Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA6090858DB11F08377B5C3DAE4EC9C.roa
File: 6DA6090858DB11F08377B5C3DAE4EC9C.roa (raw, json)
Hash identifier: pIVP1vS01Kbrdv3FnjTNTHfKhzzkNWHepxo3EX0nIkQ=
Subject key identifier: 31:33:49:9D:D8:37:9A:1E:EE:10:4C:60:C0:7A:DF:45:31:36:A6:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01610A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA6090858DB11F08377B5C3DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 13:33:11 +0000
ROA not before: Fri 04 Jul 2025 13:33:06 +0000
ROA not after: Sat 16 Aug 2025 13:33:06 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90378 (0x1610a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 13:33:06 2025 GMT
Not After : Aug 16 13:33:06 2025 GMT
Subject: CN=6867d817-a98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:96:ea:47:9d:6f:12:ed:68:1d:f5:5e:a9:19:
a3:84:e1:24:bd:3a:75:cd:ed:cb:d6:52:6f:89:bd:
a0:42:68:06:20:de:03:11:be:0a:86:05:d2:5b:8f:
4c:1d:90:12:15:df:ce:0f:61:42:89:39:da:41:a9:
2a:76:a5:6e:4c:1f:20:6e:86:3c:0c:3a:5d:68:22:
ae:65:72:0c:d3:1e:94:ac:a9:7d:89:ba:6c:8d:d5:
21:04:99:7d:b0:87:fa:5d:47:12:80:88:b9:9c:df:
d6:d8:ab:df:59:37:c1:64:36:e4:68:08:b0:f2:71:
e7:13:a4:98:db:3b:a7:58:6b:f0:5a:6d:5f:1e:34:
b8:35:3d:49:24:a8:63:02:c8:fb:3b:c6:a3:6b:a6:
99:45:5e:65:3c:90:91:ef:52:6a:2e:43:db:f3:b0:
54:31:52:f3:1b:ad:28:17:16:8c:f4:46:2f:78:fe:
fd:ad:1f:46:e1:ed:97:dc:0c:b8:64:4a:07:84:b5:
fc:4c:dd:6b:4d:e9:79:29:66:c6:c9:f3:53:2c:88:
42:d2:58:a0:ea:55:f1:be:de:ad:06:94:86:66:f5:
fa:bb:f9:24:75:0a:cc:4e:d8:1e:77:5f:13:7e:47:
56:5f:8d:a5:9d:17:85:93:35:2d:8c:81:86:5e:e2:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:49:9D:D8:37:9A:1E:EE:10:4C:60:C0:7A:DF:45:31:36:A6:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA6090858DB11F08377B5C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:23:ad:38:65:20:4c:f7:37:2b:13:ce:b8:ab:4c:e2:62:16:
5b:14:3c:be:22:30:d7:3b:35:a2:75:95:1f:d6:d5:95:bb:30:
0e:09:20:ca:2b:ed:41:5a:c0:4c:36:f4:c1:c7:91:95:70:1d:
04:25:00:8f:e2:ec:f2:22:ee:aa:a0:dc:52:ba:a5:cb:4a:ae:
57:02:65:8c:d6:97:4a:26:e2:eb:bb:ba:b5:8b:3b:d2:6a:a3:
8b:6a:6c:a1:dc:ff:11:7b:cf:bd:a0:0f:46:4a:41:df:48:ff:
b7:b8:83:5f:0b:08:ce:0c:87:24:91:c7:8f:7e:dd:0b:49:52:
3f:8f:eb:1a:2f:7a:70:90:a7:d8:7a:a5:7b:ed:c3:67:50:32:
61:48:6e:98:0c:be:93:7b:86:13:22:de:68:8f:85:2c:24:6a:
d1:c2:b8:79:a3:16:a8:9e:0f:4e:5e:e9:d6:66:08:9d:fc:0c:
8f:28:a9:c9:64:e9:4b:2b:ac:f9:fb:81:12:6c:05:8b:0b:64:
49:59:54:d3:69:8c:26:82:6f:09:07:0b:ce:1e:0f:c9:a5:64:
e0:c8:73:48:1a:21:12:5b:84:64:2e:ef:e8:f1:c7:8a:2f:48:
98:c5:05:a7:fb:aa:c4:4b:1b:19:08:68:f9:45:cd:ff:f5:93:
87:b1:0a:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWEKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA0MTMzMzA2WhcNMjUwODE2MTMzMzA2WjAYMRYw
FAYDVQQDEw02ODY3ZDgxNy1hOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7pbqR51vEu1oHfVeqRmjhOEkvTp1ze3L1lJvib2gQmgGIN4DEb4KhgXS
W49MHZASFd/OD2FCiTnaQakqdqVuTB8gboY8DDpdaCKuZXIM0x6UrKl9ibpsjdUh
BJl9sIf6XUcSgIi5nN/W2KvfWTfBZDbkaAiw8nHnE6SY2zunWGvwWm1fHjS4NT1J
JKhjAsj7O8aja6aZRV5lPJCR71JqLkPb87BUMVLzG60oFxaM9EYveP79rR9G4e2X
3Ay4ZEoHhLX8TN1rTel5KWbGyfNTLIhC0lig6lXxvt6tBpSGZvX6u/kkdQrMTtge
d18TfkdWX42lnReFkzUtjIGGXuLqowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDEz
SZ3YN5oe7hBMYMB630UxNqbHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82REE2MDkwODU4REIxMUYwODM3N0I1QzNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOBMMA0GCSqGSIb3DQEBCwUA
A4IBAQCfI604ZSBM9zcrE864q0ziYhZbFDy+IjDXOzWidZUf1tWVuzAOCSDKK+1B
WsBMNvTBx5GVcB0EJQCP4uzyIu6qoNxSuqXLSq5XAmWM1pdKJuLru7q1izvSaqOL
amyh3P8Re8+9oA9GSkHfSP+3uINfCwjODIckkcePft0LSVI/j+saL3pwkKfYeqV7
7cNnUDJhSG6YDL6Te4YTIt5oj4UsJGrRwrh5oxaong9OXunWZgid/AyPKKnJZOlL
K6z5+4ESbAWLC2RJWVTTaYwmgm8JBwvOHg/JpWTgyHNIGiESW4RkLu/o8ceKL0iY
xQWn+6rESxsZCGj5Rc3/9ZOHsQrA
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:27:16 2025 by rpki-client