Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6AA1E92598111F0BE2B0086DAE4EC9C.roa
File: E6AA1E92598111F0BE2B0086DAE4EC9C.roa (raw, json)
Hash identifier: m9DboC1+OcsyzbsYi9hoXuEQ4+38lZ0ceT4ZUM2wGVE=
Subject key identifier: 3F:B6:67:0F:7E:08:DC:6E:F6:EC:BE:DA:7C:22:BF:D1:B4:98:F1:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016181
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6AA1E92598111F0BE2B0086DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 09:24:51 +0000
ROA not before: Sat 05 Jul 2025 09:24:46 +0000
ROA not after: Tue 09 Sep 2025 09:24:46 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
156.243.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90497 (0x16181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 09:24:46 2025 GMT
Not After : Sep 9 09:24:46 2025 GMT
Subject: CN=6868ef63-e2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:45:24:bf:81:9e:fd:b6:e5:19:d6:3f:aa:
31:ed:28:00:b9:c8:26:a0:ee:ec:34:90:81:e0:78:
86:17:cf:68:c4:c1:1a:95:69:c7:dd:60:08:5e:d7:
33:37:26:3d:70:e8:b2:b5:ff:25:66:22:2f:7f:ba:
be:b9:37:8f:0b:16:ed:df:d3:c9:1b:de:89:4e:5d:
7c:05:2c:72:fb:37:c3:53:de:50:fb:bd:40:01:dc:
ff:cb:e2:fd:f9:e2:b3:13:05:67:53:76:2c:d0:12:
24:37:9f:82:b8:61:fa:eb:42:46:bf:a2:50:80:5e:
27:ef:cc:8b:9c:47:a1:5b:f2:39:cf:6c:bd:c1:a6:
8f:e4:5d:e1:6c:9c:08:31:2f:7f:74:3f:8a:e4:e7:
3a:dc:db:e0:c1:79:e4:c2:f0:b7:50:5e:bd:e4:5d:
b7:aa:65:21:ba:4b:be:20:a4:cb:e0:e9:c4:4f:53:
26:19:db:dd:b3:5e:14:2f:e1:4e:68:11:47:40:5e:
59:40:5c:27:37:a5:ba:f5:d5:9b:7d:93:6d:67:b7:
e2:8f:ae:e9:09:07:5b:12:a3:35:42:e0:7c:a6:c9:
23:80:8b:10:46:db:4f:93:33:0b:06:82:ba:53:88:
41:fc:26:5d:a4:98:9a:0c:8e:f7:8e:1e:46:8c:0f:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:67:0F:7E:08:DC:6E:F6:EC:BE:DA:7C:22:BF:D1:B4:98:F1:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6AA1E92598111F0BE2B0086DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
156.243.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bc:7b:36:14:b4:f8:67:66:d3:fd:9b:2e:57:c7:3d:d2:b4:
ea:8c:b9:d2:92:9c:a6:9b:01:59:00:a6:7b:4d:d6:aa:de:34:
ec:17:3f:4d:c3:a1:25:2e:d9:39:c1:ea:25:98:5c:a4:da:14:
50:e1:07:0c:7e:65:b0:21:9d:cd:e0:95:fe:0d:51:d7:33:59:
37:97:da:1b:b7:98:fd:51:e6:4c:76:b3:e2:9d:74:85:85:cf:
39:f8:ce:5d:26:18:d3:59:aa:5c:f2:30:f4:32:e0:82:63:7a:
ea:68:8a:52:aa:20:35:b8:75:42:3a:05:0d:09:e5:da:37:e7:
2c:8d:de:0d:0c:18:4e:88:02:c2:74:b0:ea:67:05:d1:75:a1:
01:81:73:24:35:5d:d0:67:8b:ea:a7:23:54:0b:ee:55:60:6a:
d0:52:db:3b:58:9a:d3:f8:c8:2d:40:95:b9:73:d6:10:57:cd:
a0:59:d5:08:18:05:39:3a:32:21:26:b8:08:76:f3:87:de:c9:
7e:12:2a:be:d2:3e:cd:85:84:15:1d:b8:c1:0f:70:95:25:c8:
80:00:58:be:c2:5d:0a:00:ab:ed:35:89:c5:32:bb:d4:27:54:
db:5b:21:53:2c:34:2a:b7:cf:2a:42:4e:db:10:b8:bf:96:f9:
b4:d0:a1:52
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAWGBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MDkyNDQ2WhcNMjUwOTA5MDkyNDQ2WjAYMRYw
FAYDVQQDEw02ODY4ZWY2My1lMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArARFJL+Bnv225RnWP6ox7SgAucgmoO7sNJCB4HiGF89oxMEalWnH3WAI
XtczNyY9cOiytf8lZiIvf7q+uTePCxbt39PJG96JTl18BSxy+zfDU95Q+71AAdz/
y+L9+eKzEwVnU3Ys0BIkN5+CuGH660JGv6JQgF4n78yLnEehW/I5z2y9waaP5F3h
bJwIMS9/dD+K5Oc63NvgwXnkwvC3UF695F23qmUhuku+IKTL4OnET1MmGdvds14U
L+FOaBFHQF5ZQFwnN6W69dWbfZNtZ7fij67pCQdbEqM1QuB8pskjgIsQRttPkzML
BoK6U4hB/CZdpJiaDI73jh5GjA8S2QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFD+2
Zw9+CNxu9uy+2nwiv9G0mPHdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNkFBMUU5MjU5ODExMUYwQkUyQjAwODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnOECAwQBnOEyAwQAnPPhMA0G
CSqGSIb3DQEBCwUAA4IBAQAtvHs2FLT4Z2bT/ZsuV8c90rTqjLnSkpymmwFZAKZ7
Tdaq3jTsFz9Nw6ElLtk5weolmFyk2hRQ4QcMfmWwIZ3N4JX+DVHXM1k3l9obt5j9
UeZMdrPinXSFhc85+M5dJhjTWapc8jD0MuCCY3rqaIpSqiA1uHVCOgUNCeXaN+cs
jd4NDBhOiALCdLDqZwXRdaEBgXMkNV3QZ4vqpyNUC+5VYGrQUts7WJrT+MgtQJW5
c9YQV82gWdUIGAU5OjIhJrgIdvOH3sl+Eiq+0j7NhYQVHbjBD3CVJciAAFi+wl0K
AKvtNYnFMrvUJ1TbWyFTLDQqt88qQk7bELi/lvm00KFS
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:25:22 2025 by rpki-client