Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD6696754611F0835CF5B8DAE4EC9C.roa
File: 8DBD6696754611F0835CF5B8DAE4EC9C.roa (raw, json)
Hash identifier: EaMzwnuZG2rHvKjJcHYLdkeF1gA7rBxzEmx6GbugXA4=
Subject key identifier: DA:7C:C9:38:B0:82:74:27:4D:D5:3E:8E:98:35:FE:F5:ED:CD:FC:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD6696754611F0835CF5B8DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 17:30:34 +0000
ROA not before: Sat 09 Aug 2025 17:30:29 +0000
ROA not after: Sun 13 Sep 2026 17:30:29 +0000
asID: 137263
IP address blocks: 156.236.16.0/24 maxlen: 24
156.245.2.0/24 maxlen: 24
156.253.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92684 (0x16a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 17:30:29 2025 GMT
Not After : Sep 13 17:30:29 2026 GMT
Subject: CN=689785ba-faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:b9:7e:a2:eb:d5:0a:ed:a6:97:f2:dc:48:
c6:b5:34:94:7c:56:48:9f:3e:a5:a5:4f:2a:33:d4:
e7:58:9e:af:90:35:55:8c:4e:bd:d0:bc:9c:4a:2f:
2b:8f:9f:c6:83:bc:59:2d:7f:7c:2d:16:a6:cc:ee:
4d:4f:b0:32:5b:2e:bb:9a:73:96:0e:70:24:b0:ec:
e4:ae:d3:25:72:15:af:ed:9b:da:78:48:a8:92:d2:
7c:5e:e9:56:4d:00:40:6a:86:ff:01:15:90:92:d6:
25:ca:6a:99:b2:b6:15:6b:76:8b:aa:51:05:88:db:
f1:cc:27:ae:f4:d8:63:6f:66:2f:47:c6:49:be:a5:
9a:08:42:82:bf:d7:c9:22:a6:bd:f1:ac:80:66:56:
ab:53:3b:13:5b:fd:62:89:04:7e:4e:26:ff:e9:83:
d3:12:bd:5b:ed:a6:c1:de:33:9e:f3:be:89:98:ee:
ff:69:5e:0c:33:3f:c9:be:0f:f1:4b:fe:1b:53:62:
fd:ce:7a:bb:ac:7f:ba:61:40:86:7d:a2:bd:64:bb:
b3:49:da:02:ae:51:bc:fb:ee:e2:e3:76:35:de:15:
5b:0c:23:ec:2d:d8:f1:5a:67:a6:9e:de:b8:62:88:
c2:06:5e:22:3f:55:b5:62:d6:91:6c:d6:2e:f2:7e:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:C9:38:B0:82:74:27:4D:D5:3E:8E:98:35:FE:F5:ED:CD:FC:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD6696754611F0835CF5B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.16.0/24
156.245.2.0/24
156.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fb:6d:e2:cb:4c:71:02:e9:9b:dc:f6:9b:7b:cb:99:89:0e:
a6:ac:e2:a1:11:fc:9c:9e:dd:83:ec:1a:c4:b6:b9:e9:a5:82:
db:47:16:b6:05:e3:fd:3d:e2:5f:9d:7c:5f:9f:b6:d3:d3:71:
39:2a:9c:d4:69:16:80:4a:64:ec:ed:7e:09:21:50:91:20:59:
6d:3f:2e:5b:e5:97:05:a5:ba:34:c0:00:51:73:a6:e7:0c:96:
97:a1:22:5e:99:9b:d9:8f:a2:f6:59:81:93:d5:9a:fb:c1:f3:
e3:5a:68:2e:33:83:2c:f8:43:f8:f8:49:cc:b2:2f:8f:3c:44:
ad:9f:60:2d:e6:f0:f7:47:2b:e9:69:65:a8:03:95:ba:c2:dd:
67:c0:20:7c:1f:fb:49:be:be:f4:9b:68:e2:a3:f2:93:94:b1:
6c:56:15:1f:8b:98:cb:65:3c:1d:85:f0:7f:fe:e2:78:02:26:
7c:bd:67:38:f0:9a:6a:04:0e:58:8e:8f:5b:ed:fa:aa:88:68:
2a:c3:b6:99:89:55:20:9a:4b:56:ab:1b:6d:2e:b6:d5:93:85:
09:0c:c4:e0:fe:a4:38:c8:68:73:a7:6e:69:aa:bf:59:1a:9e:
60:d0:14:68:f8:d8:b4:6e:f9:19:dd:29:98:d7:a2:fc:f4:77:
2e:f7:c7:a2
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAWoMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA5MTczMDI5WhcNMjYwOTEzMTczMDI5WjAYMRYw
FAYDVQQDEw02ODk3ODViYS1mYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwm5fqLr1Qrtppfy3EjGtTSUfFZInz6lpU8qM9TnWJ6vkDVVjE690Lyc
Si8rj5/Gg7xZLX98LRamzO5NT7AyWy67mnOWDnAksOzkrtMlchWv7ZvaeEioktJ8
XulWTQBAaob/ARWQktYlymqZsrYVa3aLqlEFiNvxzCeu9Nhjb2YvR8ZJvqWaCEKC
v9fJIqa98ayAZlarUzsTW/1iiQR+Tib/6YPTEr1b7abB3jOe876JmO7/aV4MMz/J
vg/xS/4bU2L9znq7rH+6YUCGfaK9ZLuzSdoCrlG8++7i43Y13hVbDCPsLdjxWmem
nt64YojCBl4iP1W1YtaRbNYu8n6GywIDAQABo4ICrjCCAqowHQYDVR0OBBYEFNp8
yTiwgnQnTdU+jpg1/vXtzfzzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84REJENjY5Njc1NDYxMUYwODM1Q0Y1QjhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnOwQAwQAnPUCAwQAnP0EMA0G
CSqGSIb3DQEBCwUAA4IBAQBh+23iy0xxAumb3Pabe8uZiQ6mrOKhEfycnt2D7BrE
trnppYLbRxa2BeP9PeJfnXxfn7bT03E5KpzUaRaASmTs7X4JIVCRIFltPy5b5ZcF
pbo0wABRc6bnDJaXoSJemZvZj6L2WYGT1Zr7wfPjWmguM4Ms+EP4+EnMsi+PPESt
n2At5vD3RyvpaWWoA5W6wt1nwCB8H/tJvr70m2jio/KTlLFsVhUfi5jLZTwdhfB/
/uJ4AiZ8vWc48JpqBA5Yjo9b7fqqiGgqw7aZiVUgmktWqxttLrbVk4UJDMTg/qQ4
yGhzp25pqr9ZGp5g0BRo+Ni0bvkZ3SmY16L89Hcu98ei
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:35:56 2025 by rpki-client