Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A05F1F8407F11F0B2DE54B7DAE4EC9C.roa
File: 9A05F1F8407F11F0B2DE54B7DAE4EC9C.roa (raw, json)
Hash identifier: /NRThcAonmSayVUQPxH/0DxxSXEH7dFM6a1jECq4NNg=
Subject key identifier: 42:11:68:02:03:D1:FD:CB:C3:D3:0D:15:FB:8A:E5:D4:EA:3A:FF:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01598E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A05F1F8407F11F0B2DE54B7DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 13:35:24 +0000
ROA not before: Tue 03 Jun 2025 13:35:18 +0000
ROA not after: Sun 28 Sep 2025 13:35:18 +0000
asID: 329278
IP address blocks: 156.232.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88462 (0x1598e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 13:35:18 2025 GMT
Not After : Sep 28 13:35:18 2025 GMT
Subject: CN=683efa1c-84f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:6a:83:74:46:d7:b2:37:fc:7c:0e:37:b9:
66:66:73:22:61:1c:eb:cd:0a:43:86:36:13:d4:c9:
1f:36:0f:ad:99:22:10:1a:9b:ba:53:6f:cb:75:38:
ad:e5:ac:f1:ae:68:59:50:20:c2:a3:d4:8e:ad:81:
1e:e7:57:a8:7b:e1:c3:09:86:87:dc:77:f0:ec:5b:
af:d7:6f:24:7c:28:a9:8c:9a:60:2a:12:e6:ed:d5:
95:60:dc:9f:33:a0:b6:56:d7:e4:ae:37:fb:9b:88:
14:09:e4:48:f3:0b:26:e2:dc:81:55:ff:f9:ce:aa:
95:55:f9:4e:2f:6a:af:67:bb:da:73:6d:46:bd:78:
01:23:44:46:f6:a6:1f:7e:da:fb:00:36:d4:bf:8f:
48:37:50:e5:a9:f8:51:ac:23:d5:29:29:fd:47:3e:
55:b2:42:cd:c0:5c:91:26:62:93:b3:76:7c:c3:6d:
58:8c:ba:67:90:81:6d:2f:80:03:c8:a6:16:a4:47:
4d:a0:d0:75:03:b6:0c:b3:83:bf:bb:19:b5:a2:8a:
59:c4:e2:cf:22:49:2f:ee:d5:42:d4:16:e8:6f:31:
a0:82:af:c6:f5:8a:c1:ef:64:d4:d3:89:4c:6d:e2:
86:d6:76:cc:fe:47:74:ab:54:3b:af:63:60:24:b5:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:68:02:03:D1:FD:CB:C3:D3:0D:15:FB:8A:E5:D4:EA:3A:FF:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A05F1F8407F11F0B2DE54B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:42:ae:16:c5:87:6d:74:b5:0c:3b:f0:8f:8f:1d:ad:00:b2:
ae:1c:0f:ea:06:f5:4c:4e:3a:a2:e7:bb:e9:94:a0:3c:bf:1d:
55:72:6c:e8:53:f6:c5:d7:68:f1:ab:38:d8:f6:9a:33:f9:ac:
28:6d:5a:60:70:73:44:4f:6f:51:e0:c0:5f:04:46:da:51:1c:
28:89:13:db:74:24:19:a0:1a:29:da:7b:19:9f:c9:6c:d4:d2:
d0:46:c0:7a:d7:9f:f1:74:9e:dc:1a:a9:c5:78:bf:36:40:4c:
95:a9:9e:cc:17:43:91:9d:cc:d3:38:91:bd:c8:79:fa:3f:b4:
eb:8e:9d:9c:56:6b:89:51:c9:f6:5c:86:df:a1:10:1a:5a:fd:
e3:3f:11:65:6d:c9:37:26:0a:7a:02:b1:da:39:94:fa:57:af:
3e:2a:3c:f8:b1:5c:07:7b:46:93:40:91:bf:df:64:68:e4:4c:
21:ae:b6:df:bc:d5:1d:55:d5:b4:36:35:ce:da:68:7d:f6:0b:
15:8a:a9:b7:8d:42:9f:d8:35:31:c4:84:bb:64:4f:af:18:e1:
44:fb:9a:fc:59:10:ee:5b:cb:e1:51:64:99:81:22:46:d6:60:
df:93:99:94:4c:5e:0f:09:d3:de:18:60:ce:e8:dc:27:a0:0c:
9e:52:4d:28
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVmOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjAzMTMzNTE4WhcNMjUwOTI4MTMzNTE4WjAYMRYw
FAYDVQQDEw02ODNlZmExYy04NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8Zqg3RG17I3/HwON7lmZnMiYRzrzQpDhjYT1MkfNg+tmSIQGpu6U2/L
dTit5azxrmhZUCDCo9SOrYEe51eoe+HDCYaH3Hfw7Fuv128kfCipjJpgKhLm7dWV
YNyfM6C2Vtfkrjf7m4gUCeRI8wsm4tyBVf/5zqqVVflOL2qvZ7vac21GvXgBI0RG
9qYfftr7ADbUv49IN1DlqfhRrCPVKSn9Rz5VskLNwFyRJmKTs3Z8w21YjLpnkIFt
L4ADyKYWpEdNoNB1A7YMs4O/uxm1oopZxOLPIkkv7tVC1BbobzGggq/G9YrB72TU
04lMbeKG1nbM/kd0q1Q7r2NgJLXziQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEIR
aAID0f3Lw9MNFfuK5dTqOv+5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTA1RjFGODQwN0YxMUYwQjJERTU0QjdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOhYMA0GCSqGSIb3DQEBCwUA
A4IBAQCeQq4WxYdtdLUMO/CPjx2tALKuHA/qBvVMTjqi57vplKA8vx1VcmzoU/bF
12jxqzjY9poz+awobVpgcHNET29R4MBfBEbaURwoiRPbdCQZoBop2nsZn8ls1NLQ
RsB615/xdJ7cGqnFeL82QEyVqZ7MF0ORnczTOJG9yHn6P7Trjp2cVmuJUcn2XIbf
oRAaWv3jPxFlbck3Jgp6ArHaOZT6V68+Kjz4sVwHe0aTQJG/32Ro5EwhrrbfvNUd
VdW0NjXO2mh99gsViqm3jUKf2DUxxIS7ZE+vGOFE+5r8WRDuW8vhUWSZgSJG1mDf
k5mUTF4PCdPeGGDO6NwnoAyeUk0o
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:22:24 2025 by rpki-client