Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E192AD0C60A711F09905E7E0DAE4EC9C.roa
File: E192AD0C60A711F09905E7E0DAE4EC9C.roa (raw, json)
Hash identifier: 20Y7hMYawxnQMF/TCid2uNzs2FOLwmQDdIOp3Jblg7Y=
Subject key identifier: F6:B8:CB:AD:3A:07:C6:9A:F7:41:92:D4:5F:3A:81:2F:25:82:52:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01652E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E192AD0C60A711F09905E7E0DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:44:21 +0000
ROA not before: Mon 14 Jul 2025 11:44:16 +0000
ROA not after: Wed 03 Sep 2025 11:44:16 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91438 (0x1652e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:44:16 2025 GMT
Not After : Sep 3 11:44:16 2025 GMT
Subject: CN=6874ed95-fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:20:c8:28:2a:8b:a0:74:98:2c:d5:d3:f9:
32:80:bf:aa:18:26:99:d7:50:78:4d:11:34:5b:ed:
aa:52:3a:32:3a:b7:88:8c:97:f1:40:93:ca:41:2e:
01:08:c9:e9:51:48:bc:56:51:eb:c1:c5:6d:d7:43:
79:ce:35:eb:af:e4:86:33:4b:b5:dc:a0:cd:c8:49:
fa:48:a8:61:2f:7d:22:c6:c7:a7:ca:43:9e:d7:04:
b9:da:3c:27:1c:fe:84:9f:af:a4:1e:87:cb:be:15:
da:18:11:8c:55:08:58:71:f3:b0:34:e7:fa:a0:e0:
56:e8:e0:61:63:90:3a:ec:6b:b5:15:b5:bb:40:7d:
50:8c:e4:7b:7d:dc:f0:26:5f:78:30:0d:44:36:de:
26:9f:36:9a:1f:66:35:c8:ac:e3:ac:24:07:76:f3:
e4:9f:48:9d:15:66:6b:58:36:a5:08:30:2f:40:8f:
42:b3:25:73:c4:a0:f4:a8:6d:f2:35:5f:45:b6:09:
aa:12:5d:f3:99:2b:28:b9:0a:21:a5:17:6e:f7:a4:
1d:7e:61:5b:00:17:e1:22:6b:e6:4c:c2:71:31:8b:
fd:e9:a9:67:e6:fc:18:db:99:85:62:a9:83:62:f3:
9c:75:d7:f4:20:82:f2:0e:ba:22:0e:11:41:7a:2f:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:CB:AD:3A:07:C6:9A:F7:41:92:D4:5F:3A:81:2F:25:82:52:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E192AD0C60A711F09905E7E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:e1:44:b0:ed:a0:fa:3d:77:b6:da:b6:7f:b6:6d:46:c9:
23:4c:c5:95:b0:c7:df:a9:c8:f3:42:9b:16:2c:63:e0:73:48:
25:83:f0:88:5b:f9:01:24:5e:81:76:ea:2f:a5:77:60:3a:75:
4c:d4:4e:2e:24:8d:5a:33:89:fe:00:95:83:3f:7d:74:47:64:
3b:be:09:36:78:3a:5f:b5:18:01:b9:62:00:2d:cb:fe:82:99:
f9:09:a7:c4:11:dd:0d:23:0f:2a:db:a3:2a:a7:0d:b4:e4:41:
dc:61:12:9f:e0:a4:25:51:d6:36:fd:24:52:fa:ef:3b:67:cf:
79:5d:61:8a:5b:9e:85:dd:f4:e5:4f:c6:93:eb:f6:f8:79:86:
a8:27:e9:f9:60:d2:5a:38:b7:37:42:1a:83:57:72:7a:b0:30:
bf:4a:22:5a:d0:5b:54:d2:33:6a:c4:74:4f:d1:cf:7a:e0:de:
2b:a9:ea:0f:15:d9:9c:40:bb:44:7c:74:f6:a1:fb:89:d1:5c:
67:ce:a7:b8:48:ee:e3:34:5c:0a:7c:0c:20:c1:6e:ac:fa:b0:
fd:21:35:c2:34:ad:fd:cf:93:6b:1c:1b:af:e8:59:c0:61:df:
0e:1b:a7:6e:fc:a7:38:36:91:f7:c0:90:5d:f7:28:86:96:27:
79:81:c2:a1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWUuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE0MTE0NDE2WhcNMjUwOTAzMTE0NDE2WjAYMRYw
FAYDVQQDEw02ODc0ZWQ5NS1mYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApG4gyCgqi6B0mCzV0/kygL+qGCaZ11B4TRE0W+2qUjoyOreIjJfxQJPK
QS4BCMnpUUi8VlHrwcVt10N5zjXrr+SGM0u13KDNyEn6SKhhL30ixsenykOe1wS5
2jwnHP6En6+kHofLvhXaGBGMVQhYcfOwNOf6oOBW6OBhY5A67Gu1FbW7QH1QjOR7
fdzwJl94MA1ENt4mnzaaH2Y1yKzjrCQHdvPkn0idFWZrWDalCDAvQI9CsyVzxKD0
qG3yNV9FtgmqEl3zmSsouQohpRdu96QdfmFbABfhImvmTMJxMYv96aln5vwY25mF
YqmDYvOcddf0IILyDroiDhFBei+SbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPa4
y606B8aa90GS1F86gS8lglK9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTkyQUQwQzYwQTcxMUYwOTkwNUU3RTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoAMA0GCSqGSIb3DQEBCwUA
A4IBAQBRv+FEsO2g+j13ttq2f7ZtRskjTMWVsMffqcjzQpsWLGPgc0glg/CIW/kB
JF6BduovpXdgOnVM1E4uJI1aM4n+AJWDP310R2Q7vgk2eDpftRgBuWIALcv+gpn5
CafEEd0NIw8q26Mqpw205EHcYRKf4KQlUdY2/SRS+u87Z895XWGKW56F3fTlT8aT
6/b4eYaoJ+n5YNJaOLc3QhqDV3J6sDC/SiJa0FtU0jNqxHRP0c964N4rqeoPFdmc
QLtEfHT2ofuJ0Vxnzqe4SO7jNFwKfAwgwW6s+rD9ITXCNK39z5NrHBuv6FnAYd8O
G6du/Kc4NpH3wJBd9yiGlid5gcKh
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:21 2025 by rpki-client