Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/A1805C0C92FF11F0845A567BDAE4EC9C.roa
File: A1805C0C92FF11F0845A567BDAE4EC9C.roa (raw, json)
Hash identifier: ccYbYk4DFeBezZ71ObQ5q/wL3jkn4Z2RITih1QoUcNo=
Subject key identifier: 27:6A:93:54:B1:6E:8A:30:FE:E9:4E:CA:23:88:F1:9B:E3:3A:EC:9C
Certificate issuer: /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial: 0399
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Authority info access: rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/A1805C0C92FF11F0845A567BDAE4EC9C.roa
Signing time: Tue 16 Sep 2025 13:18:27 +0000
ROA not before: Tue 16 Sep 2025 13:18:23 +0000
ROA not after: Wed 16 Sep 2026 13:18:23 +0000
asID: 37276
IP address blocks: 168.253.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Validity
Not Before: Sep 16 13:18:23 2025 GMT
Not After : Sep 16 13:18:23 2026 GMT
Subject: CN=68c963a3-a618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:8a:2d:3f:f1:69:09:dd:49:59:eb:9f:e9:
44:aa:2e:3d:08:63:ac:be:02:13:c4:5e:ae:eb:5e:
48:97:05:2b:90:2f:ce:50:29:f7:b9:fe:b3:0a:58:
d4:ea:2b:5a:1f:fb:0e:86:02:fa:28:35:ed:b5:90:
2f:49:bf:90:51:11:73:13:95:6e:d8:2b:4c:06:bc:
94:8d:13:fd:2c:34:76:8b:bc:f3:35:f3:98:6e:ef:
d1:5a:17:63:27:1b:97:85:22:5d:1c:f8:d2:b6:37:
b7:5e:d8:de:ab:73:ef:4e:ba:a5:98:b8:e4:e4:c8:
f4:0d:ac:db:b7:a1:50:4a:95:10:32:8d:0a:b9:5f:
b6:35:a9:3b:24:20:aa:23:41:52:12:27:d7:5c:a3:
75:5b:1a:fd:3a:cb:73:a6:1e:03:87:a8:af:42:17:
9d:76:12:35:03:e8:eb:eb:b6:98:09:2e:b1:28:74:
d3:a1:db:93:3b:be:0a:f3:13:f4:37:66:78:b4:ad:
ce:5f:c5:b1:38:34:6c:9c:8b:b3:ce:a0:1a:df:f3:
c6:08:97:15:c2:6e:8c:31:a2:60:c7:e9:ca:e5:5a:
7a:44:5c:8f:f0:d0:f9:44:a4:12:06:0d:b8:d0:5f:
c4:d9:b9:62:6d:54:98:50:53:2e:9b:9d:2c:f5:9f:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:93:54:B1:6E:8A:30:FE:E9:4E:CA:23:88:F1:9B:E3:3A:EC:9C
X509v3 Authority Key Identifier:
keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/A1805C0C92FF11F0845A567BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.192.0/20
Signature Algorithm: sha256WithRSAEncryption
30:fa:06:2e:47:9f:6a:69:7b:8a:b1:17:f1:8b:3c:31:4e:3e:
25:f4:7c:35:7c:ed:a9:72:2b:3f:fd:4f:e4:b7:d9:42:24:a8:
76:0b:39:04:25:86:60:97:3a:e6:45:2e:33:9a:23:ef:ff:69:
8c:69:09:16:b5:66:b5:ba:11:ff:f8:ab:f1:05:c0:fd:23:b6:
c1:78:94:29:b2:9e:de:bb:ad:14:51:de:74:99:8e:78:23:f2:
e6:d3:14:95:46:bc:c1:c5:22:b2:7a:b9:08:83:23:36:04:11:
ed:2d:7a:8e:b2:e0:40:dc:59:28:c2:58:e0:7b:91:74:b4:3c:
c1:fc:61:b8:a9:cf:89:9b:43:ca:5e:6f:f7:69:bd:35:ec:57:
eb:62:61:62:90:b0:a5:93:26:fd:d9:71:17:21:c2:e8:bc:83:
65:71:89:43:09:b3:b4:c8:e4:b8:51:cd:5a:36:b4:44:3d:d8:
4d:f5:3b:7e:3b:a8:c6:0f:8c:4a:ef:9a:4c:92:33:16:4e:3a:
48:a7:49:9a:b9:fa:72:cc:11:79:6d:58:e3:7e:4a:d5:d8:83:
d7:2b:17:16:19:2b:0b:cc:19:10:ab:de:92:b9:e7:10:67:01:
d5:5a:38:2d:69:b5:c5:9b:e3:40:55:cc:f3:cf:a1:85:e8:9e:
ab:4e:b8:b9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDVGNUFBUjExMC8GA1UEBRMoNUVFQTVBMkZFNzJGNDM0Mjg1RjgxOEI2ODIzMDJE
OUJDMkFENDRCRjAeFw0yNTA5MTYxMzE4MjNaFw0yNjA5MTYxMzE4MjNaMBgxFjAU
BgNVBAMTDTY4Yzk2M2EzLWE2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtOIotP/FpCd1JWeuf6USqLj0IY6y+AhPEXq7rXkiXBSuQL85QKfe5/rMK
WNTqK1of+w6GAvooNe21kC9Jv5BREXMTlW7YK0wGvJSNE/0sNHaLvPM185hu79Fa
F2MnG5eFIl0c+NK2N7de2N6rc+9OuqWYuOTkyPQNrNu3oVBKlRAyjQq5X7Y1qTsk
IKojQVISJ9dco3VbGv06y3OmHgOHqK9CF512EjUD6OvrtpgJLrEodNOh25M7vgrz
E/Q3Zni0rc5fxbE4NGyci7POoBrf88YIlxXCbowxomDH6crlWnpEXI/w0PlEpBIG
DbjQX8TZuWJtVJhQUy6bnSz1n8cPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJ2qT
VLFuijD+6U7KI4jxm+M67JwwHwYDVR0jBBgwFoAUXupaL+cvQ0KF+Bi2gjAtm8Kt
RL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1RjVBLzNBQjkxODdFREFBNjExRUQ5QjFFMDBDNTJGNkQ4QzFEL1h1cGFM
LWN2UTBLRi1CaTJnakF0bThLdFJMOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1h1cGFMLWN2UTBLRi1CaTJnakF0bThLdFJMOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkQ1RjVBLzNBQjkxODdFREFBNjExRUQ5QjFFMDBDNTJGNkQ4
QzFEL0ExODA1QzBDOTJGRjExRjA4NDVBNTY3QkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASo/cAwDQYJKoZIhvcNAQELBQAD
ggEBADD6Bi5Hn2ppe4qxF/GLPDFOPiX0fDV87alyKz/9T+S32UIkqHYLOQQlhmCX
OuZFLjOaI+//aYxpCRa1ZrW6Ef/4q/EFwP0jtsF4lCmynt67rRRR3nSZjngj8ubT
FJVGvMHFIrJ6uQiDIzYEEe0teo6y4EDcWSjCWOB7kXS0PMH8Ybipz4mbQ8peb/dp
vTXsV+tiYWKQsKWTJv3ZcRchwui8g2VxiUMJs7TI5LhRzVo2tEQ92E31O347qMYP
jErvmkySMxZOOkinSZq5+nLMEXltWON+StXYg9crFxYZKwvMGRCr3pK55xBnAdVa
OC1ptcWb40BVzPPPoYXonqtOuLk=
-----END CERTIFICATE-----
Generated at Tue Sep 16 20:12:25 2025 by rpki-client