Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E58463492CF11F0B82AD0C8DAE4EC9C.roa
File: 2E58463492CF11F0B82AD0C8DAE4EC9C.roa (raw, json)
Hash identifier: 99mCmPyxQdx3Es1rASINSZmif33lyfqZUhirEvD+sRo=
Subject key identifier: 72:08:9A:D8:9A:37:EA:AB:97:89:05:D5:24:3C:46:C5:03:AE:DF:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E58463492CF11F0B82AD0C8DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 07:31:38 +0000
ROA not before: Tue 16 Sep 2025 07:31:34 +0000
ROA not after: Sun 26 Oct 2025 07:31:34 +0000
asID: 138915
IP address blocks: 156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97138 (0x17b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 07:31:34 2025 GMT
Not After : Oct 26 07:31:34 2025 GMT
Subject: CN=68c9125a-533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:a5:75:65:7a:34:0f:f4:c2:fe:3c:07:20:
00:4e:e4:59:c4:c1:ae:4b:28:f4:26:ff:a6:4d:f2:
b6:00:e6:b0:97:d3:fe:d5:8b:1d:84:69:57:db:b8:
fe:26:44:8d:fe:ab:92:90:55:88:3b:2a:7c:2a:49:
73:5d:79:15:fa:98:3c:0d:16:ce:f5:1b:7f:bc:30:
de:50:4d:37:3a:f8:a4:4b:e0:43:9d:2d:68:62:1d:
af:ab:88:15:db:87:b7:a0:10:57:bf:2f:de:d0:f0:
c4:b3:09:46:4e:87:46:5b:f1:81:ea:13:05:c0:73:
85:57:a1:7a:72:15:61:60:07:4b:c2:29:a8:f8:ec:
d8:3a:0d:e3:f4:b6:74:60:2e:68:9e:9b:53:3e:f8:
1e:0c:34:5f:72:0b:94:e7:0b:c9:c5:0e:a4:7c:ae:
97:21:da:81:6e:71:d4:c5:f0:09:27:c0:57:24:f0:
c9:1b:31:48:d8:1f:95:29:39:d7:0e:82:77:9d:1a:
90:d0:db:e3:4a:20:6f:53:bf:70:a5:96:ae:3e:83:
1f:f6:4a:3e:97:71:65:7d:9f:67:58:d8:e5:71:62:
85:41:39:08:41:94:f1:b2:f5:d5:65:db:23:ce:9d:
c7:99:9f:5e:c4:84:c5:78:7a:45:05:41:44:3a:c1:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:9A:D8:9A:37:EA:AB:97:89:05:D5:24:3C:46:C5:03:AE:DF:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E58463492CF11F0B82AD0C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
51:88:f7:6d:3a:ec:ea:e8:a3:b6:90:9e:0e:6d:fd:6f:02:fd:
e9:45:50:f3:dc:2b:90:ff:a8:6e:8e:96:4b:48:b5:86:98:d8:
9c:4b:b7:54:20:4a:01:46:8c:dd:cd:85:03:bc:c6:f9:b1:ac:
2a:7d:0e:54:38:83:ff:8b:98:83:62:17:86:21:45:8b:65:69:
29:a8:d8:f3:f1:73:01:3d:5d:0d:69:09:c0:b3:71:e5:5b:b8:
78:ac:9e:42:78:af:c0:47:22:63:b5:ba:c2:4b:24:32:5d:2b:
22:28:20:39:ed:51:e2:65:e2:d3:30:22:2d:b5:a6:24:01:dd:
db:49:20:17:d6:bc:91:94:8b:45:dc:97:f2:b0:dc:99:ee:5c:
ee:cf:bd:c4:1e:5d:15:a4:ef:cb:7c:a7:ce:c9:37:1a:ca:56:
66:83:d5:40:9e:27:de:40:a6:a2:f1:8b:97:6e:b4:c3:7f:22:
a8:8a:65:4f:82:f0:b9:4a:73:87:82:8c:42:96:5c:86:52:f5:
7f:0f:78:71:dd:47:20:82:9c:13:e4:57:5f:08:fd:ee:0b:b7:
04:bc:23:1c:d7:a5:27:29:75:e6:73:05:60:da:fb:a3:ab:ca:
74:6f:65:5c:8f:a5:b8:be:a6:f5:27:d0:34:7e:60:84:70:47:
24:45:6a:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXtyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE2MDczMTM0WhcNMjUxMDI2MDczMTM0WjAYMRYw
FAYDVQQDEw02OGM5MTI1YS01MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHuldWV6NA/0wv48ByAATuRZxMGuSyj0Jv+mTfK2AOawl9P+1YsdhGlX
27j+JkSN/quSkFWIOyp8KklzXXkV+pg8DRbO9Rt/vDDeUE03OvikS+BDnS1oYh2v
q4gV24e3oBBXvy/e0PDEswlGTodGW/GB6hMFwHOFV6F6chVhYAdLwimo+OzYOg3j
9LZ0YC5onptTPvgeDDRfcguU5wvJxQ6kfK6XIdqBbnHUxfAJJ8BXJPDJGzFI2B+V
KTnXDoJ3nRqQ0NvjSiBvU79wpZauPoMf9ko+l3FlfZ9nWNjlcWKFQTkIQZTxsvXV
Zdsjzp3HmZ9exITFeHpFBUFEOsEoFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHII
mtiaN+qrl4kF1SQ8RsUDrt/aMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTU4NDYzNDkyQ0YxMUYwQjgyQUQwQzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOVAMA0GCSqGSIb3DQEBCwUA
A4IBAQBRiPdtOuzq6KO2kJ4Obf1vAv3pRVDz3CuQ/6hujpZLSLWGmNicS7dUIEoB
RozdzYUDvMb5sawqfQ5UOIP/i5iDYheGIUWLZWkpqNjz8XMBPV0NaQnAs3HlW7h4
rJ5CeK/ARyJjtbrCSyQyXSsiKCA57VHiZeLTMCIttaYkAd3bSSAX1ryRlItF3Jfy
sNyZ7lzuz73EHl0VpO/LfKfOyTcaylZmg9VAnifeQKai8YuXbrTDfyKoimVPgvC5
SnOHgoxCllyGUvV/D3hx3UcggpwT5FdfCP3uC7cEvCMc16UnKXXmcwVg2vujq8p0
b2Vcj6W4vqb1J9A0fmCEcEckRWr3
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:01 2025 by rpki-client