Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA06A934504911F085C1EF83DAE4EC9C.roa
File: EA06A934504911F085C1EF83DAE4EC9C.roa (raw, json)
Hash identifier: ay10EJwguNezjDHW6apFXvAyIExii1apVUQEnfjIYlE=
Subject key identifier: 01:AF:A6:D6:33:DB:20:99:EC:B5:C9:CF:B6:63:62:80:F0:B2:40:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA06A934504911F085C1EF83DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:51:24 +0000
ROA not before: Mon 23 Jun 2025 15:51:20 +0000
ROA not after: Mon 04 Aug 2025 15:51:20 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89605 (0x15e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 15:51:20 2025 GMT
Not After : Aug 4 15:51:20 2025 GMT
Subject: CN=685977fc-f9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:42:89:39:39:a7:f9:d4:0d:ba:f4:a7:b8:
4b:9d:e8:94:90:41:5b:94:9d:d7:3c:13:e3:8f:a5:
42:21:fc:35:c9:63:b6:50:df:4d:d3:1a:87:59:cc:
c0:48:13:6c:5e:01:13:0f:c7:54:f9:d5:30:82:45:
7b:cd:bb:31:5e:77:98:54:de:ae:a4:df:53:3d:71:
e5:d3:fa:f7:14:0c:09:37:5b:43:09:af:37:50:fd:
a8:1f:7a:50:d3:af:37:a0:82:ab:52:a7:6e:38:8a:
71:a7:b2:54:27:c7:c2:25:ea:76:ed:02:92:03:3c:
3e:d0:db:9f:d0:ca:38:a4:93:2a:c9:d3:43:88:69:
fd:5b:9c:76:8c:7b:f5:80:55:b6:48:a1:8c:96:09:
92:da:45:15:8e:ac:0f:26:92:4e:40:95:8a:51:f6:
91:ee:8e:b6:88:33:76:a5:b7:2f:b5:4b:9d:b5:ee:
bb:4a:6a:f4:f3:f0:48:67:e2:f9:65:6c:22:4f:a5:
e7:99:84:77:0c:95:a4:af:b8:b6:26:41:92:f0:70:
58:7b:5e:b0:8c:54:cf:41:20:6d:b3:c3:cf:f6:de:
4c:ba:2f:ae:bd:b2:73:64:51:48:0b:05:c3:93:88:
23:23:46:a9:29:7d:f2:76:a5:25:66:ee:a5:83:4b:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:A6:D6:33:DB:20:99:EC:B5:C9:CF:B6:63:62:80:F0:B2:40:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA06A934504911F085C1EF83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:03:5a:cd:d6:52:63:9d:bf:4e:f4:b2:d2:9f:1c:4e:73:8f:
24:e3:e0:81:97:4f:63:a5:85:ae:46:5f:c6:a3:3d:c8:8e:11:
b7:a7:e3:04:2b:0a:1c:9a:66:07:ab:b7:25:fa:86:94:a1:71:
93:36:59:36:b3:f6:52:00:c1:d6:1d:80:c4:76:53:70:f4:29:
fc:88:41:38:3a:35:0b:96:1e:a4:62:5c:10:53:ad:62:fa:9c:
8b:e8:d3:a5:e0:54:c1:63:28:a1:e7:8c:4a:e9:fa:18:d8:ee:
72:57:87:d5:87:4b:48:b5:72:46:4b:52:36:d0:ce:c5:f2:4c:
07:e3:6d:47:f0:77:ae:b6:00:67:b6:66:9a:8c:2e:32:7d:1c:
ca:ed:b9:2a:ea:29:e2:9a:6a:dc:8a:ae:b3:c3:02:77:f5:49:
a4:5b:ad:c9:4e:78:e6:9b:28:a4:59:62:d9:41:52:0d:f9:6e:
c2:36:5c:11:49:a5:67:fe:1b:07:c0:2c:70:b8:2d:06:ca:b7:
6f:a1:69:ef:ee:39:23:89:0e:6d:73:7a:14:54:e9:8e:65:e1:
a1:51:a4:4a:15:22:2d:47:b3:d4:e6:de:ee:a1:15:6b:b4:81:
aa:f9:cc:4e:83:62:37:f0:ca:23:8e:7e:31:4f:ae:e9:65:bb:
de:1c:d6:ad
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV4FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIzMTU1MTIwWhcNMjUwODA0MTU1MTIwWjAYMRYw
FAYDVQQDEw02ODU5NzdmYy1mOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0CRCiTk5p/nUDbr0p7hLneiUkEFblJ3XPBPjj6VCIfw1yWO2UN9N0xqH
WczASBNsXgETD8dU+dUwgkV7zbsxXneYVN6upN9TPXHl0/r3FAwJN1tDCa83UP2o
H3pQ0683oIKrUqduOIpxp7JUJ8fCJep27QKSAzw+0Nuf0Mo4pJMqydNDiGn9W5x2
jHv1gFW2SKGMlgmS2kUVjqwPJpJOQJWKUfaR7o62iDN2pbcvtUudte67Smr08/BI
Z+L5ZWwiT6XnmYR3DJWkr7i2JkGS8HBYe16wjFTPQSBts8PP9t5Mui+uvbJzZFFI
CwXDk4gjI0apKX3ydqUlZu6lg0up8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAGv
ptYz2yCZ7LXJz7ZjYoDwskCvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQTA2QTkzNDUwNDkxMUYwODVDMUVGODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQCpA1rN1lJjnb9O9LLSnxxOc48k4+CBl09jpYWuRl/Goz3IjhG3p+MEKwoc
mmYHq7cl+oaUoXGTNlk2s/ZSAMHWHYDEdlNw9Cn8iEE4OjULlh6kYlwQU61i+pyL
6NOl4FTBYyih54xK6foY2O5yV4fVh0tItXJGS1I20M7F8kwH421H8HeutgBntmaa
jC4yfRzK7bkq6inimmrciq6zwwJ39UmkW63JTnjmmyikWWLZQVIN+W7CNlwRSaVn
/hsHwCxwuC0GyrdvoWnv7jkjiQ5tc3oUVOmOZeGhUaRKFSItR7PU5t7uoRVrtIGq
+cxOg2I38Mojjn4xT67pZbveHNat
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:37:08 2025 by rpki-client