Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3678E4D2439B11F0B17B19ECDAE4EC9C.roa
File: 3678E4D2439B11F0B17B19ECDAE4EC9C.roa (raw, json)
Hash identifier: c9oz9aUBorokRted7e4JI1KFkGFwGlcCu6vNoG5f+6Q=
Subject key identifier: CE:69:E8:FF:DC:62:68:70:F5:B6:C5:8E:2B:09:17:6E:34:5B:D1:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3678E4D2439B11F0B17B19ECDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:30:36 +0000
ROA not before: Sat 07 Jun 2025 12:30:31 +0000
ROA not after: Fri 11 Jul 2025 12:30:31 +0000
asID: 395839
IP address blocks: 156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88653 (0x15a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 12:30:31 2025 GMT
Not After : Jul 11 12:30:31 2025 GMT
Subject: CN=684430ec-f7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:e4:a1:22:94:b3:c1:f0:52:c6:48:53:02:
56:44:7f:28:f5:97:9b:a8:3e:8d:68:2a:c8:42:2e:
ea:71:86:70:44:a0:af:4c:5c:89:0b:6f:e0:4a:66:
99:b9:75:3d:76:9a:e5:95:b0:2c:37:f6:44:62:45:
a4:f2:ad:a8:d6:9b:37:f8:a0:da:a5:43:a1:8a:49:
fa:a0:8a:2b:b5:10:2f:dc:17:e7:9e:5b:b7:2a:1b:
92:86:54:41:6d:c8:d7:82:a2:50:b0:3e:02:37:93:
47:6a:22:f8:3b:e8:56:06:6e:72:41:5b:a0:9b:e8:
bf:6a:92:2c:43:30:b5:b0:e9:b4:e7:ab:fa:77:e9:
dd:e9:13:07:b3:0b:e1:a4:d0:b5:50:28:c3:5c:a4:
44:dc:d6:79:d4:d4:2b:51:15:ba:33:0c:e7:29:9c:
33:12:5f:51:44:c8:ae:41:47:18:91:ed:7b:c7:76:
52:d2:82:83:2e:aa:1a:19:64:97:81:89:c4:89:2b:
39:c5:9b:c9:05:8d:d8:8e:56:da:ac:ef:56:d3:d9:
c3:08:84:37:46:5b:4f:84:b8:2d:c1:b5:75:18:31:
56:35:36:fb:05:32:d8:15:de:a6:75:2e:94:bb:ca:
27:2f:3b:ba:9f:3b:d9:b3:90:84:b3:0e:b9:7b:56:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:E8:FF:DC:62:68:70:F5:B6:C5:8E:2B:09:17:6E:34:5B:D1:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3678E4D2439B11F0B17B19ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cb:4d:20:84:c5:fa:8c:ac:05:0b:4c:58:5d:54:60:cb:f1:
8f:09:b5:0f:5e:39:ff:bf:af:fd:15:15:fa:10:8d:67:36:73:
ca:50:00:cf:99:b9:62:1b:a2:6c:da:42:ef:50:21:63:1c:92:
1c:2e:18:a3:33:83:53:89:85:c1:f6:a3:e3:d1:cc:12:1c:ff:
c8:71:e2:ef:bc:98:ea:7c:21:f9:ad:7f:c4:3b:71:f8:3f:07:
4b:06:66:1d:00:28:df:d1:93:77:e0:99:72:28:77:c1:ad:6c:
82:ad:88:76:45:34:27:12:3a:90:06:2f:16:fb:3b:48:4f:51:
f0:b0:b1:1b:56:ea:f6:37:f1:72:6d:40:12:92:b1:d4:c8:a4:
ab:fb:bd:30:c1:c7:af:dc:7a:0d:de:ea:ed:33:9d:55:06:e7:
f2:36:6c:f8:63:eb:78:a8:6c:bf:1d:1e:c7:41:13:ef:59:91:
2f:e5:83:07:b9:1e:bb:70:66:6e:27:4c:d6:8e:73:56:bb:10:
90:2e:10:4e:6e:d5:8f:2f:55:99:7a:58:7f:c9:7e:24:e0:5b:
b8:73:63:27:55:c1:30:fe:d8:e4:f8:e6:b9:4f:ee:5d:ed:f7:
e3:5e:c0:25:45:2f:21:31:2b:b7:30:42:a3:8a:55:59:fe:7f:
c5:f4:55:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVpNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjA3MTIzMDMxWhcNMjUwNzExMTIzMDMxWjAYMRYw
FAYDVQQDEw02ODQ0MzBlYy1mN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl1LkoSKUs8HwUsZIUwJWRH8o9ZebqD6NaCrIQi7qcYZwRKCvTFyJC2/g
SmaZuXU9dprllbAsN/ZEYkWk8q2o1ps3+KDapUOhikn6oIortRAv3Bfnnlu3KhuS
hlRBbcjXgqJQsD4CN5NHaiL4O+hWBm5yQVugm+i/apIsQzC1sOm056v6d+nd6RMH
swvhpNC1UCjDXKRE3NZ51NQrURW6MwznKZwzEl9RRMiuQUcYke17x3ZS0oKDLqoa
GWSXgYnEiSs5xZvJBY3YjlbarO9W09nDCIQ3RltPhLgtwbV1GDFWNTb7BTLYFd6m
dS6Uu8onLzu6nzvZs5CEsw65e1bkpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM5p
6P/cYmhw9bbFjisJF240W9FOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNjc4RTREMjQzOUIxMUYwQjE3QjE5RUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUbMA0GCSqGSIb3DQEBCwUA
A4IBAQAAy00ghMX6jKwFC0xYXVRgy/GPCbUPXjn/v6/9FRX6EI1nNnPKUADPmbli
G6Js2kLvUCFjHJIcLhijM4NTiYXB9qPj0cwSHP/IceLvvJjqfCH5rX/EO3H4PwdL
BmYdACjf0ZN34JlyKHfBrWyCrYh2RTQnEjqQBi8W+ztIT1HwsLEbVur2N/FybUAS
krHUyKSr+70wwcev3HoN3urtM51VBufyNmz4Y+t4qGy/HR7HQRPvWZEv5YMHuR67
cGZuJ0zWjnNWuxCQLhBObtWPL1WZelh/yX4k4Fu4c2MnVcEw/tjk+Oa5T+5d7ffj
XsAlRS8hMSu3MEKjilVZ/n/F9FXr
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:12 2025 by rpki-client