Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A156BAACAD9211F0B0AB38ECDAE4EC9C.roa
File: A156BAACAD9211F0B0AB38ECDAE4EC9C.roa (raw, json)
Hash identifier: vxSikDXH8bBzjLAdkhRKNkFFZbN+fYzeJwrM1c4BOM4=
Subject key identifier: 1A:AE:46:8B:AB:5A:85:3E:3C:E1:E5:82:80:DE:5A:8F:9B:DE:28:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A156BAACAD9211F0B0AB38ECDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:56:13 +0000
ROA not before: Mon 20 Oct 2025 08:56:09 +0000
ROA not after: Wed 26 Nov 2025 08:56:09 +0000
asID: 140869
IP address blocks: 156.225.90.0/24 maxlen: 24
156.225.91.0/24 maxlen: 24
156.225.92.0/24 maxlen: 24
156.225.93.0/24 maxlen: 24
156.225.94.0/24 maxlen: 24
156.225.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98713 (0x18199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 08:56:09 2025 GMT
Not After : Nov 26 08:56:09 2025 GMT
Subject: CN=68f5f92d-ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:01:f9:b8:f8:56:85:96:f2:79:1e:14:8a:
98:74:20:bc:72:00:30:44:4a:31:ca:18:12:4d:64:
8a:c0:ac:ea:1a:cd:4c:53:65:0f:13:f7:46:e6:fa:
6c:ed:ef:5e:78:d3:e8:9b:e1:7c:48:69:a0:25:79:
3c:c9:30:37:ad:8a:fb:56:1d:9a:94:0a:e5:a1:af:
c3:d3:92:71:0d:46:dc:7d:27:f6:c9:27:d5:88:6a:
69:0e:4b:52:a0:99:85:2c:ce:2f:91:8f:79:fe:32:
64:11:d7:05:36:3c:d8:40:82:7c:44:05:c2:22:5a:
8b:9a:29:74:c3:76:1b:cf:91:1b:ba:7f:c8:43:52:
27:ae:1c:7b:a8:4a:ff:e9:67:cb:53:98:0b:e7:07:
86:a4:ca:2a:f7:ce:ec:53:ef:2e:f2:01:eb:03:6c:
e4:d6:ef:d0:ac:3b:98:4c:7f:e1:fa:ad:58:c2:61:
a5:59:b3:4f:87:d3:8b:e3:91:84:a1:fa:e8:f2:c2:
c3:6a:36:b2:9a:5e:be:73:ec:f5:a8:fa:39:fa:27:
64:b4:2f:b1:d0:c4:a3:79:18:d6:b7:93:41:f1:2b:
9c:c8:c7:41:dd:ae:4a:b5:8a:65:f1:97:3d:9f:4d:
dc:18:a1:33:cf:84:24:5e:61:80:32:bd:c1:40:50:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:46:8B:AB:5A:85:3E:3C:E1:E5:82:80:DE:5A:8F:9B:DE:28:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A156BAACAD9211F0B0AB38ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.90.0-156.225.95.255
Signature Algorithm: sha256WithRSAEncryption
27:89:ea:9c:fa:5a:8a:f1:d3:7e:77:2e:0e:05:a3:26:a0:87:
f0:77:a5:2b:c8:82:26:a9:75:b1:ea:3c:35:7f:79:f8:22:34:
c8:f1:19:2d:c3:2b:42:4b:90:26:7b:07:a7:a3:75:78:d5:50:
24:81:07:94:b3:55:31:ed:a4:f8:e3:6e:68:89:ef:5c:b9:5d:
80:76:53:70:2a:db:28:0a:02:eb:0d:06:74:e1:64:4b:87:36:
03:af:2e:c0:72:e0:fa:7c:b5:a2:6c:e9:87:b7:25:b4:a6:c7:
b4:c9:0f:56:18:31:72:25:c2:ee:4a:a2:df:d0:90:56:a1:63:
f5:d4:34:90:5f:28:02:85:35:2e:1c:43:15:00:49:5a:7f:60:
f3:79:f9:e8:d9:9f:80:0b:35:32:cf:5c:f0:a1:5e:8c:5d:65:
e5:70:ee:af:fb:23:69:90:66:02:25:ed:8d:a3:96:62:6e:e0:
7a:28:a8:59:6d:31:ba:dc:61:4f:38:0a:63:cb:e9:0f:dc:f9:
86:d1:61:41:e5:4f:7f:87:ec:67:77:15:ea:e0:a8:7e:06:cd:
ab:d9:2f:a5:61:32:21:09:5e:2c:25:23:ac:a5:8d:59:da:fe:
a8:a8:eb:2c:a3:de:a3:c3:35:7b:5b:fa:44:cc:0b:49:60:78:
fb:90:d6:f4
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYGZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIwMDg1NjA5WhcNMjUxMTI2MDg1NjA5WjAYMRYw
FAYDVQQDEw02OGY1ZjkyZC1hYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LUB+bj4VoWW8nkeFIqYdCC8cgAwREoxyhgSTWSKwKzqGs1MU2UPE/dG
5vps7e9eeNPom+F8SGmgJXk8yTA3rYr7Vh2alArloa/D05JxDUbcfSf2ySfViGpp
DktSoJmFLM4vkY95/jJkEdcFNjzYQIJ8RAXCIlqLmil0w3Ybz5Ebun/IQ1Inrhx7
qEr/6WfLU5gL5weGpMoq987sU+8u8gHrA2zk1u/QrDuYTH/h+q1YwmGlWbNPh9OL
45GEofro8sLDajayml6+c+z1qPo5+idktC+x0MSjeRjWt5NB8SucyMdB3a5KtYpl
8Zc9n03cGKEzz4QkXmGAMr3BQFAKewIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBqu
RourWoU+POHlgoDeWo+b3ihXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMTU2QkFBQ0FEOTIxMUYwQjBBQjM4RUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc4VoDBAWc4UAwDQYJKoZI
hvcNAQELBQADggEBACeJ6pz6Worx0353Lg4Foyagh/B3pSvIgiapdbHqPDV/efgi
NMjxGS3DK0JLkCZ7B6ejdXjVUCSBB5SzVTHtpPjjbmiJ71y5XYB2U3Aq2ygKAusN
BnThZEuHNgOvLsBy4Pp8taJs6Ye3JbSmx7TJD1YYMXIlwu5Kot/QkFahY/XUNJBf
KAKFNS4cQxUASVp/YPN5+ejZn4ALNTLPXPChXoxdZeVw7q/7I2mQZgIl7Y2jlmJu
4HooqFltMbrcYU84CmPL6Q/c+YbRYUHlT3+H7Gd3FergqH4GzavZL6VhMiEJXiwl
I6yljVna/qio6yyj3qPDNXtb+kTMC0lgePuQ1vQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:31:34 2025 by rpki-client