Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A7388C99F311F0B6022A84DAE4EC9C.roa
File: E6A7388C99F311F0B6022A84DAE4EC9C.roa (raw, json)
Hash identifier: 6nfQsKxBJLKNKNI09Iztn/E0+Fb5iEUILSVLaPCyd4g=
Subject key identifier: F1:82:9F:63:56:41:3D:28:8B:A0:D9:2D:53:B9:AD:54:17:88:9B:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A7388C99F311F0B6022A84DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 09:42:08 +0000
ROA not before: Thu 25 Sep 2025 09:42:03 +0000
ROA not after: Wed 26 Nov 2025 09:42:03 +0000
asID: 63139
IP address blocks: 156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97608 (0x17d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 09:42:03 2025 GMT
Not After : Nov 26 09:42:03 2025 GMT
Subject: CN=68d50e70-ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:e3:ff:45:a4:c0:73:d0:82:2e:7f:95:e9:
a8:31:f2:4e:3e:ed:b8:bd:e7:74:1e:35:80:c1:88:
c9:4d:4e:7b:82:f9:ab:92:1b:86:da:52:9e:09:a3:
42:d5:a0:65:6e:f5:31:0e:2d:a2:cf:39:bf:69:c6:
af:2d:20:9d:6b:ba:0a:c4:8f:4d:20:c4:46:9e:d9:
ff:43:fe:3b:9a:7e:fb:fa:f8:7f:cd:c5:fa:40:9e:
11:ec:93:0f:fb:2e:a2:0d:f5:0d:a9:64:dc:50:51:
14:5b:d8:ed:71:60:ff:5c:13:7e:63:1d:08:85:7e:
73:55:ce:62:7c:c2:0f:15:0a:96:87:20:8a:d5:1d:
55:ef:81:11:65:7e:5f:f3:e6:2e:41:94:94:73:47:
79:2c:05:98:97:8c:59:f2:1a:7d:75:a7:18:5b:49:
22:02:42:e3:58:98:b1:8c:09:16:4c:91:76:46:12:
59:ed:a8:fb:09:64:e8:01:bc:71:7d:1d:e4:a8:96:
2e:6d:fe:4a:f1:6a:02:43:13:fc:3e:70:7e:22:2a:
01:54:10:b8:78:ab:0d:57:52:dd:06:c3:05:fb:19:
18:c4:64:8c:83:ae:93:3a:20:0d:ad:e0:a6:46:55:
d7:98:f4:aa:6b:55:94:af:f3:c4:a4:da:8d:06:be:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:9F:63:56:41:3D:28:8B:A0:D9:2D:53:B9:AD:54:17:88:9B:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A7388C99F311F0B6022A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.124.0/22
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8a:ac:5b:ba:c2:55:00:35:3c:56:2a:e0:18:a8:d3:bd:c1:
f5:5b:a2:14:40:cb:bb:c6:4d:1b:6e:c3:6f:7c:ff:6b:d3:6a:
6f:54:7f:2f:bb:40:01:86:65:a4:55:64:f2:4e:f4:05:2b:b7:
6e:7b:51:67:da:24:af:7e:99:5d:83:dd:62:cc:b1:2d:99:53:
fc:82:76:2b:0b:b0:e5:68:77:f6:1b:21:ba:3c:c1:54:19:2d:
37:b1:3b:6a:55:4f:40:fb:8f:91:a7:fc:43:6d:5a:22:78:e8:
08:33:ac:94:90:44:1a:cf:34:0e:c3:54:a3:5b:e8:0e:1a:ef:
2a:f1:6d:9f:84:6f:ef:3d:70:b6:52:cd:5a:32:76:33:3c:30:
91:7b:29:71:0a:92:0c:0c:6c:e9:51:4f:22:ff:39:1a:8b:a8:
60:52:dc:36:60:60:94:b9:64:df:59:4b:32:fe:7f:d8:e2:88:
68:52:32:1c:22:ac:28:f6:61:a9:e4:4c:1b:30:36:8d:91:85:
24:d5:ac:dd:5b:ae:39:f1:49:e9:0d:5d:68:34:bf:80:0c:29:
fd:b1:c0:e6:67:27:40:21:52:f6:79:3e:9c:90:82:cf:2d:92:
4f:93:af:c9:28:60:e2:fe:43:44:93:27:70:4c:cc:16:75:17:
dd:94:2a:aa
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAX1IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI1MDk0MjAzWhcNMjUxMTI2MDk0MjAzWjAYMRYw
FAYDVQQDEw02OGQ1MGU3MC1lYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1azj/0WkwHPQgi5/lemoMfJOPu24ved0HjWAwYjJTU57gvmrkhuG2lKe
CaNC1aBlbvUxDi2izzm/acavLSCda7oKxI9NIMRGntn/Q/47mn77+vh/zcX6QJ4R
7JMP+y6iDfUNqWTcUFEUW9jtcWD/XBN+Yx0IhX5zVc5ifMIPFQqWhyCK1R1V74ER
ZX5f8+YuQZSUc0d5LAWYl4xZ8hp9dacYW0kiAkLjWJixjAkWTJF2RhJZ7aj7CWTo
AbxxfR3kqJYubf5K8WoCQxP8PnB+IioBVBC4eKsNV1LdBsMF+xkYxGSMg66TOiAN
reCmRlXXmPSqa1WUr/PEpNqNBr6qqQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPGC
n2NWQT0oi6DZLVO5rVQXiJvEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNkE3Mzg4Qzk5RjMxMUYwQjYwMjJBODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnOF8AwQAnOMJAwQAnOMPAwQA
nOUuMA0GCSqGSIb3DQEBCwUAA4IBAQCPiqxbusJVADU8VirgGKjTvcH1W6IUQMu7
xk0bbsNvfP9r02pvVH8vu0ABhmWkVWTyTvQFK7due1Fn2iSvfpldg91izLEtmVP8
gnYrC7DlaHf2GyG6PMFUGS03sTtqVU9A+4+Rp/xDbVoieOgIM6yUkEQazzQOw1Sj
W+gOGu8q8W2fhG/vPXC2Us1aMnYzPDCReylxCpIMDGzpUU8i/zkai6hgUtw2YGCU
uWTfWUsy/n/Y4ohoUjIcIqwo9mGp5EwbMDaNkYUk1azdW6458UnpDV1oNL+ADCn9
scDmZydAIVL2eT6ckILPLZJPk6/JKGDi/kNEkydwTMwWdRfdlCqq
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:06:56 2025 by rpki-client