Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893127928C9911F092CD04D6DAE4EC9C.roa
File: 893127928C9911F092CD04D6DAE4EC9C.roa (raw, json)
Hash identifier: adXV14uD6usQejDkY5G1dk7Qi0yigor9YraMXuZrN0g=
Subject key identifier: DD:BE:A2:B0:C3:07:78:22:55:B5:61:B4:21:E4:A7:D2:9F:0C:A2:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893127928C9911F092CD04D6DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 09:52:31 +0000
ROA not before: Mon 08 Sep 2025 09:52:26 +0000
ROA not after: Wed 15 Oct 2025 09:52:26 +0000
asID: 29802
IP address blocks: 156.229.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96683 (0x179ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 09:52:26 2025 GMT
Not After : Oct 15 09:52:26 2025 GMT
Subject: CN=68bea75f-a688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:d9:0b:eb:a4:aa:5b:40:16:d4:62:79:63:
54:aa:e3:bf:09:bd:94:ba:bd:f9:4b:1f:af:2a:7f:
fa:56:3c:f7:64:4b:40:1b:b0:1e:ab:a7:c8:6c:68:
11:53:7d:04:92:67:06:90:c7:d4:59:7b:57:64:bc:
f8:c1:50:04:94:6f:d7:6e:11:cd:6f:68:e5:29:36:
f6:67:55:9f:cc:f5:ad:86:b0:5d:63:21:ea:00:b5:
1a:de:f7:67:9f:93:5a:c1:d9:c9:56:f9:44:09:44:
25:77:ea:da:16:3e:4e:5a:ba:d5:e8:3c:fb:93:06:
98:7c:15:c0:1e:cc:34:e9:48:3b:fe:eb:af:a3:2e:
79:d5:30:ac:7f:18:f2:66:fb:b9:e0:0b:5e:68:20:
3b:d7:6a:7c:dd:6e:ae:9b:df:5e:d0:09:61:76:f5:
86:f2:12:72:81:9e:75:93:bf:22:9e:29:74:89:be:
d7:52:d4:6d:0e:91:b7:3f:a9:47:e4:f9:82:d9:af:
4a:0b:e2:90:8d:45:0d:63:af:2d:07:4e:14:e2:23:
d1:d0:ec:0f:bf:d4:fb:3d:88:c0:f9:5f:75:05:a4:
2e:b0:dc:1e:95:dd:93:89:56:ed:59:b3:47:cb:de:
c8:d9:df:a7:8a:65:6e:7b:f1:ac:35:30:0f:4f:ab:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:A2:B0:C3:07:78:22:55:B5:61:B4:21:E4:A7:D2:9F:0C:A2:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893127928C9911F092CD04D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:09:2f:98:e3:38:3d:a7:fe:ac:75:93:68:b2:33:40:46:09:
c3:d0:fa:16:74:e5:b7:43:57:80:0d:43:41:78:70:98:f9:4c:
81:c4:e7:15:2d:af:4d:67:06:13:f5:92:6a:0d:b7:66:4e:81:
d3:46:69:c0:34:ef:82:31:ae:d9:13:28:10:4a:b9:c2:7f:2f:
8e:cc:23:e8:0a:5a:f0:5b:f7:07:c7:ec:da:3c:07:78:4a:8c:
ad:a8:6c:4a:03:3f:f5:b5:76:bd:e0:5a:4f:f2:c3:65:b6:3a:
42:1e:65:24:07:cc:eb:78:91:d6:0b:9c:e9:13:82:05:bf:a3:
cf:29:5d:03:4d:a4:ab:4a:a8:4c:3f:85:d4:c5:dd:4a:ff:58:
bf:e8:be:ac:6d:71:77:89:bf:3d:d5:c2:98:1e:8c:58:45:57:
cd:15:64:51:0f:ac:af:c5:0f:29:1c:f5:e4:46:4e:eb:c5:d0:
5f:40:fa:7a:ab:53:2d:cf:8d:85:84:70:9d:86:37:63:b5:65:
e7:61:1d:0a:b2:16:58:0e:c4:13:5b:07:84:39:a9:00:f6:4c:
64:8f:1a:97:ea:02:7f:4c:6e:a2:df:f6:15:53:82:05:f7:5a:
73:e6:e5:2c:6a:cc:42:c7:38:7e:a1:59:b3:4c:cb:12:11:5d:
62:33:2e:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXmrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA4MDk1MjI2WhcNMjUxMDE1MDk1MjI2WjAYMRYw
FAYDVQQDEw02OGJlYTc1Zi1hNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAod/ZC+ukqltAFtRieWNUquO/Cb2Uur35Sx+vKn/6Vjz3ZEtAG7Aeq6fI
bGgRU30EkmcGkMfUWXtXZLz4wVAElG/XbhHNb2jlKTb2Z1WfzPWthrBdYyHqALUa
3vdnn5NawdnJVvlECUQld+raFj5OWrrV6Dz7kwaYfBXAHsw06Ug7/uuvoy551TCs
fxjyZvu54AteaCA712p83W6um99e0AlhdvWG8hJygZ51k78inil0ib7XUtRtDpG3
P6lH5PmC2a9KC+KQjUUNY68tB04U4iPR0OwPv9T7PYjA+V91BaQusNweld2TiVbt
WbNHy97I2d+nimVue/GsNTAPT6uvEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN2+
orDDB3giVbVhtCHkp9KfDKLrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OTMxMjc5MjhDOTkxMUYwOTJDRDA0RDZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOWuMA0GCSqGSIb3DQEBCwUA
A4IBAQBvCS+Y4zg9p/6sdZNosjNARgnD0PoWdOW3Q1eADUNBeHCY+UyBxOcVLa9N
ZwYT9ZJqDbdmToHTRmnANO+CMa7ZEygQSrnCfy+OzCPoClrwW/cHx+zaPAd4Soyt
qGxKAz/1tXa94FpP8sNltjpCHmUkB8zreJHWC5zpE4IFv6PPKV0DTaSrSqhMP4XU
xd1K/1i/6L6sbXF3ib891cKYHoxYRVfNFWRRD6yvxQ8pHPXkRk7rxdBfQPp6q1Mt
z42FhHCdhjdjtWXnYR0KshZYDsQTWweEOakA9kxkjxqX6gJ/TG6i3/YVU4IF91pz
5uUsasxCxzh+oVmzTMsSEV1iMy7f
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:48:57 2025 by rpki-client