Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0CFE3488A911F0A0F1E0C2DAE4EC9C.roa
File: 6A0CFE3488A911F0A0F1E0C2DAE4EC9C.roa (raw, json)
Hash identifier: vPOmxdneToy6B5d0H0WCTrZqEUQLJfwPluhFzPKvNFM=
Subject key identifier: 7F:CE:19:38:2B:86:24:E5:04:F6:54:45:BE:45:FB:33:CF:7C:73:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01776B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0CFE3488A911F0A0F1E0C2DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 09:36:06 +0000
ROA not before: Wed 03 Sep 2025 09:36:01 +0000
ROA not after: Wed 08 Oct 2025 09:36:01 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
156.240.99.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96107 (0x1776b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 09:36:01 2025 GMT
Not After : Oct 8 09:36:01 2025 GMT
Subject: CN=68b80c06-7097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:8a:7f:a0:f8:54:ed:81:8b:84:7c:fb:41:
05:32:09:a0:5e:44:b8:10:1b:eb:1c:5e:8e:38:e3:
98:26:90:e0:85:c7:46:46:7a:43:74:a4:c2:19:d5:
9e:84:28:b7:90:73:5c:9b:dd:96:83:40:c1:b3:5b:
39:e1:f7:2d:f0:31:4f:03:d4:fd:07:55:f8:8e:90:
13:6d:64:85:18:e0:ea:36:d5:c4:17:be:c3:64:4d:
9d:d5:bb:3d:41:40:42:00:60:42:ab:6e:71:04:28:
b4:ef:a8:89:44:78:a8:9e:e6:e4:22:97:d0:2d:90:
5f:13:92:80:d3:76:b3:4a:98:d3:ba:cc:e9:49:8f:
da:3e:12:be:71:d3:03:0b:fc:4e:c6:b8:88:6a:e6:
c6:bf:71:ec:2d:ab:fa:01:41:06:67:29:fe:d9:ba:
e3:dd:f6:7f:5c:cc:8f:47:cd:57:f9:45:a8:43:6c:
a6:24:ea:37:59:80:8f:94:cb:e8:09:54:e2:c5:ab:
06:cc:a1:0b:af:d1:d8:24:45:ff:f8:95:a0:d0:f4:
6c:b8:56:30:0b:9a:dd:5e:c7:57:bd:fc:79:21:10:
31:71:38:c0:df:41:3f:02:b9:05:18:fb:59:60:b5:
0c:57:eb:01:58:29:fa:d3:75:4f:4d:2d:e9:ea:0e:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CE:19:38:2B:86:24:E5:04:F6:54:45:BE:45:FB:33:CF:7C:73:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0CFE3488A911F0A0F1E0C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.233.90.0-156.233.95.255
156.240.99.0/24
156.249.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5c:ed:0f:8a:13:c2:aa:ab:fd:d4:c8:f9:cc:51:97:ea:96:
71:2d:39:f1:de:51:9c:28:9a:08:be:eb:0c:84:37:fa:e9:c0:
dd:b7:ba:2d:96:3c:e9:e3:21:28:81:40:af:c6:42:da:24:49:
43:5e:56:5e:ae:cb:f1:6f:17:99:0a:a6:ee:8e:0f:ba:71:36:
31:25:d3:00:2f:f1:4b:a1:93:48:3b:c7:0d:4e:d8:68:ec:5e:
80:40:06:cd:a3:74:c5:05:f8:37:69:0c:e2:87:6c:2d:f7:ea:
73:47:77:7f:50:8d:c6:9e:ba:41:8e:17:f6:42:ad:47:d8:31:
73:92:c0:67:b2:bb:b7:f3:67:b0:df:20:f7:91:ad:49:e2:7e:
a5:70:d5:c8:2b:fa:fa:cf:28:7c:af:50:c8:cf:f2:77:00:35:
49:4f:27:30:1e:09:42:11:d1:2a:2c:1c:fa:a2:53:e8:9e:46:
e4:1f:76:66:77:ff:c8:88:f3:9e:81:e8:e4:2a:41:ae:de:70:
d0:3a:e6:f4:4a:57:4a:49:32:87:fb:52:03:08:fd:05:cd:e8:
ed:3b:9f:52:3e:df:cd:a6:df:62:ac:51:0f:63:17:91:3b:24:
24:24:30:96:b4:e1:40:ad:c7:99:71:5f:df:5b:c8:18:fa:28:
ba:8e:d4:48
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAXdrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAzMDkzNjAxWhcNMjUxMDA4MDkzNjAxWjAYMRYw
FAYDVQQDEw02OGI4MGMwNi03MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFWKf6D4VO2Bi4R8+0EFMgmgXkS4EBvrHF6OOOOYJpDghcdGRnpDdKTC
GdWehCi3kHNcm92Wg0DBs1s54fct8DFPA9T9B1X4jpATbWSFGODqNtXEF77DZE2d
1bs9QUBCAGBCq25xBCi076iJRHionubkIpfQLZBfE5KA03azSpjTuszpSY/aPhK+
cdMDC/xOxriIaubGv3HsLav6AUEGZyn+2brj3fZ/XMyPR81X+UWoQ2ymJOo3WYCP
lMvoCVTixasGzKELr9HYJEX/+JWg0PRsuFYwC5rdXsdXvfx5IRAxcTjA30E/ArkF
GPtZYLUMV+sBWCn603VPTS3p6g5GdQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFH/O
GTgrhiTlBPZURb5F+zPPfHPwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTBDRkUzNDg4QTkxMUYwQTBGMUUwQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACc5F8DBACc5GAwDAMEAZzp
WgMEBZzpQAMEAJzwYwMEAJz5iTANBgkqhkiG9w0BAQsFAAOCAQEAslztD4oTwqqr
/dTI+cxRl+qWcS058d5RnCiaCL7rDIQ3+unA3be6LZY86eMhKIFAr8ZC2iRJQ15W
Xq7L8W8XmQqm7o4PunE2MSXTAC/xS6GTSDvHDU7YaOxegEAGzaN0xQX4N2kM4ods
Lffqc0d3f1CNxp66QY4X9kKtR9gxc5LAZ7K7t/NnsN8g95GtSeJ+pXDVyCv6+s8o
fK9QyM/ydwA1SU8nMB4JQhHRKiwc+qJT6J5G5B92Znf/yIjznoHo5CpBrt5w0Drm
9EpXSkkyh/tSAwj9Bc3o7TufUj7fzabfYqxRD2MXkTskJCQwlrThQK3HmXFf31vI
GPoouo7USA==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:25:10 2025 by rpki-client