Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F456B0E59E211F0B6D49CF1DAE4EC9C.roa
File: 9F456B0E59E211F0B6D49CF1DAE4EC9C.roa (raw, json)
Hash identifier: HZ3FSh+bmMd1txmOrtJ77vyfKtlvyZ1sbfGT+NWjhzw=
Subject key identifier: 90:A4:CB:91:46:C8:D2:54:54:75:FF:01:E5:9A:C7:23:B2:58:C7:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F456B0E59E211F0B6D49CF1DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 20:57:12 +0000
ROA not before: Sat 05 Jul 2025 20:57:06 +0000
ROA not after: Fri 17 Jul 2026 20:57:06 +0000
asID: 153526
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90597 (0x161e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 20:57:06 2025 GMT
Not After : Jul 17 20:57:06 2026 GMT
Subject: CN=686991a8-fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:35:1f:7c:94:7d:a4:cf:83:ad:7c:2f:0c:
48:99:81:25:9b:da:9f:bd:73:33:68:cf:a0:fd:e0:
8a:44:31:ed:7d:3a:c0:1a:1b:97:e9:bb:53:b0:30:
a0:b6:70:c7:5a:b7:d2:4c:4f:5e:06:50:5d:dc:1a:
db:b7:82:92:a7:39:4c:0e:bd:95:b8:cf:c4:c8:aa:
c3:1a:48:51:e1:01:1f:e3:38:ca:19:f8:b2:db:2e:
66:1c:6f:75:e3:14:dc:d9:e7:31:76:65:b6:a0:19:
ac:8f:1a:a5:41:2a:59:69:40:ff:21:42:27:a3:d0:
be:22:1f:82:6c:b2:d8:7a:e7:69:be:4f:25:72:97:
d1:6d:08:78:3f:d9:51:c9:38:b3:b8:b9:40:b3:e2:
24:e4:0f:9d:5b:eb:d1:b1:b0:ed:db:8c:74:49:84:
ec:44:1a:6b:09:98:48:81:ca:88:2e:c3:95:44:fe:
e5:4b:52:1b:31:17:63:1b:42:3e:92:9a:b9:f0:d9:
14:2d:96:a6:35:54:07:f9:a8:98:54:52:ac:08:f6:
ef:e1:87:38:88:fc:c3:9a:be:94:c7:24:53:82:6d:
09:58:4d:62:34:ad:85:a7:6f:e5:ab:c5:aa:c8:f0:
f8:e2:d9:41:cb:68:aa:9e:65:dc:38:6c:5c:be:ef:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A4:CB:91:46:C8:D2:54:54:75:FF:01:E5:9A:C7:23:B2:58:C7:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F456B0E59E211F0B6D49CF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
91:17:b1:18:74:21:01:80:8d:bf:df:58:53:e9:fa:25:12:9e:
1b:aa:2c:89:64:25:5e:ce:9d:b6:32:7f:11:c0:5e:9f:ee:d8:
a1:d1:eb:83:49:38:bb:2c:b8:8a:16:f3:23:23:18:af:00:2d:
6b:0e:a6:8b:04:e4:68:ee:0f:3b:9b:df:f4:1f:2d:c0:41:73:
e0:6f:88:38:fe:4b:62:9d:c9:1e:2c:02:e4:41:2a:01:ad:18:
03:f9:ab:32:e7:bf:c0:8b:7f:e9:db:ac:fa:0a:d4:d9:2f:c3:
28:f4:2e:0f:bb:f6:a9:8b:26:2d:bb:2a:d3:8f:ea:ad:45:c0:
ce:f1:3b:8a:7b:3a:90:92:0b:62:30:e3:c6:54:c5:d7:f6:cc:
ce:bb:c7:22:c5:8d:1b:29:13:41:a6:28:27:d2:1a:98:46:b9:
14:9c:a4:6d:62:7e:d0:f8:a2:a4:60:c8:50:7a:0c:09:f3:f0:
96:94:77:47:35:37:36:f7:d1:cd:49:6a:95:12:20:92:b1:ef:
ba:36:ca:ea:65:97:56:5d:ed:bf:41:a2:8e:c0:12:88:05:58:
bf:4f:e9:42:14:24:ab:a6:aa:c1:0b:8f:56:1e:6f:15:d4:a0:
f4:69:ba:99:25:ec:0d:8e:7b:91:ac:4f:9d:96:eb:14:65:d3:
b8:95:7c:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWHlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MjA1NzA2WhcNMjYwNzE3MjA1NzA2WjAYMRYw
FAYDVQQDEw02ODY5OTFhOC1mZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4MQ1H3yUfaTPg618LwxImYElm9qfvXMzaM+g/eCKRDHtfTrAGhuX6btT
sDCgtnDHWrfSTE9eBlBd3Brbt4KSpzlMDr2VuM/EyKrDGkhR4QEf4zjKGfiy2y5m
HG914xTc2ecxdmW2oBmsjxqlQSpZaUD/IUIno9C+Ih+CbLLYeudpvk8lcpfRbQh4
P9lRyTizuLlAs+Ik5A+dW+vRsbDt24x0SYTsRBprCZhIgcqILsOVRP7lS1IbMRdj
G0I+kpq58NkULZamNVQH+aiYVFKsCPbv4Yc4iPzDmr6UxyRTgm0JWE1iNK2Fp2/l
q8WqyPD44tlBy2iqnmXcOGxcvu8VsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJCk
y5FGyNJUVHX/AeWaxyOyWMcnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjQ1NkIwRTU5RTIxMUYwQjZENDlDRjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPGLMA0GCSqGSIb3DQEBCwUA
A4IBAQCRF7EYdCEBgI2/31hT6folEp4bqiyJZCVezp22Mn8RwF6f7tih0euDSTi7
LLiKFvMjIxivAC1rDqaLBORo7g87m9/0Hy3AQXPgb4g4/ktinckeLALkQSoBrRgD
+asy57/Ai3/p26z6CtTZL8Mo9C4Pu/apiyYtuyrTj+qtRcDO8TuKezqQkgtiMOPG
VMXX9szOu8cixY0bKRNBpign0hqYRrkUnKRtYn7Q+KKkYMhQegwJ8/CWlHdHNTc2
99HNSWqVEiCSse+6NsrqZZdWXe2/QaKOwBKIBVi/T+lCFCSrpqrBC49WHm8V1KD0
abqZJewNjnuRrE+dlusUZdO4lXx3
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:21:20 2025 by rpki-client