Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB8766A622311F094B6278DDAE4EC9C.roa
File: 9EB8766A622311F094B6278DDAE4EC9C.roa (raw, json)
Hash identifier: 1BP/BJwWAruxClfLyrptuqIEE0IFtuJj4esx1oxH76I=
Subject key identifier: 42:67:B5:04:0D:5D:87:4E:6C:97:CA:BF:65:7F:6F:6F:F2:A8:AE:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01656A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB8766A622311F094B6278DDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 09:02:38 +0000
ROA not before: Wed 16 Jul 2025 09:02:32 +0000
ROA not after: Fri 25 Jul 2025 09:02:32 +0000
asID: 5650
IP address blocks: 156.255.16.0/22 maxlen: 24
156.255.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91498 (0x1656a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:02:32 2025 GMT
Not After : Jul 25 09:02:32 2025 GMT
Subject: CN=68776aae-ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:2a:df:b9:9c:fc:19:6a:51:d5:89:02:95:
90:f9:f3:6b:d6:3f:ff:c3:31:a7:2c:ee:b0:9e:ab:
be:95:11:da:ee:65:a3:c6:89:1c:0d:e3:73:c9:8a:
02:1b:c2:6d:d3:17:0d:eb:1b:af:24:f6:6a:02:d9:
72:d9:6a:47:ea:08:43:1c:dd:b7:bc:d1:ea:41:11:
5e:f8:de:d4:bb:47:61:ec:08:fd:b9:44:de:63:03:
66:51:b6:ac:e1:24:5b:ac:14:50:38:52:15:53:47:
91:02:11:7c:e6:16:a2:f2:9a:0f:e6:f5:da:6f:00:
c0:af:4b:2c:fe:3f:98:d5:ce:b7:71:30:ab:31:a7:
0e:e6:61:54:9f:a5:2e:6b:c3:74:a3:35:ab:57:c7:
64:0c:b1:7c:22:7c:06:c3:d9:f5:99:5f:2a:f8:6b:
30:11:5a:1e:60:8a:4a:79:70:12:54:a6:ba:f1:a7:
f8:b6:f5:cb:ee:23:30:ab:b0:64:da:eb:06:2c:d5:
e3:b7:22:b8:e7:02:26:40:a2:dd:05:21:7e:2f:f2:
ea:da:bc:d3:0b:3d:76:eb:9e:c6:0d:00:f3:7d:13:
73:62:94:ed:53:b4:ba:fc:b5:8f:4c:1e:37:b9:96:
95:5e:82:b4:43:a1:c4:95:4e:99:26:57:16:6a:94:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:B5:04:0D:5D:87:4E:6C:97:CA:BF:65:7F:6F:6F:F2:A8:AE:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB8766A622311F094B6278DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:97:0a:d1:d8:1a:e8:59:3f:1c:ad:97:7e:7f:30:ad:89:1b:
35:b8:4d:dd:c2:5a:85:7f:f0:cd:03:f7:b2:52:1d:55:3f:d5:
b9:f9:7b:02:23:15:94:e3:be:c5:e4:3e:5e:44:72:ab:70:6e:
ed:f4:32:5f:b7:62:d7:29:93:d7:ba:07:05:21:5a:43:5b:b4:
aa:db:a3:d0:9d:0b:3f:aa:8e:b4:34:de:a7:8c:60:17:df:81:
67:41:70:84:2f:40:52:db:2d:f1:21:74:7f:02:66:39:89:64:
96:d6:8a:27:cd:24:b6:e4:f7:74:47:ec:ff:0e:8c:e1:95:c0:
a3:96:5c:91:e8:67:67:fc:37:fa:7b:a2:d8:e8:27:55:cd:18:
da:57:fa:fc:fb:fc:d5:0a:ff:99:9b:78:32:87:73:e4:ac:d3:
59:58:43:c0:40:89:ca:5a:6f:32:ee:7c:36:de:e8:3f:4b:5c:
ab:02:4c:9c:ad:f8:9e:07:9d:8d:de:2f:23:0a:c1:fa:ae:fc:
e4:0c:f3:32:41:1b:d5:25:74:72:9e:99:8d:b8:ad:69:63:80:
de:64:d9:de:bc:85:af:e6:ab:3d:02:90:22:f3:aa:aa:23:3c:
a7:5e:c3:2a:7e:14:9d:db:5a:70:7e:43:68:e2:69:40:6f:10:
d2:35:5b:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWVqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE2MDkwMjMyWhcNMjUwNzI1MDkwMjMyWjAYMRYw
FAYDVQQDEw02ODc3NmFhZS1lZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtzUq37mc/BlqUdWJApWQ+fNr1j//wzGnLO6wnqu+lRHa7mWjxokcDeNz
yYoCG8Jt0xcN6xuvJPZqAtly2WpH6ghDHN23vNHqQRFe+N7Uu0dh7Aj9uUTeYwNm
Ubas4SRbrBRQOFIVU0eRAhF85hai8poP5vXabwDAr0ss/j+Y1c63cTCrMacO5mFU
n6Uua8N0ozWrV8dkDLF8InwGw9n1mV8q+GswEVoeYIpKeXASVKa68af4tvXL7iMw
q7Bk2usGLNXjtyK45wImQKLdBSF+L/Lq2rzTCz12657GDQDzfRNzYpTtU7S6/LWP
TB43uZaVXoK0Q6HElU6ZJlcWapTUGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEJn
tQQNXYdObJfKv2V/b2/yqK7WMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUI4NzY2QTYyMjMxMUYwOTRCNjI3OEREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnP8QMA0GCSqGSIb3DQEBCwUA
A4IBAQCilwrR2BroWT8crZd+fzCtiRs1uE3dwlqFf/DNA/eyUh1VP9W5+XsCIxWU
477F5D5eRHKrcG7t9DJft2LXKZPXugcFIVpDW7Sq26PQnQs/qo60NN6njGAX34Fn
QXCEL0BS2y3xIXR/AmY5iWSW1oonzSS25Pd0R+z/DozhlcCjllyR6Gdn/Df6e6LY
6CdVzRjaV/r8+/zVCv+Zm3gyh3PkrNNZWEPAQInKWm8y7nw23ug/S1yrAkycrfie
B52N3i8jCsH6rvzkDPMyQRvVJXRynpmNuK1pY4DeZNnevIWv5qs9ApAi86qqIzyn
XsMqfhSd21pwfkNo4mlAbxDSNVvR
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:56 2025 by rpki-client