Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AB765D8A99611F0A5BF7DCFDAE4EC9C.roa
File: 5AB765D8A99611F0A5BF7DCFDAE4EC9C.roa (raw, json)
Hash identifier: neg59LEAM/ua0HYEHxwcNnaCnYlVblSAlFCM27rONAw=
Subject key identifier: 30:A1:96:5C:08:50:1B:8E:61:A0:DA:DE:AE:E6:2A:43:7C:5E:81:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018084
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AB765D8A99611F0A5BF7DCFDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 07:12:49 +0000
ROA not before: Wed 15 Oct 2025 07:12:43 +0000
ROA not after: Sat 15 Nov 2025 07:12:43 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98436 (0x18084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 07:12:43 2025 GMT
Not After : Nov 15 07:12:43 2025 GMT
Subject: CN=68ef4970-6081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:d5:1e:47:04:51:a1:98:0e:a7:74:32:e2:
f4:9b:fc:89:70:dd:0c:8d:63:ca:e6:11:12:de:74:
67:6f:7c:a4:53:40:e4:b8:53:16:bd:7e:9f:f7:7a:
5c:5b:70:29:bd:06:77:33:9c:4c:45:a6:cb:c7:55:
a4:06:41:9e:39:38:3c:a3:85:56:76:5c:de:67:14:
50:88:e4:6a:25:f4:e8:4b:8f:69:81:91:a9:88:43:
97:b6:6b:8c:67:10:b3:78:64:2d:eb:c2:ee:f5:ca:
d4:bb:2b:2e:ec:77:7f:e9:59:af:f4:43:07:b8:ea:
66:61:e3:12:45:a4:93:2e:34:53:17:4b:b4:47:a4:
27:90:57:b8:9c:c3:8e:24:b0:0b:9e:2e:d6:be:91:
39:98:0b:26:5b:3b:96:03:34:ba:c6:15:19:d1:39:
46:0b:f8:b3:dd:1d:3a:22:e2:04:b1:1f:53:8e:3b:
76:88:c6:42:d0:2c:0f:d4:b7:1e:04:81:a7:dd:e7:
48:b7:51:36:7f:96:b0:37:df:11:c7:fd:13:d0:4d:
f8:36:c4:e0:45:55:37:fb:72:e8:bf:8f:ba:57:a8:
e2:e6:05:0a:11:3c:dd:19:9f:26:06:52:1f:f0:c8:
99:7a:10:4d:7a:fe:c5:5a:61:46:03:f9:3f:48:de:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:96:5C:08:50:1B:8E:61:A0:DA:DE:AE:E6:2A:43:7C:5E:81:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AB765D8A99611F0A5BF7DCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
95:2c:a4:82:11:d7:bc:4d:bc:a3:d8:5d:45:77:d6:98:e2:dc:
f7:27:bc:eb:eb:2d:96:17:50:26:a9:f3:cc:f2:f9:86:e1:30:
e5:7b:d3:6e:fa:e1:f4:00:1e:af:17:35:cf:43:ed:8b:59:6a:
cb:60:5a:75:bd:7a:71:6b:e0:f7:c4:56:a4:c3:51:78:cf:45:
c3:41:c2:63:ea:f9:de:04:37:78:ac:8d:6b:cb:4a:29:6c:13:
95:e2:ce:d8:cd:c9:cb:dc:d0:e1:42:6a:ec:4f:fd:07:4d:09:
09:82:b0:da:f9:5c:0f:ca:8a:ee:64:d6:7a:59:59:c2:e3:10:
12:0a:97:3c:a2:2e:b6:ca:fe:b3:87:71:65:08:bc:33:b3:ff:
4b:29:63:44:41:12:21:cb:40:b3:aa:f6:28:43:b5:8f:a9:78:
91:f6:f5:90:8d:a5:85:16:af:20:19:a1:e5:b3:5e:dd:5d:ee:
8c:4f:25:09:cd:16:87:0a:b1:2a:e1:05:86:95:56:ff:9f:35:
c1:55:9f:57:da:15:aa:c2:9d:0e:f9:fa:ab:a9:d1:aa:d4:fd:
a8:6c:a6:fc:ad:6d:b7:fb:81:ea:01:9b:0e:99:98:fe:6e:fe:
33:76:f5:94:5b:c1:79:39:02:09:89:70:fb:d7:4b:1a:02:e2:
9e:24:12:46
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYCEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDE1MDcxMjQzWhcNMjUxMTE1MDcxMjQzWjAYMRYw
FAYDVQQDEw02OGVmNDk3MC02MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0yTVHkcEUaGYDqd0MuL0m/yJcN0MjWPK5hES3nRnb3ykU0DkuFMWvX6f
93pcW3ApvQZ3M5xMRabLx1WkBkGeOTg8o4VWdlzeZxRQiORqJfToS49pgZGpiEOX
tmuMZxCzeGQt68Lu9crUuysu7Hd/6Vmv9EMHuOpmYeMSRaSTLjRTF0u0R6QnkFe4
nMOOJLALni7WvpE5mAsmWzuWAzS6xhUZ0TlGC/iz3R06IuIEsR9Tjjt2iMZC0CwP
1LceBIGn3edIt1E2f5awN98Rx/0T0E34NsTgRVU3+3Lov4+6V6ji5gUKETzdGZ8m
BlIf8MiZehBNev7FWmFGA/k/SN4mPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDCh
llwIUBuOYaDa3q7mKkN8XoEDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QUI3NjVEOEE5OTYxMUYwQTVCRjdEQ0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOKwMA0GCSqGSIb3DQEBCwUA
A4IBAQCVLKSCEde8Tbyj2F1Fd9aY4tz3J7zr6y2WF1AmqfPM8vmG4TDle9Nu+uH0
AB6vFzXPQ+2LWWrLYFp1vXpxa+D3xFakw1F4z0XDQcJj6vneBDd4rI1ry0opbBOV
4s7YzcnL3NDhQmrsT/0HTQkJgrDa+VwPyoruZNZ6WVnC4xASCpc8oi62yv6zh3Fl
CLwzs/9LKWNEQRIhy0CzqvYoQ7WPqXiR9vWQjaWFFq8gGaHls17dXe6MTyUJzRaH
CrEq4QWGlVb/nzXBVZ9X2hWqwp0O+fqrqdGq1P2obKb8rW23+4HqAZsOmZj+bv4z
dvWUW8F5OQIJiXD710saAuKeJBJG
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:42 2025 by rpki-client