Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704D229A14E811F0A7EA6B046EB8BCC6.roa
File: 704D229A14E811F0A7EA6B046EB8BCC6.roa (raw, json)
Hash identifier: K5sngckyC7Xlb4YwCsEFTKm8Z/Mf+g3MRK93EQEamyY=
Subject key identifier: 12:A3:30:8C:51:F9:4B:5D:E7:47:B2:63:77:C5:3E:90:95:AE:92:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704D229A14E811F0A7EA6B046EB8BCC6.roa
Signing time: Wed 09 Apr 2025 02:15:00 +0000
ROA not before: Wed 09 Apr 2025 02:14:55 +0000
ROA not after: Tue 29 Apr 2025 02:14:55 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84724 (0x14af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 02:14:55 2025 GMT
Not After : Apr 29 02:14:55 2025 GMT
Subject: CN=67f5d824-612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:ab:56:e8:2b:c7:2d:ee:92:03:06:d2:63:
9f:64:38:9d:91:dc:12:ff:5c:2f:23:f2:82:7a:ce:
66:3c:60:b1:91:79:e2:0b:97:aa:6c:a9:bd:c1:da:
b8:ca:06:82:f8:af:13:17:6d:64:83:70:22:de:ee:
a7:e7:fe:17:9c:d7:21:14:6e:aa:e4:2a:2c:7c:f5:
d9:15:da:5a:0b:3f:3e:7a:19:3c:cb:84:db:8b:c0:
c7:d1:ca:52:f8:3e:65:b8:d0:7a:4c:a7:f5:08:3c:
f2:f2:1e:61:dd:5d:89:17:f8:e6:51:ed:2b:0d:0e:
d7:d3:f1:c9:4c:6f:07:d7:61:2d:cf:92:1d:e0:87:
07:09:9c:ff:b5:74:6b:c4:ca:81:80:aa:a8:ae:26:
b7:98:bc:3b:df:64:e8:c4:b9:12:85:50:02:d0:2e:
83:0f:a6:82:87:9a:68:ba:8b:61:61:eb:17:3f:eb:
3a:21:92:1c:fa:4a:b4:00:d1:8f:2a:e1:03:92:09:
b3:32:1e:51:b1:c3:fc:a5:ad:43:28:91:81:29:02:
e1:6e:90:c1:d0:63:53:3c:c1:32:f8:0e:dd:93:a3:
c6:79:50:b2:06:95:12:28:e5:87:0c:2f:06:c5:de:
1e:fb:a1:6f:e7:0e:42:a2:98:a2:e0:52:32:5c:c0:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:30:8C:51:F9:4B:5D:E7:47:B2:63:77:C5:3E:90:95:AE:92:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704D229A14E811F0A7EA6B046EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ce:9f:bb:c9:d5:91:49:c4:ab:94:cb:e2:30:de:0d:46:22:
97:8f:8f:eb:8e:d2:10:f4:de:58:9a:30:a4:6d:1b:f2:40:dd:
da:68:0f:ca:03:b2:00:0a:9f:ed:95:f1:77:c2:fb:0f:b2:f5:
15:51:71:34:10:7d:31:aa:31:02:c2:3c:00:d5:e7:05:22:d5:
81:c1:a4:d6:3f:4f:ce:a2:ba:80:ab:d5:71:58:9b:cc:c0:4f:
84:f1:8f:9c:63:d7:51:b8:62:dd:3d:d2:f4:ae:92:25:50:bf:
cd:c2:0b:34:ec:7f:06:79:dd:5a:36:50:cd:af:81:5c:3e:52:
ad:ef:06:3e:77:88:fe:86:86:c4:2b:62:3d:75:1d:44:47:d3:
b6:e7:a7:cd:40:9b:3b:4b:ad:c7:b1:d8:5b:ea:63:4f:ee:b6:
80:0e:1c:27:9d:8f:99:bd:6e:69:11:fa:83:43:5a:bb:0f:32:
b5:d2:59:4b:22:08:79:23:8f:d2:df:c3:6f:80:fd:2b:55:38:
57:88:c4:39:03:c5:c6:2b:e9:98:39:23:85:d8:a6:24:22:01:
56:78:cc:aa:f4:8d:a4:7f:c8:c4:cf:7c:31:ba:a0:1d:d9:1d:
16:34:cb:39:27:97:a8:1e:2d:bc:b7:93:f9:f3:47:80:5b:76:
9c:38:7a:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUr0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA5MDIxNDU1WhcNMjUwNDI5MDIxNDU1WjAYMRYw
FAYDVQQDEw02N2Y1ZDgyNC02MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0d6rVugrxy3ukgMG0mOfZDidkdwS/1wvI/KCes5mPGCxkXniC5eqbKm9
wdq4ygaC+K8TF21kg3Ai3u6n5/4XnNchFG6q5CosfPXZFdpaCz8+ehk8y4Tbi8DH
0cpS+D5luNB6TKf1CDzy8h5h3V2JF/jmUe0rDQ7X0/HJTG8H12Etz5Id4IcHCZz/
tXRrxMqBgKqoria3mLw732ToxLkShVAC0C6DD6aCh5pouothYesXP+s6IZIc+kq0
ANGPKuEDkgmzMh5RscP8pa1DKJGBKQLhbpDB0GNTPMEy+A7dk6PGeVCyBpUSKOWH
DC8Gxd4e+6Fv5w5Copii4FIyXMBB9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBKj
MIxR+Utd50eyY3fFPpCVrpLzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MDREMjI5QTE0RTgxMUYwQTdFQTZCMDQ2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQBpzp+7ydWRScSrlMviMN4NRiKXj4/rjtIQ9N5YmjCkbRvyQN3aaA/KA7IA
Cp/tlfF3wvsPsvUVUXE0EH0xqjECwjwA1ecFItWBwaTWP0/OorqAq9VxWJvMwE+E
8Y+cY9dRuGLdPdL0rpIlUL/Nwgs07H8Ged1aNlDNr4FcPlKt7wY+d4j+hobEK2I9
dR1ER9O256fNQJs7S63Hsdhb6mNP7raADhwnnY+ZvW5pEfqDQ1q7DzK10llLIgh5
I4/S38NvgP0rVThXiMQ5A8XGK+mYOSOF2KYkIgFWeMyq9I2kf8jEz3wxuqAd2R0W
NMs5J5eoHi28t5P580eAW3acOHov
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:53:55 2025 by rpki-client