Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495E95EC5AC511F08C23EBAEDAE4EC9C.roa
File: 495E95EC5AC511F08C23EBAEDAE4EC9C.roa (raw, json)
Hash identifier: Em3MAS73QiTbVEeqEGbDU1+Zv8aqfJ7qyzrRX2Mwg5c=
Subject key identifier: 75:19:72:8D:C7:88:85:EA:FD:CA:90:5C:3C:07:BD:B0:F4:40:E2:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01629D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495E95EC5AC511F08C23EBAEDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 23:59:44 +0000
ROA not before: Sun 06 Jul 2025 23:59:38 +0000
ROA not after: Fri 17 Jul 2026 23:59:38 +0000
asID: 36137
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90781 (0x1629d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 23:59:38 2025 GMT
Not After : Jul 17 23:59:38 2026 GMT
Subject: CN=686b0df0-0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:22:9f:d3:1e:22:df:3c:38:a9:e8:f0:b5:
2a:4f:27:5e:4b:f9:6c:3e:11:e9:d0:b7:53:6e:b9:
44:65:75:d3:c2:50:a5:7c:56:42:b6:b6:85:71:d4:
3b:2b:70:2a:04:9b:85:81:fb:54:7f:0e:c3:7e:88:
a8:15:94:02:38:5b:37:24:7b:d6:92:64:b8:82:fe:
db:9e:a7:8c:c3:9d:eb:96:35:4a:6e:37:b0:df:10:
c0:65:57:b1:1f:a4:9e:30:61:02:9f:98:91:70:bd:
0e:36:16:f1:04:9b:38:87:c7:69:0a:f0:6f:7d:3c:
ea:4b:8f:ec:df:a4:d7:1b:47:09:35:14:0a:96:8a:
9a:a0:30:4f:bb:6d:96:93:40:08:dd:37:8c:0e:e3:
67:ad:cb:4c:f2:bc:b8:34:c6:2a:47:e2:f6:71:c6:
bd:3c:8f:96:2c:67:ca:c0:5b:27:e3:1e:37:45:4a:
2d:a3:68:0b:fe:d0:c1:22:5d:b0:da:c7:15:5f:a1:
8a:3f:f8:f6:cb:fa:0e:d5:97:1c:f1:9b:4e:a9:28:
93:b4:66:a3:91:e1:3b:74:83:c5:d4:f0:3e:09:a5:
bd:6c:5e:4c:d6:83:36:91:01:ff:eb:93:61:de:ca:
10:3c:6f:4d:d3:cd:4c:89:9e:58:cb:aa:7a:93:c4:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:72:8D:C7:88:85:EA:FD:CA:90:5C:3C:07:BD:B0:F4:40:E2:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495E95EC5AC511F08C23EBAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
27:3a:a7:59:a9:05:1b:af:97:8c:31:21:8e:cb:67:c2:de:e2:
7c:94:7f:a4:6a:fd:ee:33:52:e2:98:8a:2e:cb:10:4a:d4:73:
83:cf:d0:87:32:9e:d0:b4:76:63:77:6e:3a:12:fb:d4:d0:f4:
b0:0f:bb:ad:3b:48:75:5f:d4:fa:01:e0:c6:f3:62:41:40:79:
d3:92:39:a9:42:f3:85:40:f7:71:f6:5d:51:41:d7:82:e2:13:
9b:80:ec:b1:ea:ee:5d:fe:78:93:4c:47:e7:21:32:1a:a0:a6:
2b:dd:9a:ed:90:ab:4f:12:bf:f2:6e:54:d5:32:9f:24:bf:63:
53:6b:5f:65:c0:e8:f7:67:c9:4f:c6:f7:d4:36:ae:c5:1f:d4:
fd:5a:30:61:f1:c1:3c:ee:de:7b:e6:cd:a1:0e:6f:30:2b:b4:
46:bc:83:5f:f7:00:e9:5f:c0:58:4f:c6:43:4d:a3:0d:0c:6b:
08:89:c3:7d:bb:01:a2:5f:01:2e:f7:fd:ee:ba:98:bb:94:f0:
07:c9:82:c7:0e:8f:ee:4b:28:c6:e6:5a:5e:22:9f:05:6c:07:
7a:ac:ad:f8:f6:54:e1:b2:d4:40:89:7b:c8:f3:f2:ca:69:44:
c1:fe:99:74:de:a4:06:74:58:07:b5:28:21:ef:10:38:ad:ec:
d0:8c:a3:b1
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAWKdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MjM1OTM4WhcNMjYwNzE3MjM1OTM4WjAYMRYw
FAYDVQQDEw02ODZiMGRmMC0wYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Jcin9MeIt88OKno8LUqTydeS/lsPhHp0LdTbrlEZXXTwlClfFZCtraF
cdQ7K3AqBJuFgftUfw7DfoioFZQCOFs3JHvWkmS4gv7bnqeMw53rljVKbjew3xDA
ZVexH6SeMGECn5iRcL0ONhbxBJs4h8dpCvBvfTzqS4/s36TXG0cJNRQKloqaoDBP
u22Wk0AI3TeMDuNnrctM8ry4NMYqR+L2cca9PI+WLGfKwFsn4x43RUoto2gL/tDB
Il2w2scVX6GKP/j2y/oO1Zcc8ZtOqSiTtGajkeE7dIPF1PA+CaW9bF5M1oM2kQH/
65Nh3soQPG9N081MiZ5Yy6p6k8RcrwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFHUZ
co3HiIXq/cqQXDwHvbD0QOKeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTVFOTVFQzVBQzUxMUYwOEMyM0VCQUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFnOOgAwQGnPVAAwQFnPxgMAwD
BASc/JADBASc/KAwDQYJKoZIhvcNAQELBQADggEBACc6p1mpBRuvl4wxIY7LZ8Le
4nyUf6Rq/e4zUuKYii7LEErUc4PP0IcyntC0dmN3bjoS+9TQ9LAPu607SHVf1PoB
4MbzYkFAedOSOalC84VA93H2XVFB14LiE5uA7LHq7l3+eJNMR+chMhqgpivdmu2Q
q08Sv/JuVNUynyS/Y1NrX2XA6PdnyU/G99Q2rsUf1P1aMGHxwTzu3nvmzaEObzAr
tEa8g1/3AOlfwFhPxkNNow0MawiJw327AaJfAS73/e66mLuU8AfJgscOj+5LKMbm
Wl4inwVsB3qsrfj2VOGy1ECJe8jz8sppRMH+mXTepAZ0WAe1KCHvEDit7NCMo7E=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:28:46 2025 by rpki-client