Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4774BC825A11F0A2D67897DAE4EC9C.roa
File: 9A4774BC825A11F0A2D67897DAE4EC9C.roa (raw, json)
Hash identifier: F4LR9U1yorZ+T0PEkHimR+qChW+3PRK1hzysbS1HI30=
Subject key identifier: 05:A1:BD:53:AA:64:E5:E0:BC:41:6C:2F:39:65:FD:F7:81:FD:FA:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01705E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4774BC825A11F0A2D67897DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:56:50 +0000
ROA not before: Tue 26 Aug 2025 08:56:45 +0000
ROA not after: Mon 29 Sep 2025 08:56:45 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94302 (0x1705e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 08:56:45 2025 GMT
Not After : Sep 29 08:56:45 2025 GMT
Subject: CN=68ad76d2-e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:c6:f2:db:2e:8c:7f:8f:c4:b8:6c:24:95:
b6:b9:cf:a8:0a:c9:78:4a:21:58:4c:5e:f9:bd:a1:
e3:f6:d9:1f:45:fb:e6:cc:c1:2b:a8:be:3c:a5:90:
7e:34:e5:7e:15:5b:51:8a:3f:39:a4:e4:54:74:a5:
2f:06:66:90:61:d4:8e:8f:5e:29:c8:32:a2:4b:39:
41:2d:8b:f2:8d:38:47:16:04:57:62:33:49:38:7b:
a3:8e:06:f1:cd:7c:63:08:e2:27:16:42:11:53:37:
1d:5f:9a:9f:65:4b:7a:58:56:d5:fd:e5:fa:12:46:
c0:ee:b9:80:02:39:c7:ec:74:5a:91:48:04:f4:da:
61:4d:e4:64:66:5d:94:ee:19:71:cb:ed:45:ed:6b:
02:0d:15:43:a1:9d:13:e0:1e:3b:39:52:09:2c:b9:
8d:dd:7f:59:3f:b3:1d:98:9c:40:9d:84:1a:1d:55:
09:49:f4:48:f9:0c:98:79:0e:63:e7:39:a2:16:61:
3b:79:6f:7d:74:19:a2:52:00:c6:99:74:2f:a2:49:
4d:4d:de:d7:45:27:07:bd:3c:cf:9b:97:4b:f9:50:
b5:2a:a1:b5:37:e7:f2:9c:62:00:84:8f:95:9c:ac:
49:cd:35:4f:ab:a3:30:27:a1:d3:51:c7:fd:2b:c8:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:BD:53:AA:64:E5:E0:BC:41:6C:2F:39:65:FD:F7:81:FD:FA:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4774BC825A11F0A2D67897DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c7:a9:89:72:2c:21:6c:c8:9d:23:00:d3:12:b2:39:ec:15:
b8:01:cb:85:75:25:93:4a:90:ed:a8:d3:94:03:38:6e:23:eb:
d9:d9:bd:65:69:10:b3:7e:3d:2e:a8:72:2b:9a:be:1f:98:43:
6f:7d:47:27:b3:89:05:4b:2c:95:cc:00:f6:ee:7f:b3:41:10:
a7:9e:69:4d:63:66:5b:a0:09:dd:65:fa:c7:b5:e1:d5:11:da:
7d:68:f4:f6:ad:cb:97:d3:8f:6d:3a:aa:fa:8c:cf:4d:f4:8a:
fc:60:93:49:9d:f8:b0:7c:1f:d1:25:1c:d7:2f:c4:04:26:d7:
a0:60:ab:91:5f:1b:68:1f:c3:70:96:00:a8:1b:3a:5e:64:a9:
e6:a5:26:fe:b8:58:ad:51:46:80:b9:5d:a0:8d:75:fe:9f:c2:
f5:f8:06:e3:52:36:56:80:8a:22:82:d9:35:59:19:17:f2:f5:
f7:cf:71:01:40:52:e2:3b:cb:80:9d:11:05:ab:cd:1c:5d:3d:
03:2e:de:33:38:a5:41:ab:84:24:15:4e:33:10:03:fe:5d:0d:
11:c6:f0:f2:84:02:7f:e3:c6:68:77:a2:c8:d2:51:88:4e:76:
52:82:b6:01:20:00:be:c2:4d:56:86:75:7d:5b:ef:44:bb:a6:
8e:4e:b7:04
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXBeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI2MDg1NjQ1WhcNMjUwOTI5MDg1NjQ1WjAYMRYw
FAYDVQQDEw02OGFkNzZkMi1lMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2RbG8tsujH+PxLhsJJW2uc+oCsl4SiFYTF75vaHj9tkfRfvmzMErqL48
pZB+NOV+FVtRij85pORUdKUvBmaQYdSOj14pyDKiSzlBLYvyjThHFgRXYjNJOHuj
jgbxzXxjCOInFkIRUzcdX5qfZUt6WFbV/eX6EkbA7rmAAjnH7HRakUgE9NphTeRk
Zl2U7hlxy+1F7WsCDRVDoZ0T4B47OVIJLLmN3X9ZP7MdmJxAnYQaHVUJSfRI+QyY
eQ5j5zmiFmE7eW99dBmiUgDGmXQvoklNTd7XRScHvTzPm5dL+VC1KqG1N+fynGIA
hI+VnKxJzTVPq6MwJ6HTUcf9K8hiSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAWh
vVOqZOXgvEFsLzll/feB/frSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTQ3NzRCQzgyNUExMUYwQTJENjc4OTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQFMA0GCSqGSIb3DQEBCwUA
A4IBAQBcx6mJciwhbMidIwDTErI57BW4AcuFdSWTSpDtqNOUAzhuI+vZ2b1laRCz
fj0uqHIrmr4fmENvfUcns4kFSyyVzAD27n+zQRCnnmlNY2ZboAndZfrHteHVEdp9
aPT2rcuX049tOqr6jM9N9Ir8YJNJnfiwfB/RJRzXL8QEJtegYKuRXxtoH8NwlgCo
GzpeZKnmpSb+uFitUUaAuV2gjXX+n8L1+AbjUjZWgIoigtk1WRkX8vX3z3EBQFLi
O8uAnREFq80cXT0DLt4zOKVBq4QkFU4zEAP+XQ0RxvDyhAJ/48Zod6LI0lGITnZS
grYBIAC+wk1WhnV9W+9Eu6aOTrcE
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:04 2025 by rpki-client