Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A79296E59E311F08F3C15F6DAE4EC9C.roa
File: 6A79296E59E311F08F3C15F6DAE4EC9C.roa (raw, json)
Hash identifier: FruHu2nxrmTuK3g9rVyAYvlqqHWAisKNqoEOyPkL70A=
Subject key identifier: AA:46:5A:6D:0E:8F:29:B2:E3:9C:79:E0:19:79:5E:83:6D:A7:98:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A79296E59E311F08F3C15F6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 21:02:54 +0000
ROA not before: Sat 05 Jul 2025 21:02:48 +0000
ROA not after: Fri 17 Jul 2026 21:02:48 +0000
asID: 38082
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90599 (0x161e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 21:02:48 2025 GMT
Not After : Jul 17 21:02:48 2026 GMT
Subject: CN=686992fe-b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:55:32:89:79:51:69:c4:21:95:cc:93:1b:
c8:a7:4a:c1:c3:93:b3:17:8f:fe:dd:5f:7f:5e:b1:
3e:cc:42:85:bf:17:a0:2a:d0:b2:f9:ee:9e:6d:5f:
fb:69:85:0d:53:5d:4d:3f:05:fe:63:b9:3a:a4:02:
b6:e2:7a:0e:08:23:6d:5d:ef:77:6f:89:50:7a:ff:
b0:fc:07:e8:47:72:7b:eb:c6:d2:eb:c4:fc:26:f1:
cd:07:8e:60:1b:b8:ba:81:5e:32:4c:52:d9:f2:5f:
3b:38:ab:e2:ac:42:39:61:c9:8c:a2:85:eb:4d:b3:
a7:34:87:c2:2d:f8:b0:29:07:30:ac:37:03:cd:25:
5b:e0:ba:03:43:e8:d4:b8:49:44:18:be:e9:22:55:
16:e7:af:9a:93:14:af:8f:32:7b:b5:f4:0c:97:aa:
4f:1a:40:29:ac:3c:5e:2b:de:98:a1:cc:2a:73:0b:
1d:a3:ae:d5:f7:da:aa:12:cf:db:3b:38:09:08:d9:
81:55:fb:e4:28:73:55:3a:1a:22:87:17:d4:34:15:
24:f8:78:93:f2:2a:47:a9:80:86:c9:61:5e:46:7d:
dc:c1:37:24:1d:da:1e:87:36:f9:c3:3d:a0:7e:0c:
e0:18:02:b4:d9:b9:ce:49:ab:5c:d7:06:7d:b1:40:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:5A:6D:0E:8F:29:B2:E3:9C:79:E0:19:79:5E:83:6D:A7:98:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A79296E59E311F08F3C15F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bf:a5:be:05:1f:be:8b:4e:29:2d:39:63:98:e6:3b:37:35:
fd:ec:81:f8:ed:9c:e6:52:91:14:c8:ff:16:e0:99:c9:9e:03:
b9:b7:d6:62:7d:00:58:01:a4:3c:e1:6e:33:80:ca:2e:da:1b:
3f:27:f4:8f:c4:a0:a4:a9:0d:f3:82:de:a5:33:fa:b4:b7:a8:
84:c7:a5:7e:ed:04:77:02:a7:65:59:00:a7:c2:28:8b:dc:8f:
00:11:8d:00:29:50:5f:c7:10:77:19:d4:e6:fa:b1:a8:60:96:
c8:12:7b:29:a8:6c:03:37:16:f5:d7:7d:2e:d6:76:ac:39:9f:
a8:d7:94:ce:b2:dc:1d:7e:06:a3:a7:49:f0:db:f7:45:1e:3d:
d8:8b:e0:96:c2:fe:d0:3a:e3:98:8f:17:87:2d:2f:36:ca:39:
ab:c9:70:fc:4b:35:40:b9:64:0e:72:83:ad:37:79:71:6e:86:
2d:44:ec:04:6b:ea:ad:79:bb:c9:f8:e1:63:74:a0:80:41:f1:
e8:12:1b:2d:49:f9:b0:f5:51:2e:35:94:a4:2c:35:07:28:5b:
8a:6f:c5:95:03:1b:65:d4:3f:b4:37:e2:91:19:f9:a1:3b:cd:
85:e0:33:69:1f:d9:2b:0b:da:e4:e2:f3:83:27:cd:a8:46:08:
7e:57:e3:00
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWHnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MjEwMjQ4WhcNMjYwNzE3MjEwMjQ4WjAYMRYw
FAYDVQQDEw02ODY5OTJmZS1iODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0QtVMol5UWnEIZXMkxvIp0rBw5OzF4/+3V9/XrE+zEKFvxegKtCy+e6e
bV/7aYUNU11NPwX+Y7k6pAK24noOCCNtXe93b4lQev+w/AfoR3J768bS68T8JvHN
B45gG7i6gV4yTFLZ8l87OKvirEI5YcmMooXrTbOnNIfCLfiwKQcwrDcDzSVb4LoD
Q+jUuElEGL7pIlUW56+akxSvjzJ7tfQMl6pPGkAprDxeK96Yocwqcwsdo67V99qq
Es/bOzgJCNmBVfvkKHNVOhoihxfUNBUk+HiT8ipHqYCGyWFeRn3cwTckHdoehzb5
wz2gfgzgGAK02bnOSatc1wZ9sUA8xwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKpG
Wm0Ojymy45x54Bl5XoNtp5jyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTc5Mjk2RTU5RTMxMUYwOEYzQzE1RjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPGLMA0GCSqGSIb3DQEBCwUA
A4IBAQAsv6W+BR++i04pLTljmOY7NzX97IH47ZzmUpEUyP8W4JnJngO5t9ZifQBY
AaQ84W4zgMou2hs/J/SPxKCkqQ3zgt6lM/q0t6iEx6V+7QR3AqdlWQCnwiiL3I8A
EY0AKVBfxxB3GdTm+rGoYJbIEnspqGwDNxb1130u1nasOZ+o15TOstwdfgajp0nw
2/dFHj3Yi+CWwv7QOuOYjxeHLS82yjmryXD8SzVAuWQOcoOtN3lxboYtROwEa+qt
ebvJ+OFjdKCAQfHoEhstSfmw9VEuNZSkLDUHKFuKb8WVAxtl1D+0N+KRGfmhO82F
4DNpH9krC9rk4vODJ82oRgh+V+MA
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:54 2025 by rpki-client