Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E158B886EA11F0B5979AE7DAE4EC9C.roa
File: D1E158B886EA11F0B5979AE7DAE4EC9C.roa (raw, json)
Hash identifier: lom87pSDs63TkSoXMc1n7WK9ZfsES9rwnDum5hrvKng=
Subject key identifier: C3:F5:62:2C:65:4B:D7:88:C7:2E:EB:B6:C0:E5:CC:DB:15:A8:95:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0174AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E158B886EA11F0B5979AE7DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 04:19:15 +0000
ROA not before: Mon 01 Sep 2025 04:19:10 +0000
ROA not after: Tue 23 Sep 2025 04:19:10 +0000
asID: 141167
IP address blocks: 156.225.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95407 (0x174af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 04:19:10 2025 GMT
Not After : Sep 23 04:19:10 2025 GMT
Subject: CN=68b51ec3-7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:98:63:de:8a:2e:79:5a:98:60:32:bb:78:
e2:f7:59:ef:11:62:71:36:7d:7b:7e:1b:47:89:b3:
8c:30:22:d1:57:41:86:49:05:81:10:c8:4e:96:0a:
c9:e4:e6:90:25:04:a7:cc:e8:9f:98:72:4d:8f:cf:
59:6d:9e:4a:80:1d:ee:cd:95:4c:46:7e:a4:e7:87:
a3:e4:dd:09:af:a6:69:e4:32:68:e2:6d:47:b3:fc:
eb:66:72:8a:b5:ce:aa:10:1c:68:ba:a4:44:6b:b9:
8e:5c:f0:c5:76:4a:bc:da:2b:a7:70:6b:c5:50:bc:
ff:d7:5e:b5:3b:b7:8d:00:99:7e:fc:81:53:c6:e9:
5f:a0:87:18:0c:de:64:0b:dc:c8:97:a2:1e:03:08:
aa:ae:83:04:d9:a8:8b:45:df:34:e2:39:66:ca:f6:
0a:7b:b3:f8:0b:0c:83:09:16:59:63:c1:44:93:24:
45:29:86:d4:e6:7e:e8:05:b0:e8:ff:f2:3a:38:3a:
d7:64:e0:7b:58:c4:51:2e:eb:04:b9:6f:d8:3a:3c:
63:d2:31:19:a8:bc:31:5b:b4:2f:4b:50:a5:c2:42:
f3:3f:05:8c:be:65:69:ab:6a:74:ec:68:f4:50:58:
0a:eb:15:63:c2:c5:1c:48:6d:ad:c8:84:ac:9d:1d:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:62:2C:65:4B:D7:88:C7:2E:EB:B6:C0:E5:CC:DB:15:A8:95:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E158B886EA11F0B5979AE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.12.0/23
Signature Algorithm: sha256WithRSAEncryption
22:4f:c1:63:52:b7:47:ba:66:51:ca:74:1d:43:17:c1:f0:3d:
f2:ab:d9:65:b9:f4:e0:e7:a4:3e:52:16:66:4b:87:c8:6a:ed:
8e:3f:1e:2c:10:04:d6:67:41:ef:55:2a:e6:1c:aa:44:50:3f:
ed:be:b7:b6:87:73:d0:68:b4:ae:90:bf:ca:78:87:9d:43:30:
de:bd:ca:8f:0b:ff:e8:af:8e:18:de:9e:57:09:e0:b1:82:3c:
4a:64:16:6b:77:d7:c1:94:b5:9c:41:7d:9a:8e:fd:db:2f:d9:
d9:ac:17:17:2a:17:55:71:ad:56:56:1a:29:84:f1:1f:70:cc:
25:6a:a5:c8:0e:02:be:53:99:77:d7:84:da:cf:ee:a1:4f:21:
0a:48:51:74:d8:ff:d3:de:55:0c:b5:21:0b:62:d4:33:5a:a2:
8f:8d:b9:78:0e:c0:64:45:d4:5b:fa:f8:02:64:31:8b:23:b4:
5e:dd:21:6d:63:03:db:9a:d7:d1:0a:5a:8f:58:76:35:80:e8:
bf:4f:78:08:f7:8f:21:28:a0:60:75:89:9a:39:1d:c3:25:16:
3a:24:78:03:c6:48:c3:2d:16:c2:72:cd:e3:16:01:31:67:06:
e4:18:ac:1a:76:ce:ef:1d:99:8e:50:e2:af:60:9d:58:ed:63:
19:8a:4b:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXSvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAxMDQxOTEwWhcNMjUwOTIzMDQxOTEwWjAYMRYw
FAYDVQQDEw02OGI1MWVjMy03ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmh2YY96KLnlamGAyu3ji91nvEWJxNn17fhtHibOMMCLRV0GGSQWBEMhO
lgrJ5OaQJQSnzOifmHJNj89ZbZ5KgB3uzZVMRn6k54ej5N0Jr6Zp5DJo4m1Hs/zr
ZnKKtc6qEBxouqREa7mOXPDFdkq82iuncGvFULz/1161O7eNAJl+/IFTxulfoIcY
DN5kC9zIl6IeAwiqroME2aiLRd804jlmyvYKe7P4CwyDCRZZY8FEkyRFKYbU5n7o
BbDo//I6ODrXZOB7WMRRLusEuW/YOjxj0jEZqLwxW7QvS1ClwkLzPwWMvmVpq2p0
7Gj0UFgK6xVjwsUcSG2tyISsnR36/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMP1
YixlS9eIxy7rtsDlzNsVqJUMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMUUxNThCODg2RUExMUYwQjU5NzlBRTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOEMMA0GCSqGSIb3DQEBCwUA
A4IBAQAiT8FjUrdHumZRynQdQxfB8D3yq9llufTg56Q+UhZmS4fIau2OPx4sEATW
Z0HvVSrmHKpEUD/tvre2h3PQaLSukL/KeIedQzDevcqPC//or44Y3p5XCeCxgjxK
ZBZrd9fBlLWcQX2ajv3bL9nZrBcXKhdVca1WVhophPEfcMwlaqXIDgK+U5l314Ta
z+6hTyEKSFF02P/T3lUMtSELYtQzWqKPjbl4DsBkRdRb+vgCZDGLI7Re3SFtYwPb
mtfRClqPWHY1gOi/T3gI948hKKBgdYmaOR3DJRY6JHgDxkjDLRbCcs3jFgExZwbk
GKwads7vHZmOUOKvYJ1Y7WMZiktR
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:24 2025 by rpki-client