Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A9194088BF11F0A20031CEDAE4EC9C.roa
File: 59A9194088BF11F0A20031CEDAE4EC9C.roa (raw, json)
Hash identifier: 9uzbgFltHJ0HNxbhOX6gKKFBo6jZi13WzDtz8Px/AcE=
Subject key identifier: 92:0E:85:4F:CC:20:69:AC:B6:5A:83:7B:78:8A:7C:B2:2A:03:3D:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017790
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A9194088BF11F0A20031CEDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 12:13:08 +0000
ROA not before: Wed 03 Sep 2025 12:13:03 +0000
ROA not after: Fri 10 Oct 2025 12:13:03 +0000
asID: 40779
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96144 (0x17790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 12:13:03 2025 GMT
Not After : Oct 10 12:13:03 2025 GMT
Subject: CN=68b830d4-f615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:55:4e:3c:1b:99:30:90:99:c0:f8:40:9b:
7e:ba:b8:a3:6a:ad:2c:9d:bd:98:d5:d1:c7:48:fc:
6b:7b:ac:b9:0d:1f:12:57:29:96:72:e8:73:51:ed:
f4:9e:93:77:61:4e:f9:55:17:75:ba:c1:55:4d:86:
ce:cf:92:95:be:85:a8:d1:85:1f:2d:2d:26:5f:02:
11:34:0c:3f:ba:f1:10:f2:62:90:6b:26:0f:80:eb:
ed:9d:02:a1:53:4f:ee:23:98:43:21:7b:ff:c2:e4:
43:48:5d:6b:b0:b6:08:ec:89:09:dd:3a:6f:a1:3e:
8c:32:a7:d3:13:8b:cc:28:e2:0d:5f:0f:2d:a8:a0:
3d:ee:0c:9c:f8:69:ec:60:6f:ad:bd:30:84:b2:14:
e6:78:1e:e7:6b:f6:6b:be:3d:5c:0c:58:0b:97:a6:
35:52:5d:58:8c:4d:ba:5d:11:11:f9:57:ac:94:cd:
98:e9:d7:cc:f5:e3:63:f1:74:44:ce:2f:b7:e9:8b:
12:3d:d1:58:63:29:69:71:68:5e:98:31:f6:db:a4:
f0:aa:36:83:f4:58:c3:6d:b3:99:46:6d:ec:52:ae:
33:4e:df:fb:42:de:f2:9d:45:70:ae:ad:87:fc:83:
0a:45:cf:b0:ec:db:5b:b6:c7:c9:98:9e:19:73:07:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:85:4F:CC:20:69:AC:B6:5A:83:7B:78:8A:7C:B2:2A:03:3D:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A9194088BF11F0A20031CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:f8:34:3f:3e:a1:4b:b1:eb:ed:3e:a3:7e:54:ee:c4:d1:66:
af:36:67:40:77:6e:45:82:17:d8:47:9e:b2:ea:7d:68:b5:71:
9d:0d:02:78:fa:f8:98:1f:0a:57:b3:9f:f4:64:02:83:c9:1a:
42:11:3e:fd:bb:80:8a:94:1f:d1:df:31:24:ff:6d:9a:98:0a:
ae:fe:ca:ec:b1:09:46:ac:cb:cf:39:58:13:5f:dd:6e:00:6d:
d9:cd:49:13:5e:6c:96:0d:51:53:91:ae:6c:c6:2a:e5:06:78:
56:bc:60:c7:29:58:46:e1:b2:e9:3d:b8:70:01:5b:d0:1e:33:
9e:bb:b4:82:25:1e:3a:74:39:37:98:79:c0:0c:a0:68:75:66:
35:f4:72:e7:db:2f:c6:c8:f3:bf:62:5d:98:b8:db:ce:c4:33:
a5:eb:24:9c:b6:6c:4d:da:64:4c:ba:1b:82:7e:90:55:35:9a:
31:fc:38:72:2e:b2:6f:60:27:0d:cd:58:9d:15:ac:c2:2a:9b:
a4:c4:55:c0:bc:c5:04:f4:58:01:f0:d7:f4:9c:0b:1a:d6:5e:
8e:89:23:1a:72:c5:91:c2:af:39:e1:0b:34:cb:9c:60:a8:32:
d6:55:2d:1a:7e:3d:6c:5e:22:e6:2b:9d:b5:b3:66:12:f3:62:
be:53:2e:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXeQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAzMTIxMzAzWhcNMjUxMDEwMTIxMzAzWjAYMRYw
FAYDVQQDEw02OGI4MzBkNC1mNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVpVTjwbmTCQmcD4QJt+urijaq0snb2Y1dHHSPxre6y5DR8SVymWcuhz
Ue30npN3YU75VRd1usFVTYbOz5KVvoWo0YUfLS0mXwIRNAw/uvEQ8mKQayYPgOvt
nQKhU0/uI5hDIXv/wuRDSF1rsLYI7IkJ3TpvoT6MMqfTE4vMKOINXw8tqKA97gyc
+GnsYG+tvTCEshTmeB7na/Zrvj1cDFgLl6Y1Ul1YjE26XRER+VeslM2Y6dfM9eNj
8XREzi+36YsSPdFYYylpcWhemDH226TwqjaD9FjDbbOZRm3sUq4zTt/7Qt7ynUVw
rq2H/IMKRc+w7NtbtsfJmJ4ZcwdDhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJIO
hU/MIGmstlqDe3iKfLIqAz0xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OUE5MTk0MDg4QkYxMUYwQTIwMDMxQ0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQBd+DQ/PqFLsevtPqN+VO7E0WavNmdAd25FghfYR56y6n1otXGdDQJ4+viY
HwpXs5/0ZAKDyRpCET79u4CKlB/R3zEk/22amAqu/srssQlGrMvPOVgTX91uAG3Z
zUkTXmyWDVFTka5sxirlBnhWvGDHKVhG4bLpPbhwAVvQHjOeu7SCJR46dDk3mHnA
DKBodWY19HLn2y/GyPO/Yl2YuNvOxDOl6ySctmxN2mRMuhuCfpBVNZox/DhyLrJv
YCcNzVidFazCKpukxFXAvMUE9FgB8Nf0nAsa1l6OiSMacsWRwq854Qs0y5xgqDLW
VS0afj1sXiLmK521s2YS82K+Uy7O
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:18 2025 by rpki-client