Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C8AD80872D11F098BABA9EDAE4EC9C.roa
File: D0C8AD80872D11F098BABA9EDAE4EC9C.roa (raw, json)
Hash identifier: mtFYyTtmM7ItmjNTPREwNlmY44VaCuS+kgSlj2QqKLM=
Subject key identifier: 9D:8B:2F:92:1E:5A:86:11:8B:1F:44:6B:87:D7:4F:B6:31:F4:58:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017563
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C8AD80872D11F098BABA9EDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 12:18:50 +0000
ROA not before: Mon 01 Sep 2025 12:18:44 +0000
ROA not after: Wed 08 Oct 2025 12:18:44 +0000
asID: 200373
IP address blocks: 156.253.170.0/24 maxlen: 24
156.253.171.0/24 maxlen: 24
156.253.172.0/24 maxlen: 24
156.253.173.0/24 maxlen: 24
156.253.174.0/24 maxlen: 24
156.253.175.0/24 maxlen: 24
156.253.176.0/24 maxlen: 24
156.253.177.0/24 maxlen: 24
156.253.178.0/24 maxlen: 24
156.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95587 (0x17563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 12:18:44 2025 GMT
Not After : Oct 8 12:18:44 2025 GMT
Subject: CN=68b58f2a-3b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:8f:38:ab:ab:8a:14:01:cf:1d:73:72:a7:
07:fd:9f:7c:45:b8:9a:a1:40:76:87:00:43:0d:22:
ba:5a:f3:f7:07:0b:e4:9e:5f:07:fa:da:75:1d:15:
f2:72:82:77:17:e6:a9:3d:a5:41:0f:33:de:e4:8e:
51:4e:13:6c:bd:b4:00:52:2c:3b:38:37:71:6d:bf:
11:48:a3:81:f1:e8:9d:b7:2d:7d:6f:27:29:2e:0e:
cf:23:bb:7a:56:a1:02:eb:da:e9:03:93:d5:38:36:
28:7a:f9:6c:5d:4d:d5:cd:17:ff:90:72:74:e0:ab:
55:d5:16:fd:8e:d2:8f:db:18:db:a2:cd:03:9c:48:
56:00:b6:2b:c7:b6:a2:b1:cc:a0:d7:ba:af:26:43:
2c:37:bb:57:9d:43:c5:cd:1c:86:aa:a8:16:f3:69:
58:9a:a6:ef:8b:56:01:97:61:2d:df:c8:c9:77:b0:
61:a5:d4:6b:ca:32:87:29:cb:ff:2e:60:df:31:d7:
90:e0:14:dc:23:6f:47:17:db:1d:fb:51:7f:6a:37:
8c:e7:d3:4e:02:53:5a:cf:d4:7f:ca:b7:72:d0:a9:
7c:d4:db:7b:77:dd:9b:11:62:59:bf:af:87:ac:22:
d4:b2:0e:0d:04:7b:db:5b:5a:fd:e4:d1:49:c0:a9:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:2F:92:1E:5A:86:11:8B:1F:44:6B:87:D7:4F:B6:31:F4:58:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C8AD80872D11F098BABA9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.170.0-156.253.179.255
Signature Algorithm: sha256WithRSAEncryption
25:a2:b4:49:c6:74:2f:e3:ef:bb:04:a8:97:1a:78:58:30:18:
b0:c7:ed:44:c7:9a:36:ed:ef:f9:2c:fb:b2:0d:58:a8:94:b7:
04:a2:6f:0c:cc:06:3f:1f:14:85:65:c6:80:87:8d:82:0b:f4:
df:ec:39:0b:b0:8c:77:65:bf:40:de:d7:f8:78:35:47:2b:75:
a0:86:d7:14:ab:44:1f:cf:17:6f:37:08:88:e1:c7:23:43:29:
46:eb:83:80:55:5a:58:9f:e2:2c:28:50:99:0d:85:0b:a3:70:
53:d2:46:1f:43:07:e2:3a:a7:c3:fc:40:09:51:0a:15:d0:d3:
e3:27:81:c6:3f:67:31:d6:0e:8d:b7:b7:57:c3:c1:6c:2a:b7:
82:16:36:ed:06:e2:8f:ec:dd:74:e0:6d:62:79:1f:ba:30:a1:
2f:d6:74:0d:80:42:cd:ea:6d:a3:e0:f3:e2:93:8d:43:9b:70:
5f:40:e7:13:99:cd:55:d1:90:c5:25:b3:cc:60:7f:c7:cb:2d:
8e:c1:90:05:d9:0b:c2:27:aa:c5:7a:73:c1:92:54:be:d1:0e:
44:c0:7f:d3:0b:dc:79:0e:83:ee:4c:bb:aa:d6:9d:7c:31:e4:
7a:6a:b6:d7:e6:50:f3:a4:fd:48:27:fd:14:87:22:0f:51:fc:
c7:28:4d:96
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXVjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAxMTIxODQ0WhcNMjUxMDA4MTIxODQ0WjAYMRYw
FAYDVQQDEw02OGI1OGYyYS0zYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4m2POKurihQBzx1zcqcH/Z98RbiaoUB2hwBDDSK6WvP3Bwvknl8H+tp1
HRXycoJ3F+apPaVBDzPe5I5RThNsvbQAUiw7ODdxbb8RSKOB8eidty19bycpLg7P
I7t6VqEC69rpA5PVODYoevlsXU3VzRf/kHJ04KtV1Rb9jtKP2xjbos0DnEhWALYr
x7aiscyg17qvJkMsN7tXnUPFzRyGqqgW82lYmqbvi1YBl2Et38jJd7BhpdRryjKH
Kcv/LmDfMdeQ4BTcI29HF9sd+1F/ajeM59NOAlNaz9R/yrdy0Kl81Nt7d92bEWJZ
v6+HrCLUsg4NBHvbW1r95NFJwKn88wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ2L
L5IeWoYRix9Ea4fXT7Yx9FjkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMEM4QUQ4MDg3MkQxMUYwOThCQUJBOUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc/aoDBAKc/bAwDQYJKoZI
hvcNAQELBQADggEBACWitEnGdC/j77sEqJcaeFgwGLDH7UTHmjbt7/ks+7INWKiU
twSibwzMBj8fFIVlxoCHjYIL9N/sOQuwjHdlv0De1/h4NUcrdaCG1xSrRB/PF283
CIjhxyNDKUbrg4BVWlif4iwoUJkNhQujcFPSRh9DB+I6p8P8QAlRChXQ0+MngcY/
ZzHWDo23t1fDwWwqt4IWNu0G4o/s3XTgbWJ5H7owoS/WdA2AQs3qbaPg8+KTjUOb
cF9A5xOZzVXRkMUls8xgf8fLLY7BkAXZC8InqsV6c8GSVL7RDkTAf9ML3HkOg+5M
u6rWnXwx5HpqttfmUPOk/Ugn/RSHIg9R/McoTZY=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:01 2025 by rpki-client