Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9789B4E544411F0A586E0E5DAE4EC9C.roa
File: A9789B4E544411F0A586E0E5DAE4EC9C.roa (raw, json)
Hash identifier: C4oN8UFuaL5vf/X+FiF8T6I2AeoiV82wJvwxLrs2IqY=
Subject key identifier: 1F:CA:0F:27:D3:5A:9A:60:4C:A5:BE:19:9E:A9:B5:6C:90:2E:95:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9789B4E544411F0A586E0E5DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 17:23:53 +0000
ROA not before: Sat 28 Jun 2025 17:23:48 +0000
ROA not after: Tue 26 Aug 2025 17:23:48 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89957 (0x15f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 17:23:48 2025 GMT
Not After : Aug 26 17:23:48 2025 GMT
Subject: CN=68602529-560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:e8:7a:5d:73:b1:0c:85:a3:3d:13:25:94:
47:e8:26:09:12:10:61:ef:3c:d1:fc:63:e6:ad:92:
e1:d1:51:7b:33:45:68:e8:26:5f:81:74:05:aa:d2:
ce:27:ff:0c:5a:c6:3b:a6:a7:d3:a6:5a:33:55:1d:
50:31:08:8e:58:64:03:0c:43:d2:39:8e:85:11:d8:
13:98:42:7d:8b:66:84:6b:7c:df:19:b6:b4:68:b3:
9b:23:30:eb:0a:2b:c4:9a:7d:5b:3f:a6:96:cb:01:
5a:4b:09:19:7d:21:5c:6a:8a:44:c2:a8:05:e8:a8:
e8:3d:07:10:a3:b9:df:4c:29:a1:bf:ce:44:86:f3:
f0:5f:6d:2f:d3:30:30:56:ac:2a:92:df:60:c6:60:
01:99:b1:19:02:b6:c8:d3:03:44:3b:ca:a6:d6:32:
0d:a7:ae:0e:6d:b5:7e:7f:e1:66:b1:14:ec:0b:46:
9b:fd:3b:b7:75:c5:30:dc:c1:ee:7a:87:2a:a1:1c:
7d:dd:d7:74:a4:1f:ac:f5:c3:3d:b8:6b:c2:7b:82:
d3:10:1c:44:6c:04:9a:bd:fe:a4:1d:30:45:3a:fd:
c1:5c:38:c2:33:17:dc:cf:0f:4e:bd:5b:f5:4a:a6:
36:69:34:7b:eb:45:8d:52:f0:29:f3:fb:ed:97:6f:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:0F:27:D3:5A:9A:60:4C:A5:BE:19:9E:A9:B5:6C:90:2E:95:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9789B4E544411F0A586E0E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.227.193.0/24
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b8:e8:8d:e7:ac:53:d9:7d:f2:23:1b:9d:2c:04:5a:88:6f:
27:d0:c0:cd:82:42:d3:82:bd:eb:35:75:9f:ca:e4:05:c2:eb:
a4:c8:bc:12:bc:1f:02:f3:f6:b0:48:9c:ac:0d:d9:c2:ca:10:
4a:6d:7c:35:68:30:c8:99:12:9d:40:6d:be:e2:7c:8c:19:23:
96:23:13:0a:32:3d:00:fe:95:dd:2c:9f:c4:05:cc:a9:1d:91:
11:2b:0f:bf:b9:d4:4e:f7:94:a7:b8:c8:40:9e:77:88:f7:6a:
4f:44:d4:bc:19:f9:2c:ac:d9:b7:98:d7:42:e6:5e:9e:0c:d2:
4e:ea:70:78:1f:48:5e:70:67:76:23:54:9b:cf:56:2e:53:97:
dd:ab:f5:10:cb:fc:b1:7e:c3:76:1d:07:29:5f:e2:87:c6:01:
57:f4:1e:c6:61:03:ed:40:4b:c6:3e:60:55:83:bf:9f:e5:ef:
27:1c:84:2e:75:a2:38:52:24:52:67:83:09:2b:d1:a9:36:0f:
4f:2b:67:af:ad:35:6a:36:e6:be:9e:4a:cd:a9:9a:42:26:f4:
5f:ff:e2:55:76:c1:d9:37:ef:b4:67:99:aa:e8:bd:a5:48:20:
a9:25:69:cf:e6:a4:d9:f3:e0:c6:02:88:7d:7f:1a:c4:e9:18:
75:ae:fc:36
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAV9lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI4MTcyMzQ4WhcNMjUwODI2MTcyMzQ4WjAYMRYw
FAYDVQQDEw02ODYwMjUyOS01NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnd3oel1zsQyFoz0TJZRH6CYJEhBh7zzR/GPmrZLh0VF7M0Vo6CZfgXQF
qtLOJ/8MWsY7pqfTplozVR1QMQiOWGQDDEPSOY6FEdgTmEJ9i2aEa3zfGba0aLOb
IzDrCivEmn1bP6aWywFaSwkZfSFcaopEwqgF6KjoPQcQo7nfTCmhv85EhvPwX20v
0zAwVqwqkt9gxmABmbEZArbI0wNEO8qm1jINp64ObbV+f+FmsRTsC0ab/Tu3dcUw
3MHueocqoRx93dd0pB+s9cM9uGvCe4LTEBxEbASavf6kHTBFOv3BXDjCMxfczw9O
vVv1SqY2aTR760WNUvAp8/vtl2/e9QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFB/K
DyfTWppgTKW+GZ6ptWyQLpUgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOTc4OUI0RTU0NDQxMUYwQTU4NkUwRTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnOF1AwQAnOPBAwQAnOUzMA0G
CSqGSIb3DQEBCwUAA4IBAQATuOiN56xT2X3yIxudLARaiG8n0MDNgkLTgr3rNXWf
yuQFwuukyLwSvB8C8/awSJysDdnCyhBKbXw1aDDImRKdQG2+4nyMGSOWIxMKMj0A
/pXdLJ/EBcypHZERKw+/udRO95SnuMhAnneI92pPRNS8GfksrNm3mNdC5l6eDNJO
6nB4H0hecGd2I1Sbz1YuU5fdq/UQy/yxfsN2HQcpX+KHxgFX9B7GYQPtQEvGPmBV
g7+f5e8nHIQudaI4UiRSZ4MJK9GpNg9PK2evrTVqNua+nkrNqZpCJvRf/+JVdsHZ
N++0Z5mq6L2lSCCpJWnP5qTZ8+DGAoh9fxrE6Rh1rvw2
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:08:36 2025 by rpki-client