Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594D8BB2879C11F0907C8FE2DAE4EC9C.roa
File: 594D8BB2879C11F0907C8FE2DAE4EC9C.roa (raw, json)
Hash identifier: uFmIn9uJgGjXX1mg9hezcx1cB9P9A9sxTHXt9ZPaPd0=
Subject key identifier: 67:08:5B:B5:9F:68:CC:6D:1D:4F:7E:6F:50:39:B2:37:BF:D5:A4:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0175CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594D8BB2879C11F0907C8FE2DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 01:30:04 +0000
ROA not before: Tue 02 Sep 2025 01:29:59 +0000
ROA not after: Thu 02 Oct 2025 01:29:59 +0000
asID: 62513
IP address blocks: 156.225.40.0/24 maxlen: 24
156.225.43.0/24 maxlen: 24
156.225.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95693 (0x175cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 01:29:59 2025 GMT
Not After : Oct 2 01:29:59 2025 GMT
Subject: CN=68b6489b-2452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:b9:b0:6f:a3:93:9f:20:41:b9:13:4a:41:
7a:01:74:d9:b2:cd:d3:fa:c9:a8:0b:7d:e1:c3:e3:
65:85:0d:3c:bf:44:65:32:3e:c4:e4:5b:39:bb:73:
df:b3:93:d0:09:d7:4a:df:ae:75:6e:8d:4c:e5:e4:
e6:36:9f:51:23:7a:6e:c0:5d:b5:8a:a2:7e:d0:62:
ca:08:6d:54:55:57:a4:99:8d:17:db:d6:7d:ad:53:
04:6f:2d:e2:87:a7:4c:e6:f7:41:f4:5c:4f:07:f3:
92:a5:08:4f:fe:e4:7c:18:51:b6:bf:9d:4f:ed:fa:
2e:66:fd:c4:c3:2b:fe:d7:3c:28:e5:dd:f8:f1:bb:
e8:da:2d:8a:89:0a:80:98:21:16:2b:b5:78:2d:ac:
b0:06:04:f3:db:d9:b5:9a:eb:de:47:27:3e:8b:30:
25:21:84:25:df:94:66:2a:d9:6c:ea:a9:df:39:88:
89:9b:f6:fe:6d:85:5d:92:76:e2:ea:c4:8d:4b:c1:
ee:11:26:6e:d0:94:6a:b8:c3:9c:bf:ed:de:12:77:
0a:05:7c:15:5f:b8:5c:c4:b1:2e:2e:d3:fe:6b:3a:
8d:2a:c3:59:23:12:96:7b:0a:a5:0b:78:32:90:b5:
d1:16:11:e1:e8:64:6d:c9:77:09:e7:3f:bc:80:f5:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:5B:B5:9F:68:CC:6D:1D:4F:7E:6F:50:39:B2:37:BF:D5:A4:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594D8BB2879C11F0907C8FE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.40.0/24
156.225.43.0-156.225.44.255
Signature Algorithm: sha256WithRSAEncryption
85:58:db:25:62:e2:13:c5:02:6d:52:9f:41:62:f4:40:53:a4:
d3:d8:24:45:97:b9:6d:bf:f4:fb:d5:32:dd:ce:29:61:ce:0e:
27:b2:c0:a6:da:6d:97:69:68:3e:70:ec:b2:ca:2d:b4:d3:1a:
7f:76:21:0a:fa:7b:e9:71:48:f8:8f:2e:46:02:a9:66:6c:bc:
83:59:2f:71:e4:a3:8c:65:a1:c0:4f:54:f6:51:9c:37:52:3b:
24:8c:dc:36:f1:46:94:8b:ec:d1:3e:af:d6:d7:21:a6:69:1d:
f1:0b:e2:8e:83:7d:b6:30:79:2a:48:cb:30:62:9d:68:3f:68:
ee:58:4d:87:c7:16:15:69:41:3f:d3:90:25:31:24:71:ff:7b:
a7:b5:d9:d6:6e:6f:bd:0e:d2:10:72:60:6c:b3:00:71:ea:72:
21:90:79:6a:9b:55:63:be:fa:7f:e6:4b:e8:87:d3:27:cc:99:
66:81:39:b9:da:de:d5:ee:10:cd:3f:29:e9:74:d5:23:dc:7b:
c8:26:ef:79:b4:99:69:38:86:68:01:df:51:19:d7:b6:d3:1e:
cc:8d:d0:8a:43:20:fa:5e:97:b1:61:e7:27:9b:db:3e:fb:6c:
17:28:dc:bd:7e:e9:86:ec:0e:c3:64:f5:8d:0a:60:73:bc:78:
c2:43:8d:43
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAXXNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAyMDEyOTU5WhcNMjUxMDAyMDEyOTU5WjAYMRYw
FAYDVQQDEw02OGI2NDg5Yi0yNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv8i5sG+jk58gQbkTSkF6AXTZss3T+smoC33hw+NlhQ08v0RlMj7E5Fs5
u3Pfs5PQCddK3651bo1M5eTmNp9RI3puwF21iqJ+0GLKCG1UVVekmY0X29Z9rVME
by3ih6dM5vdB9FxPB/OSpQhP/uR8GFG2v51P7fouZv3Ewyv+1zwo5d348bvo2i2K
iQqAmCEWK7V4LaywBgTz29m1muveRyc+izAlIYQl35RmKtls6qnfOYiJm/b+bYVd
knbi6sSNS8HuESZu0JRquMOcv+3eEncKBXwVX7hcxLEuLtP+azqNKsNZIxKWewql
C3gykLXRFhHh6GRtyXcJ5z+8gPUgpQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGcI
W7WfaMxtHU9+b1A5sje/1aSpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OTREOEJCMjg3OUMxMUYwOTA3QzhGRTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnOEoMAwDBACc4SsDBACc4Sww
DQYJKoZIhvcNAQELBQADggEBAIVY2yVi4hPFAm1Sn0Fi9EBTpNPYJEWXuW2/9PvV
Mt3OKWHODieywKbabZdpaD5w7LLKLbTTGn92IQr6e+lxSPiPLkYCqWZsvINZL3Hk
o4xlocBPVPZRnDdSOySM3DbxRpSL7NE+r9bXIaZpHfEL4o6DfbYweSpIyzBinWg/
aO5YTYfHFhVpQT/TkCUxJHH/e6e12dZub70O0hByYGyzAHHqciGQeWqbVWO++n/m
S+iH0yfMmWaBObna3tXuEM0/Kel01SPce8gm73m0mWk4hmgB31EZ17bTHsyN0IpD
IPpel7Fh5yeb2z77bBco3L1+6YbsDsNk9Y0KYHO8eMJDjUM=
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:14:12 2025 by rpki-client