Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DC026049D511F0837E877DDAE4EC9C.roa
File: 14DC026049D511F0837E877DDAE4EC9C.roa (raw, json)
Hash identifier: xTNCJFJLzgMpov93c8LR87JcgZ0nkFTSQ2p8o0ARssk=
Subject key identifier: EE:4A:EC:AF:B4:F6:D5:65:74:18:27:27:40:F5:BA:B2:B0:6D:16:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DC026049D511F0837E877DDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 10:39:58 +0000
ROA not before: Sun 15 Jun 2025 10:39:52 +0000
ROA not after: Wed 25 Jun 2025 10:39:52 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89162 (0x15c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 10:39:52 2025 GMT
Not After : Jun 25 10:39:52 2025 GMT
Subject: CN=684ea2fe-072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:d0:87:75:6d:de:a0:d9:10:c2:90:a5:87:
ec:b9:e3:ff:4f:ff:5a:f7:8e:6f:0b:bc:dc:92:72:
03:d0:ad:4f:ad:36:2d:83:5b:45:26:44:46:b4:a2:
88:6b:e0:2b:33:34:3c:14:45:9c:5f:73:3b:24:ee:
8e:ff:1c:8d:b1:f7:17:e6:32:52:d8:ad:33:04:be:
05:77:c5:c6:63:d6:47:2e:39:d5:bd:7e:ee:a1:51:
04:42:9d:34:b4:b3:06:13:42:b7:64:37:45:de:c4:
94:ee:07:60:9c:d4:d9:38:0b:fb:46:8b:89:b9:ad:
73:50:30:3a:a4:78:a4:57:17:72:db:28:7e:b4:07:
92:6a:11:89:d5:0f:2d:ca:b1:bc:2d:0f:b9:cd:9c:
b7:e2:90:6b:c0:bb:48:6d:e5:e7:ac:eb:59:0f:fd:
80:ab:69:37:0c:11:9f:43:94:3e:33:0a:c2:18:64:
6e:36:69:d6:bb:ff:90:2f:7a:fb:1e:83:e0:68:60:
48:10:73:43:82:25:27:dd:b3:8e:75:f5:37:f6:cc:
59:64:b5:f1:13:3c:04:ef:60:ea:d1:6e:5d:18:71:
60:68:d3:f0:a8:29:cd:d3:85:5f:b6:98:29:3c:48:
c1:ae:f7:17:19:07:3a:28:92:18:7b:a6:7b:a7:cd:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:EC:AF:B4:F6:D5:65:74:18:27:27:40:F5:BA:B2:B0:6D:16:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DC026049D511F0837E877DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
99:8a:cf:36:ba:a3:a6:19:ab:ce:ae:38:e8:31:aa:f0:75:50:
60:13:e5:6d:e3:47:2f:90:68:a2:fb:e2:57:ff:9d:90:cd:1f:
2c:b8:6b:d6:b0:43:9f:84:6b:0c:4d:12:b5:b2:74:54:bf:4f:
cc:58:7e:c2:16:41:08:01:42:95:57:78:69:e6:b7:9b:eb:64:
09:e0:36:10:0e:01:24:98:fb:9b:cb:59:82:56:82:3a:12:35:
53:e1:85:6f:3c:28:11:6f:f6:57:64:fc:f4:8c:6f:3e:ae:7d:
4e:dd:bb:6e:5b:64:89:c4:4b:0e:76:8d:c7:eb:2f:75:10:76:
46:c9:3f:65:a9:09:99:29:36:06:fc:52:fc:ca:04:32:f9:f8:
ce:e3:8a:08:5d:96:cb:7b:10:00:31:ed:6e:02:66:fa:06:0f:
04:4f:14:08:7a:8e:36:ee:14:98:67:a2:7a:25:41:a5:ca:c1:
9e:d6:a9:5c:1e:42:cf:d2:f8:a9:20:86:58:ae:df:8c:6c:dc:
3e:7c:2c:81:11:11:72:bb:68:e9:74:89:94:b8:63:35:78:31:
95:3c:04:d7:d9:79:2c:95:aa:3d:88:e8:46:78:69:ea:73:23:
49:2d:2d:57:54:b0:74:ca:3a:47:ed:d3:db:f0:6e:86:d6:ba:
97:0c:c7:08
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVxKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE1MTAzOTUyWhcNMjUwNjI1MTAzOTUyWjAYMRYw
FAYDVQQDEw02ODRlYTJmZS0wNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo8DQh3Vt3qDZEMKQpYfsueP/T/9a945vC7zcknID0K1PrTYtg1tFJkRG
tKKIa+ArMzQ8FEWcX3M7JO6O/xyNsfcX5jJS2K0zBL4Fd8XGY9ZHLjnVvX7uoVEE
Qp00tLMGE0K3ZDdF3sSU7gdgnNTZOAv7RouJua1zUDA6pHikVxdy2yh+tAeSahGJ
1Q8tyrG8LQ+5zZy34pBrwLtIbeXnrOtZD/2Aq2k3DBGfQ5Q+MwrCGGRuNmnWu/+Q
L3r7HoPgaGBIEHNDgiUn3bOOdfU39sxZZLXxEzwE72Dq0W5dGHFgaNPwqCnN04Vf
tpgpPEjBrvcXGQc6KJIYe6Z7p800OwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO5K
7K+09tVldBgnJ0D1urKwbRYqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNERDMDI2MDQ5RDUxMUYwODM3RTg3N0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO5IMA0GCSqGSIb3DQEBCwUA
A4IBAQCZis82uqOmGavOrjjoMarwdVBgE+Vt40cvkGii++JX/52QzR8suGvWsEOf
hGsMTRK1snRUv0/MWH7CFkEIAUKVV3hp5reb62QJ4DYQDgEkmPuby1mCVoI6EjVT
4YVvPCgRb/ZXZPz0jG8+rn1O3btuW2SJxEsOdo3H6y91EHZGyT9lqQmZKTYG/FL8
ygQy+fjO44oIXZbLexAAMe1uAmb6Bg8ETxQIeo427hSYZ6J6JUGlysGe1qlcHkLP
0vipIIZYrt+MbNw+fCyBERFyu2jpdImUuGM1eDGVPATX2Xkslao9iOhGeGnqcyNJ
LS1XVLB0yjpH7dPb8G6G1rqXDMcI
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:27:15 2025 by rpki-client