Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1CBB0893A411F0BDBC61ABDAE4EC9C.roa
File: AA1CBB0893A411F0BDBC61ABDAE4EC9C.roa (raw, json)
Hash identifier: dSRAzrNQyiU0B7jJhxQXB/85IwrKKxw95RBHMxxgEhg=
Subject key identifier: A5:D2:C1:75:AD:1E:4D:F8:0F:2C:F6:DB:D9:CF:4B:EE:1A:E5:BF:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1CBB0893A411F0BDBC61ABDAE4EC9C.roa
Signing time: Wed 17 Sep 2025 08:59:49 +0000
ROA not before: Wed 17 Sep 2025 08:59:44 +0000
ROA not after: Thu 06 Nov 2025 08:59:44 +0000
asID: 44901
IP address blocks: 156.229.125.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97200 (0x17bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 08:59:44 2025 GMT
Not After : Nov 6 08:59:44 2025 GMT
Subject: CN=68ca7885-e5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:58:b8:e7:d2:d6:5a:19:e4:d9:d5:2c:71:
5a:28:a7:10:9c:75:de:31:bb:58:fd:10:97:3d:fc:
12:2f:a7:a5:fb:48:ae:a9:30:7d:17:a8:e5:4e:be:
d9:84:27:e1:d1:8b:c7:cd:b1:cc:95:5a:4f:72:bb:
1e:fe:67:84:1e:6b:eb:f0:a7:bb:30:21:d9:8c:05:
f4:fc:6a:0d:14:af:11:3a:31:34:f9:89:ed:eb:ce:
5a:33:c9:00:4b:fe:83:6d:3b:c5:9e:09:46:82:93:
16:69:6c:09:62:5b:23:35:5c:1e:b5:6b:e9:36:81:
e4:6e:fc:ca:2f:6d:45:9c:cf:76:a1:1b:d3:f4:41:
ce:ea:6c:e9:ee:b3:f5:7f:6f:4b:68:77:6d:24:37:
96:e0:33:a2:6b:f0:dc:e5:54:b1:a2:11:b4:01:6d:
d5:4c:e3:5d:cf:e3:7c:75:a5:0b:31:d5:df:83:35:
94:e6:be:94:53:2f:34:05:9e:f1:f5:63:93:4a:69:
d4:6a:6c:f6:b5:d9:af:95:6e:e5:df:c9:5b:a7:5d:
93:7a:ed:57:4b:0b:9e:4d:53:04:b5:22:14:03:57:
08:4e:4d:1a:7b:6b:8a:bd:18:4b:6b:68:48:ac:8d:
94:77:0c:20:7c:68:9c:ac:b5:45:88:38:68:74:fd:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D2:C1:75:AD:1E:4D:F8:0F:2C:F6:DB:D9:CF:4B:EE:1A:E5:BF:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1CBB0893A411F0BDBC61ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:15:59:02:97:8f:44:cf:70:d4:d3:0e:31:1c:eb:2e:de:2c:
26:c0:64:73:41:b7:26:c5:bb:a9:39:50:6b:9b:b6:e5:05:2e:
7c:61:be:47:52:04:bf:5d:0b:f3:09:86:54:fc:b4:ff:57:a7:
c6:24:e6:b1:dc:e3:1a:52:31:a6:c3:14:88:8e:9e:83:32:47:
c0:c5:14:b3:33:14:18:1c:5e:85:f4:5b:db:94:d7:4f:61:c6:
ee:84:fe:a2:2f:f8:7c:ad:50:c3:2f:f5:a4:7d:fe:2e:2a:78:
27:cd:ac:7c:b5:fc:b6:c9:b5:98:dc:60:b2:79:d0:1c:b1:17:
0f:25:a8:70:c2:6c:80:bd:f1:7a:fc:5d:21:cd:64:5d:58:3e:
fc:78:78:e2:bb:63:c6:f0:16:53:54:2a:85:cc:de:4b:6a:64:
f3:f2:ae:57:8c:4e:6a:2c:d0:71:87:6f:53:78:c9:5a:eb:55:
3d:98:24:61:67:9e:3d:c3:ab:f3:11:cd:62:df:53:cf:cc:56:
3b:44:7a:69:c6:6d:11:77:30:e5:76:fd:7b:40:b8:e3:ac:15:
9d:fe:9f:18:2c:eb:34:6a:0c:88:6d:af:5b:26:4a:58:6c:df:
b4:2c:21:9f:44:09:ea:8f:9b:e2:f2:c6:cf:d4:17:82:0f:eb:
a5:7b:3e:fa
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXuwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE3MDg1OTQ0WhcNMjUxMTA2MDg1OTQ0WjAYMRYw
FAYDVQQDEw02OGNhNzg4NS1lNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwj5YuOfS1loZ5NnVLHFaKKcQnHXeMbtY/RCXPfwSL6el+0iuqTB9F6jl
Tr7ZhCfh0YvHzbHMlVpPcrse/meEHmvr8Ke7MCHZjAX0/GoNFK8ROjE0+Ynt685a
M8kAS/6DbTvFnglGgpMWaWwJYlsjNVwetWvpNoHkbvzKL21FnM92oRvT9EHO6mzp
7rP1f29LaHdtJDeW4DOia/Dc5VSxohG0AW3VTONdz+N8daULMdXfgzWU5r6UUy80
BZ7x9WOTSmnUamz2tdmvlW7l38lbp12Teu1XSwueTVMEtSIUA1cITk0ae2uKvRhL
a2hIrI2UdwwgfGicrLVFiDhodP3C3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXS
wXWtHk34Dyz229nPS+4a5b9WMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTFDQkIwODkzQTQxMUYwQkRCQzYxQUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOV9AwQAnOXvMA0GCSqGSIb3
DQEBCwUAA4IBAQAMFVkCl49Ez3DU0w4xHOsu3iwmwGRzQbcmxbupOVBrm7blBS58
Yb5HUgS/XQvzCYZU/LT/V6fGJOax3OMaUjGmwxSIjp6DMkfAxRSzMxQYHF6F9Fvb
lNdPYcbuhP6iL/h8rVDDL/Wkff4uKngnzax8tfy2ybWY3GCyedAcsRcPJahwwmyA
vfF6/F0hzWRdWD78eHjiu2PG8BZTVCqFzN5LamTz8q5XjE5qLNBxh29TeMla61U9
mCRhZ549w6vzEc1i31PPzFY7RHppxm0RdzDldv17QLjjrBWd/p8YLOs0agyIba9b
JkpYbN+0LCGfRAnqj5vi8sbP1BeCD+ulez76
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client