Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/717FF5C8947411F0ADBFE7ECDAE4EC9C.roa
File: 717FF5C8947411F0ADBFE7ECDAE4EC9C.roa (raw, json)
Hash identifier: Z8PVumqGZCVeRcsdWHbkzHZnC1lGVE30/ZGuM8GeQ9g=
Subject key identifier: 7D:58:7D:FC:BD:16:AB:7F:D3:D5:0A:7A:78:D9:F5:E6:E4:65:00:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/717FF5C8947411F0ADBFE7ECDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:47:09 +0000
ROA not before: Thu 18 Sep 2025 09:47:01 +0000
ROA not after: Thu 30 Oct 2025 09:47:01 +0000
asID: 152092
IP address blocks: 156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97269 (0x17bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:47:01 2025 GMT
Not After : Oct 30 09:47:01 2025 GMT
Subject: CN=68cbd51d-413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:df:5c:31:8c:00:c3:d2:e4:d3:66:6d:83:
c3:7a:3c:51:83:99:76:62:bc:81:64:af:2d:61:dc:
06:77:7d:1f:91:cd:a7:21:c8:02:56:d1:fc:b8:8e:
8c:d8:7e:b2:b4:03:5b:b3:79:36:36:8d:63:5b:78:
6a:41:76:42:db:5e:7b:ba:cb:5e:58:1c:aa:a0:f0:
66:c1:04:34:cb:3e:bd:05:b2:77:5b:5c:6a:89:c7:
37:de:71:fe:14:da:7c:8a:e4:58:ee:29:3c:6f:58:
9f:0d:09:69:38:c9:cd:00:1c:26:1d:32:d5:e0:21:
6d:0b:2f:f7:8c:8c:a9:ab:84:47:a5:d0:0f:ef:01:
8e:9f:77:65:3f:56:d7:f4:18:a2:3d:ab:45:49:e3:
16:af:4d:a9:bd:91:ef:d6:1d:12:9a:7b:32:a9:6f:
11:8c:f8:14:aa:94:38:2e:ea:76:46:1e:cf:d6:b9:
f9:51:47:de:c0:82:7d:bc:1d:75:4d:e1:e6:68:0e:
3d:d2:8b:52:17:76:1d:54:22:f2:bc:5b:f3:2f:27:
39:a2:c3:95:86:f3:03:e7:bc:5e:73:8a:a2:15:50:
f0:86:a4:a6:1d:f3:4f:e1:9a:e8:2f:cd:32:e2:d8:
09:2f:72:fa:86:4a:47:8d:ad:72:af:49:c8:cf:2f:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:7D:FC:BD:16:AB:7F:D3:D5:0A:7A:78:D9:F5:E6:E4:65:00:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/717FF5C8947411F0ADBFE7ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0-156.245.203.255
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b4:c0:96:9d:52:b0:90:aa:43:a2:b8:57:85:90:03:a1:75:
2e:68:b1:5f:9c:a4:59:a2:17:17:a9:c8:2f:82:17:6d:fa:71:
fc:5d:ee:84:a3:2f:65:0b:5d:8e:18:f4:42:82:ce:f9:a5:9c:
e6:ea:15:5d:9a:be:9a:9a:40:a6:ba:74:d2:fe:03:b1:97:c4:
85:42:0d:e8:29:ab:07:5b:d7:6f:e7:46:32:fd:a5:cd:03:a5:
48:0b:35:b1:54:d5:e2:87:07:43:83:1b:8b:ad:96:30:ff:33:
58:c2:0b:ef:1a:7e:53:75:b4:72:75:6b:a5:d0:6c:c3:04:71:
a1:29:df:26:ac:19:a1:3c:bc:29:f1:76:22:46:c9:c4:30:8a:
2d:ab:aa:ba:93:f6:cd:eb:da:3b:a1:9d:8b:2a:ca:1a:4b:40:
f2:5a:f0:4a:95:ad:06:81:7e:cd:8c:f9:a3:a7:4b:ff:af:84:
40:40:b3:56:f1:bc:83:e0:10:66:08:b5:0e:5f:9e:8d:8c:f2:
6d:b2:24:76:16:c5:f5:3f:59:0c:70:e2:01:5e:7a:d6:49:b6:
b8:be:15:e0:ce:89:79:98:15:f5:b8:22:68:ad:07:18:11:59:
08:f3:a2:29:eb:dd:3e:6f:1a:d2:c1:97:b1:d5:63:7d:06:c2:
7d:bb:1a:23
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAXv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE4MDk0NzAxWhcNMjUxMDMwMDk0NzAxWjAYMRYw
FAYDVQQDEw02OGNiZDUxZC00MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7vLfXDGMAMPS5NNmbYPDejxRg5l2YryBZK8tYdwGd30fkc2nIcgCVtH8
uI6M2H6ytANbs3k2No1jW3hqQXZC2157usteWByqoPBmwQQ0yz69BbJ3W1xqicc3
3nH+FNp8iuRY7ik8b1ifDQlpOMnNABwmHTLV4CFtCy/3jIypq4RHpdAP7wGOn3dl
P1bX9BiiPatFSeMWr02pvZHv1h0SmnsyqW8RjPgUqpQ4Lup2Rh7P1rn5UUfewIJ9
vB11TeHmaA490otSF3YdVCLyvFvzLyc5osOVhvMD57xec4qiFVDwhqSmHfNP4Zro
L80y4tgJL3L6hkpHja1yr0nIzy+6BQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFH1Y
ffy9Fqt/09UKenjZ9ebkZQCVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTdGRjVDODk0NzQxMUYwQURCRkU3RUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGc9cYDBAKc9cgDBACc9dEw
DQYJKoZIhvcNAQELBQADggEBAKO0wJadUrCQqkOiuFeFkAOhdS5osV+cpFmiFxep
yC+CF236cfxd7oSjL2ULXY4Y9EKCzvmlnObqFV2avpqaQKa6dNL+A7GXxIVCDegp
qwdb12/nRjL9pc0DpUgLNbFU1eKHB0ODG4utljD/M1jCC+8aflN1tHJ1a6XQbMME
caEp3yasGaE8vCnxdiJGycQwii2rqrqT9s3r2juhnYsqyhpLQPJa8EqVrQaBfs2M
+aOnS/+vhEBAs1bxvIPgEGYItQ5fno2M8m2yJHYWxfU/WQxw4gFeetZJtri+FeDO
iXmYFfW4ImitBxgRWQjzoinr3T5vGtLBl7HVY30Gwn27GiM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client