Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA237888831B11F0AED3068CDAE4EC9C.roa
File: FA237888831B11F0AED3068CDAE4EC9C.roa (raw, json)
Hash identifier: gSeQjnmt4ChRFyXu2hTtajuBoQ7bYgeaSHbBSqxZhw8=
Subject key identifier: 67:30:C4:78:58:42:05:DC:A5:63:67:E7:CA:AF:59:F0:29:A3:E8:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01712E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA237888831B11F0AED3068CDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 08:01:04 +0000
ROA not before: Wed 27 Aug 2025 08:00:59 +0000
ROA not after: Tue 30 Sep 2025 08:00:59 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94510 (0x1712e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 08:00:59 2025 GMT
Not After : Sep 30 08:00:59 2025 GMT
Subject: CN=68aebb3f-6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:90:4c:47:4d:27:bc:e7:c1:c2:f6:a1:36:
03:ca:88:80:01:5b:8b:f8:1b:0b:57:9c:fb:24:70:
b4:3e:7e:17:75:60:ba:fb:fe:4e:58:0e:12:75:6e:
e0:ea:86:97:81:0f:43:bb:e7:60:90:d0:91:84:63:
b5:b7:f8:44:f9:2f:b4:73:9d:5b:c3:11:ea:90:57:
fe:58:7e:81:41:a6:9e:5b:67:a2:81:09:7a:f5:b3:
db:8d:0a:e6:e5:05:3e:7b:51:fa:f4:65:f0:91:b9:
d8:da:1e:09:1f:4c:01:c4:f0:cb:1a:b0:4c:2b:08:
98:75:9a:29:4a:b2:15:56:66:eb:77:10:09:41:52:
04:7b:3b:61:4b:97:64:0d:f0:e1:1a:47:a1:7a:c4:
7c:40:17:2d:3f:ea:47:ac:ec:0f:68:1d:64:e0:03:
4f:c1:e9:02:a6:a4:82:82:5c:76:72:ae:03:f4:e1:
8c:8d:00:12:e8:6c:52:c1:d2:fe:38:58:f0:b2:4f:
57:46:85:ce:c4:05:78:e1:6d:c7:65:a2:5c:43:a3:
89:60:bb:cf:15:fd:3f:c9:e5:05:82:05:3e:d5:41:
c6:b0:2d:1b:c6:fb:08:98:1e:88:14:1b:c6:52:4a:
4b:1c:6e:03:7a:ed:31:65:d1:7d:d1:ce:5c:b0:bc:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:C4:78:58:42:05:DC:A5:63:67:E7:CA:AF:59:F0:29:A3:E8:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA237888831B11F0AED3068CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
87:22:14:4c:02:0a:a9:d2:ab:97:74:22:4d:8e:02:32:5a:ee:
05:09:fb:aa:28:c0:98:03:4e:4b:80:5c:8c:1d:33:71:12:fa:
92:55:1a:dc:23:7f:27:bc:62:79:b6:ac:13:69:b8:ee:f5:c1:
5e:3e:6c:8b:e3:72:c1:06:3b:71:30:65:ef:ad:c4:3e:4a:ba:
3e:59:03:cb:33:22:43:93:ac:ba:dc:f6:ae:be:7f:fe:16:bc:
a1:53:15:4d:ba:03:ae:6b:93:fc:66:1e:d2:3a:86:98:23:87:
be:43:51:cf:15:7d:96:b7:29:1c:40:5a:bb:01:cc:a7:63:c2:
88:51:23:ca:df:35:69:4c:24:90:cb:65:ea:2b:b6:94:a0:e0:
24:dc:d6:f9:fe:bd:7b:be:c8:6f:27:19:b7:79:e5:0f:ef:d9:
5b:f1:87:0d:1a:62:11:7b:10:86:13:47:54:d5:d6:e6:b0:dc:
3e:2c:6f:2f:9f:59:31:84:f5:78:a2:aa:53:e1:d9:50:5b:3e:
04:36:e4:c8:3d:aa:9a:00:93:f8:82:46:ec:a5:7f:e9:db:61:
f6:17:9d:65:d0:52:8d:67:0a:17:82:b1:45:e0:5e:eb:2b:0a:
90:48:71:25:f6:7b:ec:4e:4b:7a:28:c8:be:a7:88:26:0b:d8:
8a:18:2b:ae
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXEuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MDgwMDU5WhcNMjUwOTMwMDgwMDU5WjAYMRYw
FAYDVQQDEw02OGFlYmIzZi02ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4IyQTEdNJ7znwcL2oTYDyoiAAVuL+BsLV5z7JHC0Pn4XdWC6+/5OWA4S
dW7g6oaXgQ9Du+dgkNCRhGO1t/hE+S+0c51bwxHqkFf+WH6BQaaeW2eigQl69bPb
jQrm5QU+e1H69GXwkbnY2h4JH0wBxPDLGrBMKwiYdZopSrIVVmbrdxAJQVIEezth
S5dkDfDhGkehesR8QBctP+pHrOwPaB1k4ANPwekCpqSCglx2cq4D9OGMjQAS6GxS
wdL+OFjwsk9XRoXOxAV44W3HZaJcQ6OJYLvPFf0/yeUFggU+1UHGsC0bxvsImB6I
FBvGUkpLHG4Deu0xZdF90c5csLwRuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGcw
xHhYQgXcpWNn58qvWfApo+hPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTIzNzg4ODgzMUIxMUYwQUVEMzA2OENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQCHIhRMAgqp0quXdCJNjgIyWu4FCfuqKMCYA05LgFyMHTNxEvqSVRrcI38n
vGJ5tqwTabju9cFePmyL43LBBjtxMGXvrcQ+Sro+WQPLMyJDk6y63Pauvn/+Fryh
UxVNugOua5P8Zh7SOoaYI4e+Q1HPFX2WtykcQFq7AcynY8KIUSPK3zVpTCSQy2Xq
K7aUoOAk3Nb5/r17vshvJxm3eeUP79lb8YcNGmIRexCGE0dU1dbmsNw+LG8vn1kx
hPV4oqpT4dlQWz4ENuTIPaqaAJP4gkbspX/p22H2F51l0FKNZwoXgrFF4F7rKwqQ
SHEl9nvsTkt6KMi+p4gmC9iKGCuu
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:52 2025 by rpki-client