Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECDC3BE88C711F0A0FC6584DAE4EC9C.roa
File: AECDC3BE88C711F0A0FC6584DAE4EC9C.roa (raw, json)
Hash identifier: uWvFjdv4l4U7btJK9DCg8J3ORW429e008TwAbMHZ/Ro=
Subject key identifier: 0E:4D:B3:63:D5:A8:87:B3:7F:C1:3E:DB:EC:0D:C2:3D:11:FD:08:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01779F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECDC3BE88C711F0A0FC6584DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:12:46 +0000
ROA not before: Wed 03 Sep 2025 13:12:42 +0000
ROA not after: Fri 10 Oct 2025 13:12:42 +0000
asID: 395886
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96159 (0x1779f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 13:12:42 2025 GMT
Not After : Oct 10 13:12:42 2025 GMT
Subject: CN=68b83ece-be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:0a:66:3a:7f:e0:f3:ca:95:11:01:90:74:
65:4d:27:19:73:06:76:e3:3f:6b:b1:7a:c7:12:be:
cb:22:74:8d:db:7d:df:1a:e6:38:43:54:6b:14:fa:
1e:ff:c9:47:ad:f1:f1:67:b5:cd:6e:b3:66:59:1c:
3c:4e:ac:66:b3:b0:6a:10:81:17:66:5a:d0:d9:77:
d0:e0:11:9b:dc:3f:ff:b5:0c:72:74:d5:52:83:fe:
8c:fd:c9:06:8b:b6:d9:8a:43:51:f8:75:c9:3c:d5:
49:fb:81:10:b9:ea:cc:da:5b:4c:55:95:ca:a6:6f:
70:e9:0e:a1:75:7e:17:2d:49:10:42:5a:a5:d4:2f:
ec:eb:98:c8:86:f2:0e:4d:20:3b:1b:6d:cc:22:5a:
49:29:eb:89:2d:5a:6b:40:80:75:91:be:69:44:fe:
26:87:5a:e4:64:ad:02:a0:74:cf:50:11:22:a5:54:
6a:4a:74:68:48:2d:32:59:b9:89:8f:97:b4:ad:f6:
a2:1f:44:74:18:9b:f6:65:81:9d:41:40:b7:78:7d:
9c:3b:18:e7:57:ff:b2:d8:0b:9d:41:d8:82:f5:e9:
5e:28:61:2e:e8:4a:3f:ca:c1:13:dd:19:12:71:e7:
cc:4c:f9:e6:f1:90:8b:98:a1:b1:f9:fe:31:8c:99:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4D:B3:63:D5:A8:87:B3:7F:C1:3E:DB:EC:0D:C2:3D:11:FD:08:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECDC3BE88C711F0A0FC6584DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
19:50:cb:69:2b:8d:fd:6c:ed:41:70:a7:3b:80:ab:de:24:bf:
73:8a:65:61:38:06:a9:9f:49:55:61:a6:06:20:2b:e7:3d:9e:
47:be:48:75:01:8b:63:61:a1:49:02:94:1e:2f:cf:2c:0b:25:
85:49:01:90:68:90:81:6e:db:2d:7d:e3:ac:49:9f:9a:36:d7:
36:29:eb:d9:16:58:7b:67:f1:c5:28:20:fb:11:68:6b:3e:98:
06:13:2e:b2:f5:36:c0:b6:64:23:4f:6b:66:6c:5f:6d:f7:b9:
3a:fe:28:f0:47:2d:d7:e6:71:b5:5d:63:c1:4c:c6:73:63:fa:
74:1c:4f:08:ce:7b:07:d7:d7:12:26:d2:f3:80:eb:b3:03:c4:
d6:47:be:dc:e0:f6:27:8e:31:72:7d:7d:4b:3e:2c:4b:cf:4e:
ba:a1:e0:b6:10:02:20:bb:32:59:57:71:34:e7:42:55:a8:9d:
da:36:fb:43:39:f1:b7:19:67:8b:05:8b:0f:d9:7c:f5:72:36:
0f:ad:7e:d0:56:1a:74:48:5f:58:4d:e2:60:02:87:47:3e:a4:
59:8d:be:37:23:31:0d:e3:3e:de:87:cc:6d:85:da:c6:23:6d:
cf:cb:03:30:08:ec:e0:91:75:a2:b5:8d:d4:6e:a0:36:54:e4:
14:96:41:65
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXefMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAzMTMxMjQyWhcNMjUxMDEwMTMxMjQyWjAYMRYw
FAYDVQQDEw02OGI4M2VjZS1iZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk7EKZjp/4PPKlREBkHRlTScZcwZ24z9rsXrHEr7LInSN233fGuY4Q1Rr
FPoe/8lHrfHxZ7XNbrNmWRw8Tqxms7BqEIEXZlrQ2XfQ4BGb3D//tQxydNVSg/6M
/ckGi7bZikNR+HXJPNVJ+4EQuerM2ltMVZXKpm9w6Q6hdX4XLUkQQlql1C/s65jI
hvIOTSA7G23MIlpJKeuJLVprQIB1kb5pRP4mh1rkZK0CoHTPUBEipVRqSnRoSC0y
WbmJj5e0rfaiH0R0GJv2ZYGdQUC3eH2cOxjnV/+y2AudQdiC9eleKGEu6Eo/ysET
3RkScefMTPnm8ZCLmKGx+f4xjJlJ5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA5N
s2PVqIezf8E+2+wNwj0R/QjnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRUNEQzNCRTg4QzcxMUYwQTBGQzY1ODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQAZUMtpK439bO1BcKc7gKveJL9zimVhOAapn0lVYaYGICvnPZ5Hvkh1AYtj
YaFJApQeL88sCyWFSQGQaJCBbtstfeOsSZ+aNtc2KevZFlh7Z/HFKCD7EWhrPpgG
Ey6y9TbAtmQjT2tmbF9t97k6/ijwRy3X5nG1XWPBTMZzY/p0HE8IznsH19cSJtLz
gOuzA8TWR77c4PYnjjFyfX1LPixLz066oeC2EAIguzJZV3E050JVqJ3aNvtDOfG3
GWeLBYsP2Xz1cjYPrX7QVhp0SF9YTeJgAodHPqRZjb43IzEN4z7eh8xthdrGI23P
ywMwCOzgkXWitY3UbqA2VOQUlkFl
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:11:03 2025 by rpki-client