Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82945E0693A911F0A428E4CADAE4EC9C.roa
File: 82945E0693A911F0A428E4CADAE4EC9C.roa (raw, json)
Hash identifier: UFFxlIuArz0YM/MfTCeuvPT+lMOp3wH6mwEP7PPWkEo=
Subject key identifier: BA:ED:0A:AB:80:15:7F:68:BE:54:3A:F3:C9:FE:16:22:4B:39:46:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82945E0693A911F0A428E4CADAE4EC9C.roa
Signing time: Wed 17 Sep 2025 09:34:30 +0000
ROA not before: Wed 17 Sep 2025 09:34:25 +0000
ROA not after: Mon 06 Oct 2025 09:34:25 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97212 (0x17bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 09:34:25 2025 GMT
Not After : Oct 6 09:34:25 2025 GMT
Subject: CN=68ca80a6-df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:59:4d:78:a6:fc:12:1b:dd:d4:d1:f8:26:
04:c1:cc:d6:e7:99:f1:04:cd:ed:47:c8:2f:80:69:
5d:ba:44:90:95:f2:94:f2:30:19:e3:64:4c:48:37:
d7:b2:00:1d:4c:06:7f:80:c3:46:db:49:be:c1:a8:
97:f7:40:b1:fe:2d:63:82:19:46:6b:f9:30:d5:5f:
22:1a:2a:19:8f:ff:a9:bb:5b:19:2a:99:0d:ce:c2:
61:5f:b2:1a:9c:33:3a:6d:cb:0a:76:7d:7c:0a:df:
d7:89:80:06:14:20:3d:86:7b:0e:e4:33:c1:b8:c0:
ee:59:e0:50:24:3a:4b:9f:8f:31:63:e0:82:32:79:
59:de:ee:08:32:36:9e:fa:24:72:62:0e:bd:ca:ac:
d9:60:0f:20:b6:3a:46:02:97:45:51:27:96:a5:37:
0f:35:47:b1:c3:f6:ff:bf:a6:49:a0:99:d0:81:64:
91:40:13:df:94:55:77:ae:a3:f3:89:15:7a:18:5e:
91:90:83:fd:52:3e:75:59:fa:cc:a8:f5:dc:36:4d:
e1:34:9b:2e:56:8c:cc:b6:20:7b:81:9a:d9:d8:81:
e4:71:16:eb:fe:a8:66:bd:33:53:6c:19:c7:ff:20:
1f:45:8e:a3:be:45:9e:70:6c:67:9e:47:b1:10:8e:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:0A:AB:80:15:7F:68:BE:54:3A:F3:C9:FE:16:22:4B:39:46:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82945E0693A911F0A428E4CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
60:fa:e2:6e:e5:85:cc:3d:70:5f:ec:26:95:9f:38:31:af:b7:
42:bb:12:6b:2d:05:90:a0:4b:ce:ba:a8:34:a2:ab:66:71:68:
4e:fa:a0:f6:63:84:a7:29:c3:1e:be:9e:93:f6:e8:28:66:0e:
55:34:ff:bd:d9:77:f2:05:bb:87:0b:a2:07:dd:ff:b7:5d:ca:
37:86:7b:77:fd:c9:bc:58:ce:15:17:46:ae:94:77:ec:4f:90:
a0:e4:47:38:6f:e4:65:b2:bf:af:78:4a:5e:33:6f:47:1f:5e:
c3:ba:60:57:60:25:4d:9e:78:ff:ed:18:d7:a7:1c:93:c5:63:
08:43:28:27:ba:fa:20:ec:6a:dc:76:a9:49:4f:d1:3f:10:d9:
26:43:17:3d:97:59:89:7d:94:67:90:f7:fd:9c:f8:ae:06:d0:
eb:e0:c6:02:41:99:91:25:c4:53:de:e7:ef:90:54:a6:7d:70:
8d:0c:69:f8:70:ad:34:a5:dd:e3:ba:3b:8e:04:4d:33:ff:c5:
46:27:a6:d2:f6:80:e7:5d:7e:dc:17:14:b7:77:74:b7:e6:cf:
93:16:f5:d8:65:00:c0:7e:b2:2e:d4:fe:ff:3c:6e:68:d0:09:
3d:55:a4:8c:c6:01:f6:f1:86:61:ba:bb:ef:cf:06:f9:6c:5f:
4d:5e:52:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXu8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE3MDkzNDI1WhcNMjUxMDA2MDkzNDI1WjAYMRYw
FAYDVQQDEw02OGNhODBhNi1kZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvypZTXim/BIb3dTR+CYEwczW55nxBM3tR8gvgGldukSQlfKU8jAZ42RM
SDfXsgAdTAZ/gMNG20m+waiX90Cx/i1jghlGa/kw1V8iGioZj/+pu1sZKpkNzsJh
X7IanDM6bcsKdn18Ct/XiYAGFCA9hnsO5DPBuMDuWeBQJDpLn48xY+CCMnlZ3u4I
Mjae+iRyYg69yqzZYA8gtjpGApdFUSeWpTcPNUexw/b/v6ZJoJnQgWSRQBPflFV3
rqPziRV6GF6RkIP9Uj51WfrMqPXcNk3hNJsuVozMtiB7gZrZ2IHkcRbr/qhmvTNT
bBnH/yAfRY6jvkWecGxnnkexEI4C/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLrt
CquAFX9ovlQ688n+FiJLOUYGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Mjk0NUUwNjkzQTkxMUYwQTQyOEU0Q0FEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnPiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBg+uJu5YXMPXBf7CaVnzgxr7dCuxJrLQWQoEvOuqg0oqtmcWhO+qD2Y4Sn
KcMevp6T9ugoZg5VNP+92XfyBbuHC6IH3f+3Xco3hnt3/cm8WM4VF0aulHfsT5Cg
5Ec4b+Rlsr+veEpeM29HH17DumBXYCVNnnj/7RjXpxyTxWMIQygnuvog7GrcdqlJ
T9E/ENkmQxc9l1mJfZRnkPf9nPiuBtDr4MYCQZmRJcRT3ufvkFSmfXCNDGn4cK00
pd3jujuOBE0z/8VGJ6bS9oDnXX7cFxS3d3S35s+TFvXYZQDAfrIu1P7/PG5o0Ak9
VaSMxgH28YZhurvvzwb5bF9NXlJo
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:40:04 2025 by rpki-client