Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9C92F283F311F09221CB92DAE4EC9C.roa
File: DD9C92F283F311F09221CB92DAE4EC9C.roa (raw, json)
Hash identifier: 6i5o2ChKMmBRlnNmJDKgr13/wpdwV8+D/JsvIlo+4aA=
Subject key identifier: E5:B2:1B:BB:F8:92:6D:1D:CF:BF:F5:7F:6B:A1:07:67:0B:9D:C1:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01726A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9C92F283F311F09221CB92DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:46:27 +0000
ROA not before: Thu 28 Aug 2025 09:46:22 +0000
ROA not after: Sun 28 Sep 2025 09:46:22 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
156.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94826 (0x1726a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:46:22 2025 GMT
Not After : Sep 28 09:46:22 2025 GMT
Subject: CN=68b02573-2a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:ee:42:13:15:47:a3:25:65:ac:39:bc:18:
ab:2b:16:26:b6:57:0e:a6:3c:2b:43:75:a4:87:4e:
f3:94:fa:8e:60:82:49:54:8b:b0:5b:2d:ce:cc:45:
55:bd:65:7f:1a:42:21:19:c8:e8:e1:17:33:9a:2e:
4f:30:48:54:78:f6:60:db:4a:da:72:2f:6c:0e:48:
65:fc:2b:38:9e:83:5b:d9:4e:2a:ba:2c:5b:b6:05:
70:b7:64:2c:fc:ae:8c:54:6c:83:53:41:76:3c:5b:
b8:92:9a:c8:51:5a:ad:02:33:d2:1c:cc:45:1f:e6:
1a:3e:8c:ad:a8:01:2f:84:2f:87:a5:60:d3:30:3f:
6b:7a:80:da:3d:32:02:05:39:d8:61:1e:f1:2a:0e:
40:1c:6e:b7:f8:4a:a8:f2:d4:fa:8f:d3:e8:39:90:
7e:01:d4:dc:fa:fc:f1:ab:93:c0:2f:2c:44:96:14:
5b:10:16:21:d8:b4:56:a7:9b:4a:96:1a:06:d5:f5:
3a:03:b8:30:5e:1c:86:e8:af:9f:50:3a:6a:64:28:
89:88:69:1f:74:2f:58:a4:44:de:86:3a:c5:2d:c8:
6f:cc:37:a3:d9:a2:3c:5d:bd:5c:c1:28:eb:f7:1c:
c2:eb:53:7f:1d:b4:d1:d5:a0:a4:9f:64:86:00:31:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:1B:BB:F8:92:6D:1D:CF:BF:F5:7F:6B:A1:07:67:0B:9D:C1:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9C92F283F311F09221CB92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:23:d5:c7:92:33:4b:67:42:0d:52:03:60:36:53:45:82:3e:
84:51:65:04:e6:98:ae:c6:89:9a:1d:44:68:c8:95:e0:62:dc:
8a:0b:0a:44:8a:fe:d2:ab:b7:c8:6d:89:e5:04:50:ec:7d:95:
70:d8:19:3e:5b:ad:5f:cb:69:c4:39:97:64:7b:2e:58:5a:24:
56:6f:8f:a9:2f:5a:6d:86:a3:ea:d6:3e:93:e8:43:e2:76:3b:
b0:1a:80:bf:0c:ca:6e:f0:6f:fa:d4:6d:4c:6a:dc:c3:8c:07:
ed:63:14:4e:a3:99:d1:53:39:49:90:1e:a5:82:9c:fb:25:2e:
df:dc:51:b0:82:5a:cd:f5:cb:0c:04:2e:fb:14:f6:e9:53:70:
c6:61:ed:92:5b:69:80:4f:67:4c:4b:df:2e:77:fc:d4:20:53:
4a:48:31:0e:ef:30:e1:c0:6e:50:6a:dc:34:7e:70:87:a8:57:
ec:d7:f5:c0:df:82:78:10:f6:64:d2:71:c7:aa:48:c1:c3:a7:
71:fe:11:87:89:46:75:78:5c:52:6b:e7:59:c4:f9:7b:42:d8:
cd:b6:4a:ff:4f:1e:c7:81:67:f4:79:80:f6:fd:17:97:4e:b7:
83:dc:67:9b:58:f2:fb:c0:20:47:0d:3b:a8:0a:75:d9:43:ea:
7d:8a:53:a3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXJqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MDk0NjIyWhcNMjUwOTI4MDk0NjIyWjAYMRYw
FAYDVQQDEw02OGIwMjU3My0yYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtAfuQhMVR6MlZaw5vBirKxYmtlcOpjwrQ3Wkh07zlPqOYIJJVIuwWy3O
zEVVvWV/GkIhGcjo4Rczmi5PMEhUePZg20raci9sDkhl/Cs4noNb2U4quixbtgVw
t2Qs/K6MVGyDU0F2PFu4kprIUVqtAjPSHMxFH+YaPoytqAEvhC+HpWDTMD9reoDa
PTICBTnYYR7xKg5AHG63+Eqo8tT6j9PoOZB+AdTc+vzxq5PALyxElhRbEBYh2LRW
p5tKlhoG1fU6A7gwXhyG6K+fUDpqZCiJiGkfdC9YpETehjrFLchvzDej2aI8Xb1c
wSjr9xzC61N/HbTR1aCkn2SGADG0XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWy
G7v4km0dz7/1f2uhB2cLncGCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERDlDOTJGMjgzRjMxMUYwOTIyMUNCOTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnPaiAwQAnPalMA0GCSqGSIb3
DQEBCwUAA4IBAQAsI9XHkjNLZ0INUgNgNlNFgj6EUWUE5piuxomaHURoyJXgYtyK
CwpEiv7Sq7fIbYnlBFDsfZVw2Bk+W61fy2nEOZdkey5YWiRWb4+pL1pthqPq1j6T
6EPidjuwGoC/DMpu8G/61G1MatzDjAftYxROo5nRUzlJkB6lgpz7JS7f3FGwglrN
9csMBC77FPbpU3DGYe2SW2mAT2dMS98ud/zUIFNKSDEO7zDhwG5Qatw0fnCHqFfs
1/XA34J4EPZk0nHHqkjBw6dx/hGHiUZ1eFxSa+dZxPl7QtjNtkr/Tx7HgWf0eYD2
/ReXTreD3GebWPL7wCBHDTuoCnXZQ+p9ilOj
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:19:50 2025 by rpki-client