Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4794A82599E11F0B5A71FC0DAE4EC9C.roa
File: D4794A82599E11F0B5A71FC0DAE4EC9C.roa (raw, json)
Hash identifier: 6ZoYWcrX6UWHFZf9k8vcAdm9U5Kbp1lbEMLTB/eHnsw=
Subject key identifier: 07:CB:3B:4A:36:D5:98:3F:4B:4B:AF:0F:14:19:E9:73:CC:C7:7E:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4794A82599E11F0B5A71FC0DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 12:51:56 +0000
ROA not before: Sat 05 Jul 2025 12:51:51 +0000
ROA not after: Thu 21 Aug 2025 12:51:51 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90537 (0x161a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 12:51:51 2025 GMT
Not After : Aug 21 12:51:51 2025 GMT
Subject: CN=68691fec-7aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:8f:7c:1b:72:93:7c:9e:c3:70:7d:5f:83:
b9:05:76:d7:eb:47:a7:7b:98:cf:c5:3e:88:b0:7b:
8a:29:ba:b5:d8:3c:49:a5:1b:87:d8:b0:17:85:8c:
a9:d2:32:bd:ec:27:9b:95:5a:ce:c5:d4:f6:46:39:
b0:bc:5d:33:99:45:26:7f:7c:e9:6c:a5:26:50:e4:
b0:ef:7d:df:c1:9d:77:fc:64:97:fc:a7:75:72:73:
1b:56:21:c7:42:c8:a8:a0:9b:27:5f:68:d2:21:f3:
d0:09:9e:46:4f:dc:53:05:66:58:cf:40:ef:f4:03:
b8:98:c2:eb:96:bb:0c:90:0b:a2:17:36:2b:41:27:
ba:82:15:f3:cc:fc:73:84:37:0f:a8:ab:68:a7:8d:
b2:22:05:7c:06:72:3b:8f:c9:55:98:a0:03:ed:19:
b1:d4:7f:3a:98:17:08:35:90:9d:dd:73:08:97:78:
6a:fe:57:95:73:6d:59:b9:29:aa:82:93:0f:78:7a:
dc:a1:e0:63:37:3e:1a:28:29:ea:3d:07:97:d1:33:
10:44:d5:66:24:cc:47:15:9d:c7:e1:a1:e7:de:05:
58:73:4f:6e:59:40:3a:1e:2b:d3:99:4a:6f:c1:af:
17:5b:26:d0:71:f3:cd:c7:47:47:52:f3:e7:fe:28:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:3B:4A:36:D5:98:3F:4B:4B:AF:0F:14:19:E9:73:CC:C7:7E:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4794A82599E11F0B5A71FC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
5e:e8:10:c1:f6:eb:32:97:db:b3:c6:da:cd:2c:79:2a:dc:8c:
1c:87:af:55:e5:27:bb:90:d4:ca:89:68:1a:23:21:5b:24:71:
70:8d:05:c8:fc:44:67:a3:30:10:41:d3:e1:fe:55:dd:7f:77:
26:e4:da:97:a8:96:8a:be:be:d0:55:0b:93:7b:fe:9f:5d:15:
d8:ef:6d:bd:0d:55:b2:0e:10:ba:25:18:41:15:1f:ed:47:26:
08:cf:3b:e0:bd:21:10:a6:5c:22:08:38:e5:a6:d7:61:5c:17:
20:e0:f3:e2:d7:37:24:52:66:db:39:c8:33:b2:f7:f8:5f:3a:
9e:1b:b5:5b:1d:52:65:de:0f:48:87:41:ac:17:58:b7:68:58:
1b:37:dd:6a:a2:5b:fb:1d:0c:49:e0:be:7e:67:3b:52:8a:82:
ab:4a:2e:19:25:e6:9f:b4:c5:1f:75:20:a3:4c:0c:b0:8f:45:
56:4b:be:c5:a5:c8:6d:e5:f5:f6:ec:9e:81:07:4c:9d:45:e0:
c7:76:1d:0b:4e:31:c0:ff:ce:c1:90:5c:5b:2f:7c:1d:0c:c0:
ec:57:83:89:f0:70:f1:26:bc:3d:55:57:e6:1e:6e:ff:e2:1b:
83:69:ce:53:f9:e5:51:09:34:3e:fd:db:b9:45:be:f5:fe:6e:
8f:83:a5:bf
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWGpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MTI1MTUxWhcNMjUwODIxMTI1MTUxWjAYMRYw
FAYDVQQDEw02ODY5MWZlYy03YWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnzCPfBtyk3yew3B9X4O5BXbX60ene5jPxT6IsHuKKbq12DxJpRuH2LAX
hYyp0jK97CeblVrOxdT2RjmwvF0zmUUmf3zpbKUmUOSw733fwZ13/GSX/Kd1cnMb
ViHHQsiooJsnX2jSIfPQCZ5GT9xTBWZYz0Dv9AO4mMLrlrsMkAuiFzYrQSe6ghXz
zPxzhDcPqKtop42yIgV8BnI7j8lVmKAD7Rmx1H86mBcINZCd3XMIl3hq/leVc21Z
uSmqgpMPeHrcoeBjNz4aKCnqPQeX0TMQRNVmJMxHFZ3H4aHn3gVYc09uWUA6HivT
mUpvwa8XWybQcfPNx0dHUvPn/ihMjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAfL
O0o21Zg/S0uvDxQZ6XPMx37CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENDc5NEE4MjU5OUUxMUYwQjVBNzFGQzBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec6YADBAOc6ZAwDQYJKoZI
hvcNAQELBQADggEBAF7oEMH26zKX27PG2s0seSrcjByHr1XlJ7uQ1MqJaBojIVsk
cXCNBcj8RGejMBBB0+H+Vd1/dybk2peoloq+vtBVC5N7/p9dFdjvbb0NVbIOELol
GEEVH+1HJgjPO+C9IRCmXCIIOOWm12FcFyDg8+LXNyRSZts5yDOy9/hfOp4btVsd
UmXeD0iHQawXWLdoWBs33WqiW/sdDEngvn5nO1KKgqtKLhkl5p+0xR91IKNMDLCP
RVZLvsWlyG3l9fbsnoEHTJ1F4Md2HQtOMcD/zsGQXFsvfB0MwOxXg4nwcPEmvD1V
V+Yebv/iG4NpzlP55VEJND7927lFvvX+bo+Dpb8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:01 2025 by rpki-client