEPe/2W4q+e9KVfaul
CcT7PI2f/XGAUKPRC4N+s1D0IbOlOtj13fim684Qyw/79Zzlg+MkntlQqYgEGajX
PCJDjZ7hLwQltCU8Sr8LBSyXCCfHVTGD5/tASJePaWZeeGeQpSXj+YV5IpIJ15of
8g2zxYIEsW2uppDk0IFR43pvTVfmr8JKvwALcqYFYkK7qxjkQbuTy0Du9CgDD7uE
3J+VdHpIS6hL/SYF9c29DT2vmaft
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:33 2025 by rpki-client