Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923F0774834711F0812C26A4DAE4EC9C.roa
File: 923F0774834711F0812C26A4DAE4EC9C.roa (raw, json)
Hash identifier: cGdGpIPtZbPbfdiBFS6lgpFh0PbHPjVjlXBRhagRQwQ=
Subject key identifier: 79:67:6A:71:51:AD:22:A0:04:C0:EB:E2:56:C3:0F:32:C6:AE:E3:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923F0774834711F0812C26A4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:13:07 +0000
ROA not before: Wed 27 Aug 2025 13:13:02 +0000
ROA not after: Sun 05 Oct 2025 13:13:02 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94645 (0x171b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:13:02 2025 GMT
Not After : Oct 5 13:13:02 2025 GMT
Subject: CN=68af0463-51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:ef:2e:eb:2b:f2:e6:88:4f:a5:a0:ed:b0:
45:46:28:5b:32:38:21:60:c3:32:de:ba:11:49:d0:
83:b4:c4:5f:6d:ab:69:93:b5:e5:27:e1:0f:97:a2:
ca:2d:8b:93:4c:4a:28:7a:37:68:02:65:2b:9d:d6:
87:a0:17:76:92:93:78:21:f3:80:1c:f3:e3:08:7d:
eb:83:73:ef:c2:d2:b8:f7:2a:29:62:af:13:a7:03:
af:73:44:2d:a5:45:34:80:5a:4b:35:a9:1c:6f:20:
b7:46:f2:3a:3e:ae:43:7b:e8:0c:dc:a0:1f:a1:4e:
dc:eb:68:04:98:75:58:e9:90:0c:e9:79:d4:e4:42:
9f:c8:b3:e7:eb:24:8e:ab:51:02:9b:ec:49:a5:cb:
2b:77:e4:cb:b9:f2:df:bc:f9:f3:0e:0a:6d:3a:14:
a0:41:36:33:85:3b:1e:ff:c1:a5:72:16:9c:3e:94:
35:26:63:88:05:6e:df:35:8c:0f:8c:8a:d9:49:c7:
fa:04:32:52:43:0d:86:28:cb:bc:c7:55:25:fc:38:
c7:8e:0c:29:a5:97:a8:8a:fd:70:7d:b0:50:52:af:
ad:6d:d7:3f:c3:d5:80:90:24:be:6d:27:0d:73:d3:
09:8a:30:5f:e4:cc:c8:b3:0b:30:b1:c0:aa:c9:54:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:6A:71:51:AD:22:A0:04:C0:EB:E2:56:C3:0F:32:C6:AE:E3:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923F0774834711F0812C26A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:45:77:f0:b4:68:38:1b:bd:0d:d3:e3:e7:bc:30:cb:51:
e2:d5:e0:b0:f9:a0:47:4c:99:e9:46:e7:48:7d:97:8d:b7:f7:
2d:39:31:c8:a8:01:fa:58:14:ef:b9:2c:e5:8f:e5:17:bc:b4:
d9:f8:da:0f:18:f1:91:ba:6a:f4:e0:d3:02:d4:fd:89:d3:78:
d9:1a:11:8c:59:3e:a1:57:16:74:3a:c6:7a:15:11:81:2d:f8:
89:95:dc:c7:b1:fd:b0:b7:cf:89:88:2a:a2:ae:a8:53:c3:f6:
3e:d7:9e:ed:e0:48:2e:d6:63:a6:97:9c:4d:f8:19:d4:c6:17:
8d:49:57:1d:72:fc:53:9f:ce:b9:92:ad:24:79:3b:f3:55:42:
f8:56:b4:b9:20:46:81:3f:64:a8:e5:35:bb:71:27:15:01:39:
ad:ed:56:fd:6b:d7:b0:c5:42:f1:0a:5b:31:ae:2d:72:3c:12:
fc:a7:ce:93:81:ec:6b:ec:e5:a2:30:5a:0a:3f:83:b0:ad:13:
86:fd:b0:27:5b:5f:e4:c8:d3:c6:76:b6:fe:73:ae:74:28:f2:
3f:0a:6b:74:c4:d8:8a:95:7c:33:e5:f7:48:66:10:f4:26:b8:
c2:7f:75:1e:fe:14:f7:cc:26:cb:28:48:ab:24:fe:bf:9b:e8:
1d:8d:65:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXG1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MTMxMzAyWhcNMjUxMDA1MTMxMzAyWjAYMRYw
FAYDVQQDEw02OGFmMDQ2My01MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0HvLusr8uaIT6Wg7bBFRihbMjghYMMy3roRSdCDtMRfbatpk7XlJ+EP
l6LKLYuTTEooejdoAmUrndaHoBd2kpN4IfOAHPPjCH3rg3PvwtK49yopYq8TpwOv
c0QtpUU0gFpLNakcbyC3RvI6Pq5De+gM3KAfoU7c62gEmHVY6ZAM6XnU5EKfyLPn
6ySOq1ECm+xJpcsrd+TLufLfvPnzDgptOhSgQTYzhTse/8GlchacPpQ1JmOIBW7f
NYwPjIrZScf6BDJSQw2GKMu8x1Ul/DjHjgwppZeoiv1wfbBQUq+tbdc/w9WAkCS+
bScNc9MJijBf5MzIswswscCqyVS2SQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHln
anFRrSKgBMDr4lbDDzLGruPaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjNGMDc3NDgzNDcxMUYwODEyQzI2QTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOBJMA0GCSqGSIb3DQEBCwUA
A4IBAQBhzEV38LRoOBu9DdPj57wwy1Hi1eCw+aBHTJnpRudIfZeNt/ctOTHIqAH6
WBTvuSzlj+UXvLTZ+NoPGPGRumr04NMC1P2J03jZGhGMWT6hVxZ0OsZ6FRGBLfiJ
ldzHsf2wt8+JiCqirqhTw/Y+157t4Egu1mOml5xN+BnUxheNSVcdcvxTn865kq0k
eTvzVUL4VrS5IEaBP2So5TW7cScVATmt7Vb9a9ewxULxClsxri1yPBL8p86Tgexr
7OWiMFoKP4OwrROG/bAnW1/kyNPGdrb+c650KPI/Cmt0xNiKlXwz5fdIZhD0JrjC
f3Ue/hT3zCbLKEirJP6/m+gdjWVL
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:53:27 2025 by rpki-client