Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C539521663AC11F0AB27189EDAE4EC9C.roa
File: C539521663AC11F0AB27189EDAE4EC9C.roa (raw, json)
Hash identifier: 3rTux58QZJrduGa9tT1peS+k0MHJV8xnxRw2AS/v+i8=
Subject key identifier: 4C:60:00:C9:48:D3:23:39:FC:97:DC:52:EC:70:58:68:1F:11:23:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016609
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C539521663AC11F0AB27189EDAE4EC9C.roa
Signing time: Fri 18 Jul 2025 07:56:55 +0000
ROA not before: Fri 18 Jul 2025 07:56:50 +0000
ROA not after: Sat 28 Mar 2026 07:56:50 +0000
asID: 132513
IP address blocks: 156.226.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91657 (0x16609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 07:56:50 2025 GMT
Not After : Mar 28 07:56:50 2026 GMT
Subject: CN=6879fe47-d10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:df:0a:8e:21:51:bf:55:31:88:28:d5:24:
32:ce:06:0f:b5:09:2b:67:42:0a:58:bb:e6:a4:33:
56:ff:6e:53:7b:c6:f2:65:6e:5c:d8:8c:73:ff:80:
e3:da:83:30:2d:e1:b3:7f:29:e4:25:6c:31:b1:f3:
44:38:6f:e2:92:9e:21:58:7d:08:7c:4f:ba:c5:44:
53:70:17:bc:0f:bc:72:9f:60:aa:16:c5:26:f6:28:
e6:4c:63:09:b6:26:6a:7e:fe:46:86:d0:b7:d5:8f:
b6:61:0e:40:fe:c0:ba:31:1e:18:0f:2b:26:05:85:
b8:bd:83:0a:36:8b:dc:26:2f:b9:fe:9b:ac:e9:aa:
bd:5a:ed:85:04:39:3e:a4:ce:f0:ae:14:73:5b:f1:
4c:8a:65:12:83:24:85:63:fe:ae:d5:53:6c:e8:97:
82:27:c2:5b:06:53:6f:20:85:0e:da:91:12:74:1f:
14:81:b9:91:6b:66:1d:8e:2b:ea:ed:07:39:7b:ca:
1b:31:40:d1:ac:ee:c2:ca:0a:a9:74:94:14:81:db:
e7:f3:bd:6f:3b:ee:bd:48:84:37:e2:80:a1:71:40:
c3:3c:09:4b:8a:36:f7:d3:d4:04:67:49:38:de:a0:
9f:fc:e5:4c:dd:b8:35:cd:ad:27:90:be:e2:c7:29:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:00:C9:48:D3:23:39:FC:97:DC:52:EC:70:58:68:1F:11:23:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C539521663AC11F0AB27189EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ab:22:15:fc:a6:4b:2d:39:05:de:8e:30:b6:2d:82:8b:49:
54:0c:8b:54:e9:ee:35:82:07:e5:ed:65:05:d2:07:b1:88:3a:
e2:25:9f:dd:47:95:d7:66:43:02:6c:f0:ee:2c:b1:97:75:78:
cf:6a:6c:8b:d1:68:07:64:a6:a3:86:d4:be:dd:40:59:e4:f0:
ab:ef:df:3b:ea:eb:97:02:fa:0d:df:cd:22:48:f0:fd:8e:ee:
14:29:39:5f:e0:3c:41:72:02:ab:de:3c:0c:70:78:08:96:d6:
60:df:87:f2:0f:5f:70:fe:03:cc:a4:6d:03:c2:ea:72:ad:a0:
2b:bc:75:bc:be:c5:8d:27:a7:dc:80:e3:4d:ce:aa:7c:88:6c:
4d:46:1b:93:4b:f4:62:0d:c6:df:af:97:f4:b8:12:d2:d6:a5:
61:25:3a:8e:5d:f3:1d:e5:b6:66:cc:b0:e4:36:03:d8:ca:8b:
44:b5:2e:4d:8f:79:c8:20:1b:a4:17:6d:9a:04:e5:ae:4a:08:
e4:d9:a7:22:df:81:9c:e8:ba:81:70:ba:e2:b8:21:aa:93:db:
d1:d7:77:f8:31:88:81:52:81:03:0a:27:3f:04:b9:62:92:6a:
17:c1:d5:0b:15:96:13:c6:24:48:86:74:3c:06:70:ed:1a:00:
13:32:99:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWYJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE4MDc1NjUwWhcNMjYwMzI4MDc1NjUwWjAYMRYw
FAYDVQQDEw02ODc5ZmU0Ny1kMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArwDfCo4hUb9VMYgo1SQyzgYPtQkrZ0IKWLvmpDNW/25Te8byZW5c2Ixz
/4Dj2oMwLeGzfynkJWwxsfNEOG/ikp4hWH0IfE+6xURTcBe8D7xyn2CqFsUm9ijm
TGMJtiZqfv5GhtC31Y+2YQ5A/sC6MR4YDysmBYW4vYMKNovcJi+5/pus6aq9Wu2F
BDk+pM7wrhRzW/FMimUSgySFY/6u1VNs6JeCJ8JbBlNvIIUO2pESdB8UgbmRa2Yd
jivq7Qc5e8obMUDRrO7CygqpdJQUgdvn871vO+69SIQ34oChcUDDPAlLijb309QE
Z0k43qCf/OVM3bg1za0nkL7ixyk25wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFExg
AMlI0yM5/JfcUuxwWGgfESMGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTM5NTIxNjYzQUMxMUYwQUIyNzE4OUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOIEMA0GCSqGSIb3DQEBCwUA
A4IBAQAjqyIV/KZLLTkF3o4wti2Ci0lUDItU6e41ggfl7WUF0gexiDriJZ/dR5XX
ZkMCbPDuLLGXdXjPamyL0WgHZKajhtS+3UBZ5PCr79876uuXAvoN380iSPD9ju4U
KTlf4DxBcgKr3jwMcHgIltZg34fyD19w/gPMpG0DwupyraArvHW8vsWNJ6fcgONN
zqp8iGxNRhuTS/RiDcbfr5f0uBLS1qVhJTqOXfMd5bZmzLDkNgPYyotEtS5Nj3nI
IBukF22aBOWuSgjk2aci34Gc6LqBcLriuCGqk9vR13f4MYiBUoEDCic/BLlikmoX
wdULFZYTxiRIhnQ8BnDtGgATMpnm
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:17:21 2025 by rpki-client