Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E919D887F411F0BC3829B1DAE4EC9C.roa
File: 56E919D887F411F0BC3829B1DAE4EC9C.roa (raw, json)
Hash identifier: 1cEx1Oib9XJ+qYTXr4+uYoyhX45PPGN4XrMqeOhPta8=
Subject key identifier: 03:10:A4:42:02:F7:10:37:5B:97:CD:79:E7:94:5E:71:88:1B:EC:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01766A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E919D887F411F0BC3829B1DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 11:59:55 +0000
ROA not before: Tue 02 Sep 2025 11:59:48 +0000
ROA not after: Fri 10 Oct 2025 11:59:48 +0000
asID: 395886
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95850 (0x1766a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 11:59:48 2025 GMT
Not After : Oct 10 11:59:48 2025 GMT
Subject: CN=68b6dc3b-d78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:cb:d0:02:a4:71:f6:f7:3d:4f:62:9f:92:
11:5c:30:0d:2b:cc:06:58:08:f8:e4:fb:c1:e3:16:
5d:e3:29:ef:43:57:fa:68:20:6b:73:3d:94:95:84:
cd:cc:bc:fe:5d:85:78:69:0b:ab:9b:5a:75:e2:4e:
a2:05:88:74:47:66:ce:60:40:a4:27:2f:cd:31:be:
b2:70:e9:43:e6:33:91:22:e7:89:80:6d:3d:e3:37:
d5:2b:44:5d:8b:a8:22:c3:7e:05:c4:c3:43:96:43:
47:a8:76:23:d8:1d:f4:3e:f0:46:fa:f7:bf:50:b4:
e0:38:90:cd:2c:4f:48:4d:81:c5:eb:0e:fa:64:fb:
2d:f7:37:b9:45:53:2c:c1:79:fb:3a:be:41:53:39:
a4:b9:33:41:de:86:42:f6:1b:30:3a:ad:f1:73:d7:
9a:b2:5e:81:78:e7:9a:11:f9:8a:1c:5c:cb:58:2f:
33:be:e7:95:c3:e4:2f:06:9f:99:9f:29:d3:37:25:
e1:2d:8e:32:61:32:30:b3:e5:89:f2:7f:0f:be:03:
bc:ba:c5:3c:4a:c5:38:db:fe:e7:ba:24:2f:a0:29:
8c:c3:34:cb:c6:20:e5:14:30:89:e1:56:15:0e:0e:
e5:57:78:19:03:ec:c0:ce:7c:4e:93:d7:c3:05:a8:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:10:A4:42:02:F7:10:37:5B:97:CD:79:E7:94:5E:71:88:1B:EC:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E919D887F411F0BC3829B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
33:c8:b8:23:a2:72:bc:04:54:58:1b:0c:bb:51:d1:ee:68:4b:
a9:47:02:f4:cf:b0:99:a6:c6:c9:0d:01:b5:98:97:46:8d:d4:
2a:83:e7:c4:3a:de:4d:45:69:a8:88:14:3b:4f:6b:39:6f:26:
a7:f5:e3:f6:c0:2f:ee:9e:52:01:6d:97:c4:d4:de:1a:c3:95:
d9:92:3d:6f:48:26:e9:a7:15:ae:0a:06:6b:21:fd:5b:b6:99:
f2:fd:d8:ce:b9:e8:4d:c8:b6:9a:13:be:2b:66:22:9a:27:e7:
3d:cb:e0:9d:da:9a:90:7c:f4:96:74:fa:8b:b7:6d:c3:8d:94:
a3:16:83:76:b1:85:86:1f:58:2e:a6:3a:97:e8:65:49:00:d0:
53:a7:62:a3:d1:7f:97:40:af:cd:a6:02:3e:77:c3:34:ee:32:
7b:ba:2b:99:d8:62:08:41:35:b9:2a:4d:4c:21:f1:73:92:7e:
4c:ab:f8:19:8d:d9:ed:fc:a4:80:22:70:66:b2:56:f8:5d:86:
af:11:3d:2e:11:e2:3f:8d:4c:ef:5d:aa:7e:cb:7d:2f:06:57:
70:f4:7c:cb:d1:25:e4:15:cd:99:af:f4:40:dd:78:77:32:86:
cd:76:19:af:97:ed:63:f8:ec:93:d1:b3:6b:b6:73:f6:a0:1a:
63:6c:e7:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXZqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAyMTE1OTQ4WhcNMjUxMDEwMTE1OTQ4WjAYMRYw
FAYDVQQDEw02OGI2ZGMzYi1kNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxuTL0AKkcfb3PU9in5IRXDANK8wGWAj45PvB4xZd4ynvQ1f6aCBrcz2U
lYTNzLz+XYV4aQurm1p14k6iBYh0R2bOYECkJy/NMb6ycOlD5jORIueJgG094zfV
K0Rdi6giw34FxMNDlkNHqHYj2B30PvBG+ve/ULTgOJDNLE9ITYHF6w76ZPst9ze5
RVMswXn7Or5BUzmkuTNB3oZC9hswOq3xc9easl6BeOeaEfmKHFzLWC8zvueVw+Qv
Bp+ZnynTNyXhLY4yYTIws+WJ8n8PvgO8usU8SsU42/7nuiQvoCmMwzTLxiDlFDCJ
4VYVDg7lV3gZA+zAznxOk9fDBagYJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAMQ
pEIC9xA3W5fNeeeUXnGIG+yIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NkU5MTlEODg3RjQxMUYwQkMzODI5QjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQAzyLgjonK8BFRYGwy7UdHuaEupRwL0z7CZpsbJDQG1mJdGjdQqg+fEOt5N
RWmoiBQ7T2s5byan9eP2wC/unlIBbZfE1N4aw5XZkj1vSCbppxWuCgZrIf1btpny
/djOuehNyLaaE74rZiKaJ+c9y+Cd2pqQfPSWdPqLt23DjZSjFoN2sYWGH1gupjqX
6GVJANBTp2Kj0X+XQK/NpgI+d8M07jJ7uiuZ2GIIQTW5Kk1MIfFzkn5Mq/gZjdnt
/KSAInBmslb4XYavET0uEeI/jUzvXap+y30vBldw9HzL0SXkFc2Zr/RA3Xh3MobN
dhmvl+1j+OyT0bNrtnP2oBpjbOdO
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:16:19 2025 by rpki-client