Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCBA9A28CA511F0BFFD5EA4DAE4EC9C.roa
File: 8CCBA9A28CA511F0BFFD5EA4DAE4EC9C.roa (raw, json)
Hash identifier: IzD25NsoQ+pt4KTtrZ1OWYC25HAVX8u3nBTdIJNJ1yQ=
Subject key identifier: 25:03:C2:F8:E0:BE:7E:B4:28:69:2A:32:E8:07:7F:81:E3:98:31:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCBA9A28CA511F0BFFD5EA4DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:18:31 +0000
ROA not before: Mon 08 Sep 2025 11:18:26 +0000
ROA not after: Wed 22 Oct 2025 11:18:26 +0000
asID: 401696
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96711 (0x179c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 11:18:26 2025 GMT
Not After : Oct 22 11:18:26 2025 GMT
Subject: CN=68bebb87-c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:0f:8c:ac:a9:e5:a8:36:c0:4c:28:7e:e6:
20:6f:11:22:b4:05:7e:28:15:71:8d:a9:bb:f2:bb:
76:03:42:1b:a2:cd:81:73:19:24:99:82:95:13:d1:
17:11:95:cb:55:5f:ad:67:0a:8a:04:2e:6f:2a:3a:
1c:4b:2e:bd:66:7e:cc:01:55:2b:a4:8f:7b:c4:fc:
33:89:fc:dd:d9:58:76:82:b6:9e:f5:61:63:ca:6f:
af:2a:7d:ee:18:d1:cc:76:83:97:cc:9c:6e:0f:67:
6b:b9:0b:00:38:37:86:a4:ca:98:63:da:36:dd:00:
c5:89:4e:75:7b:b9:1b:fa:c0:ee:c3:a6:f8:b1:80:
38:17:bf:ad:bc:35:9b:3d:7a:70:b6:29:7e:2b:5a:
db:c7:69:9f:58:5c:84:0d:0e:fe:3d:d8:fc:02:3f:
22:14:e5:86:73:62:e8:4d:9e:3a:cb:c1:c2:98:1e:
62:2d:14:66:a1:29:ae:fe:8f:a7:c8:73:c9:6e:e5:
a9:bc:8a:39:3a:92:88:6c:55:4b:00:b5:a0:9f:1c:
17:c4:aa:b7:59:e3:c9:90:4c:af:46:5e:a5:62:8d:
db:7d:51:3d:60:01:46:7c:98:f8:8b:28:38:89:ad:
da:e9:ab:95:b8:1b:e4:58:5d:0a:74:61:bd:c7:7f:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:C2:F8:E0:BE:7E:B4:28:69:2A:32:E8:07:7F:81:E3:98:31:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCBA9A28CA511F0BFFD5EA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:f0:0c:e8:3e:d6:9f:18:81:1e:d3:08:8c:a8:c6:9d:4d:68:
a2:8b:43:74:58:17:15:a1:99:d3:b6:31:96:b9:bf:9e:90:62:
23:11:7f:e8:59:cc:f8:38:cb:ce:69:03:b8:6d:9e:35:c3:79:
8a:a7:ea:04:5c:21:04:4a:c7:48:6c:00:60:e4:de:79:1f:c5:
c5:19:f3:f8:14:4b:01:3d:f5:e1:20:c1:bf:cf:1e:4b:b6:ad:
1a:8c:0a:64:77:8a:22:7c:1d:23:6f:bf:5f:00:6a:27:68:26:
e8:2a:b4:50:1e:0a:8a:0a:96:18:b1:86:ce:09:66:26:a4:e2:
47:4c:3b:0b:2e:a4:e8:33:09:bc:79:dc:2b:ab:bc:61:52:28:
17:2e:40:f6:52:00:52:39:28:b6:9a:e1:99:57:a9:33:25:d4:
3c:9a:a7:24:4c:25:1a:95:66:c8:30:b1:79:56:de:f9:20:ce:
55:5e:b9:e9:67:89:44:d0:4d:d2:08:68:31:f7:ba:1c:7a:95:
e6:03:6f:ea:ab:2d:a5:f9:1e:c9:c7:ec:a0:3d:da:81:1c:19:
fd:96:87:7d:49:95:88:9b:88:3c:98:8f:3d:97:26:e3:d3:43:
c6:f6:f9:3b:e7:fe:41:6f:8a:69:b1:0b:84:ef:8c:65:b6:6c:
ff:9b:59:c3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXnHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA4MTExODI2WhcNMjUxMDIyMTExODI2WjAYMRYw
FAYDVQQDEw02OGJlYmI4Ny1jM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2RAPjKyp5ag2wEwofuYgbxEitAV+KBVxjam78rt2A0Ibos2BcxkkmYKV
E9EXEZXLVV+tZwqKBC5vKjocSy69Zn7MAVUrpI97xPwzifzd2Vh2grae9WFjym+v
Kn3uGNHMdoOXzJxuD2druQsAODeGpMqYY9o23QDFiU51e7kb+sDuw6b4sYA4F7+t
vDWbPXpwtil+K1rbx2mfWFyEDQ7+Pdj8Aj8iFOWGc2LoTZ46y8HCmB5iLRRmoSmu
/o+nyHPJbuWpvIo5OpKIbFVLALWgnxwXxKq3WePJkEyvRl6lYo3bfVE9YAFGfJj4
iyg4ia3a6auVuBvkWF0KdGG9x3/hrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCUD
wvjgvn60KGkqMugHf4HjmDGoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Q0NCQTlBMjhDQTUxMUYwQkZGRDVFQTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQB88AzoPtafGIEe0wiMqMadTWiii0N0WBcVoZnTtjGWub+ekGIjEX/oWcz4
OMvOaQO4bZ41w3mKp+oEXCEESsdIbABg5N55H8XFGfP4FEsBPfXhIMG/zx5Ltq0a
jApkd4oifB0jb79fAGonaCboKrRQHgqKCpYYsYbOCWYmpOJHTDsLLqToMwm8edwr
q7xhUigXLkD2UgBSOSi2muGZV6kzJdQ8mqckTCUalWbIMLF5Vt75IM5VXrnpZ4lE
0E3SCGgx97ocepXmA2/qqy2l+R7Jx+ygPdqBHBn9lod9SZWIm4g8mI89lybj00PG
9vk75/5Bb4ppsQuE74xltmz/m1nD
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:03 2025 by rpki-client