Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315626D2490811F0BFCA9FC7DAE4EC9C.roa
File: 315626D2490811F0BFCA9FC7DAE4EC9C.roa (raw, json)
Hash identifier: WudQtZTZo0ZTlZhedofDZGZ9+7dsjvk6KaVgEQlxCAo=
Subject key identifier: C3:12:A5:0F:58:F7:59:08:F3:46:DA:CE:D3:37:41:BD:14:D6:FB:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315626D2490811F0BFCA9FC7DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:13:19 +0000
ROA not before: Sat 14 Jun 2025 10:13:14 +0000
ROA not after: Mon 21 Jul 2025 10:13:14 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89093 (0x15c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:13:14 2025 GMT
Not After : Jul 21 10:13:14 2025 GMT
Subject: CN=684d4b3f-bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:ed:22:63:87:ee:55:cb:b7:7c:bd:ca:c7:
3c:58:f8:fe:ab:9c:de:da:67:d0:7e:1f:61:97:31:
2f:5a:f3:5b:6f:ed:cb:46:ec:c5:95:0f:ed:7e:05:
92:5a:92:c4:93:17:fc:bc:ef:83:39:f2:2a:12:8f:
da:94:54:f5:27:cb:8b:62:4f:87:90:4d:5c:9f:4b:
a8:6a:e6:49:f8:81:12:1c:31:ea:b2:58:01:51:19:
b7:23:0a:dc:fb:16:8c:d2:cc:2c:64:fb:c8:55:86:
6e:61:c2:2b:ec:8d:8e:a5:2c:88:b6:0b:74:cf:5e:
cd:0d:10:29:b6:9a:8c:87:75:49:cf:c6:16:25:4f:
8e:08:e4:11:3f:cf:23:a2:22:e6:94:25:25:04:db:
4c:d1:4f:1a:84:e7:d6:b0:1d:9b:7f:21:cb:4c:3f:
e7:be:73:8a:4c:90:40:cf:30:47:14:8b:4f:ca:72:
71:17:26:58:65:cb:10:6a:a5:6a:39:64:2b:4a:37:
72:d4:38:4e:27:ed:1f:3b:ca:8b:eb:c5:b7:91:86:
f2:fc:18:da:ec:ce:46:15:b5:3c:44:8e:04:16:8d:
4d:c4:98:08:32:9c:fd:4b:a5:d3:96:2c:6b:8b:d6:
8e:b2:5a:23:e3:2a:83:06:e5:de:f7:1a:62:0d:2f:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:A5:0F:58:F7:59:08:F3:46:DA:CE:D3:37:41:BD:14:D6:FB:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315626D2490811F0BFCA9FC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
6d:a1:98:1f:5e:04:ab:14:a2:b4:48:27:3e:87:1d:8e:44:fc:
a7:d5:35:03:0e:06:04:4f:10:e6:c3:4b:7e:4a:e4:58:28:aa:
4d:c5:04:b7:4a:67:80:5c:e8:59:16:0a:75:76:83:72:44:63:
5c:69:35:6a:35:c4:a9:a8:5a:16:d9:a6:34:75:5e:f4:50:a2:
57:37:e2:1d:94:c6:35:ad:9f:41:df:05:94:60:8a:c4:79:df:
fe:3b:55:51:81:1b:ed:a9:37:9c:07:af:08:6e:03:7f:63:0d:
37:69:d1:65:72:5b:4b:e6:74:0d:ce:1c:5b:33:37:a2:df:eb:
97:f8:0d:74:e8:e1:95:46:73:a7:bb:9b:f1:3c:1b:97:b5:ea:
eb:2c:b3:ee:67:43:4d:a6:a4:8c:bd:7e:72:b1:a7:5e:b6:2b:
cb:8d:e5:d7:05:8d:92:6e:17:18:3d:ce:8d:9b:1c:94:a4:7d:
6d:f6:c9:cd:84:c5:53:1c:15:3f:d8:b2:5f:d7:77:df:07:5b:
36:c1:0c:cc:7b:31:cc:12:03:94:e3:3e:dc:ac:9f:ef:c6:89:
cf:36:c2:28:6b:2b:e8:a1:9c:b3:8d:45:58:cc:a1:87:0a:36:
f1:04:d8:d3:5c:7e:90:54:00:2f:8d:8f:22:de:b7:57:c6:57:
8f:6d:aa:3b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVwFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE0MTAxMzE0WhcNMjUwNzIxMTAxMzE0WjAYMRYw
FAYDVQQDEw02ODRkNGIzZi1iY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNXtImOH7lXLt3y9ysc8WPj+q5ze2mfQfh9hlzEvWvNbb+3LRuzFlQ/t
fgWSWpLEkxf8vO+DOfIqEo/alFT1J8uLYk+HkE1cn0uoauZJ+IESHDHqslgBURm3
Iwrc+xaM0swsZPvIVYZuYcIr7I2OpSyItgt0z17NDRAptpqMh3VJz8YWJU+OCOQR
P88joiLmlCUlBNtM0U8ahOfWsB2bfyHLTD/nvnOKTJBAzzBHFItPynJxFyZYZcsQ
aqVqOWQrSjdy1DhOJ+0fO8qL68W3kYby/Bja7M5GFbU8RI4EFo1NxJgIMpz9S6XT
lixri9aOsloj4yqDBuXe9xpiDS+GQQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMMS
pQ9Y91kI80baztM3Qb0U1vuXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTU2MjZEMjQ5MDgxMUYwQkZDQTlGQzdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec6YADBAOc6ZAwDQYJKoZI
hvcNAQELBQADggEBAG2hmB9eBKsUorRIJz6HHY5E/KfVNQMOBgRPEObDS35K5Fgo
qk3FBLdKZ4Bc6FkWCnV2g3JEY1xpNWo1xKmoWhbZpjR1XvRQolc34h2UxjWtn0Hf
BZRgisR53/47VVGBG+2pN5wHrwhuA39jDTdp0WVyW0vmdA3OHFszN6Lf65f4DXTo
4ZVGc6e7m/E8G5e16usss+5nQ02mpIy9fnKxp162K8uN5dcFjZJuFxg9zo2bHJSk
fW32yc2ExVMcFT/Ysl/Xd98HWzbBDMx7McwSA5TjPtysn+/Gic82wihrK+ihnLON
RVjMoYcKNvEE2NNcfpBUAC+NjyLet1fGV49tqjs=
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:33 2025 by rpki-client