Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93769ED241C411F09013CD7CDAE4EC9C.roa
File: 93769ED241C411F09013CD7CDAE4EC9C.roa (raw, json)
Hash identifier: XBfBF7mnpmgb+8NE3WhPMzbze/1RVZMVqTkjM3ceiCo=
Subject key identifier: F1:57:A9:61:EC:F4:51:80:28:91:79:DF:61:D6:25:05:49:D8:B9:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93769ED241C411F09013CD7CDAE4EC9C.roa
Signing time: Thu 05 Jun 2025 04:21:39 +0000
ROA not before: Thu 05 Jun 2025 04:21:34 +0000
ROA not after: Wed 25 Jun 2025 04:21:34 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88532 (0x159d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 04:21:34 2025 GMT
Not After : Jun 25 04:21:34 2025 GMT
Subject: CN=68411b53-2e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:6b:1f:11:4f:a4:53:5b:a6:52:2b:d2:b5:
60:08:45:b2:39:c0:55:66:f0:f2:37:56:9f:e7:cf:
d0:60:50:1b:0f:de:24:51:ff:4f:dd:f3:80:1b:d5:
15:dc:51:65:50:af:06:ee:39:73:84:d3:e4:49:b8:
fd:d7:a4:fd:2c:bb:61:9b:ed:06:e2:20:7f:df:1c:
98:35:39:ec:85:2a:5d:5b:15:ff:4a:54:ba:aa:3b:
78:ce:36:0e:cf:2e:fe:2e:59:ce:d6:2d:58:64:21:
ed:7d:a6:b8:b0:60:0e:2d:dd:3d:e9:30:1c:a2:e2:
04:9d:23:89:b5:aa:f8:c5:ae:15:be:53:6a:a4:d4:
71:02:8f:db:06:cc:2e:e1:eb:51:9d:fd:3b:d2:a6:
d0:b1:0c:9d:de:f0:a7:5a:ec:e8:41:10:5b:a2:08:
9e:3e:ee:db:07:2b:d2:a5:14:fc:c4:97:a5:28:09:
22:07:7f:cb:fa:76:05:fb:23:61:34:83:24:54:bc:
d8:fe:df:fa:4a:b5:f2:75:27:2e:eb:4c:17:14:bb:
82:cc:40:43:35:4b:34:a1:b1:1a:ee:35:3a:91:b4:
05:53:7e:0f:5a:77:80:eb:0c:99:bb:95:6d:87:71:
bd:c6:8b:3d:0a:93:cf:85:f6:fb:be:2e:c6:91:7f:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:A9:61:EC:F4:51:80:28:91:79:DF:61:D6:25:05:49:D8:B9:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93769ED241C411F09013CD7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:39:e2:0e:d0:6a:b4:05:46:e9:b0:30:7f:29:ca:4a:01:15:
e3:d9:43:1c:06:aa:ba:70:7a:2b:97:64:68:ae:5e:fe:da:99:
5e:69:ff:36:b2:5d:46:c3:aa:41:5b:a6:c6:0c:13:f2:ad:74:
e1:1c:ba:28:de:74:91:be:a0:b1:6d:e7:62:ef:f4:fc:8a:e2:
e8:1c:66:a6:9b:57:0a:d5:d9:c5:85:06:93:f7:3d:f3:74:95:
c8:c0:76:18:45:d8:a3:85:96:91:ee:3e:30:ea:44:c8:f2:00:
57:66:ea:da:d2:b3:a7:93:10:4c:ef:98:59:d9:7b:bf:aa:0f:
40:98:a0:4e:ee:95:81:c4:db:19:cb:1a:86:32:b6:c8:df:b1:
c1:9d:05:e3:b5:3f:86:72:9f:06:7b:ba:51:2b:c4:04:83:1d:
0b:77:12:55:25:28:4c:3e:49:47:fc:24:f0:d0:17:fa:a0:66:
b7:14:8e:71:43:0c:dd:61:35:f5:af:e2:5b:59:b0:3a:41:a7:
3a:47:f8:b2:d4:ff:0c:c2:1b:1f:0e:ae:a9:30:91:f7:b5:b9:
85:8e:e2:59:15:6a:27:6b:a9:a6:b2:17:31:09:60:ac:52:1e:
44:aa:31:3a:88:54:17:85:3e:c0:c6:86:29:d5:a1:e5:78:55:
0c:32:f0:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVnUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjA1MDQyMTM0WhcNMjUwNjI1MDQyMTM0WjAYMRYw
FAYDVQQDEw02ODQxMWI1My0yZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTtrHxFPpFNbplIr0rVgCEWyOcBVZvDyN1af58/QYFAbD94kUf9P3fOA
G9UV3FFlUK8G7jlzhNPkSbj916T9LLthm+0G4iB/3xyYNTnshSpdWxX/SlS6qjt4
zjYOzy7+LlnO1i1YZCHtfaa4sGAOLd096TAcouIEnSOJtar4xa4VvlNqpNRxAo/b
Bswu4etRnf070qbQsQyd3vCnWuzoQRBbogiePu7bByvSpRT8xJelKAkiB3/L+nYF
+yNhNIMkVLzY/t/6SrXydScu60wXFLuCzEBDNUs0obEa7jU6kbQFU34PWneA6wyZ
u5Vth3G9xos9CpPPhfb7vi7GkX9U9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPFX
qWHs9FGAKJF532HWJQVJ2Ln7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Mzc2OUVEMjQxQzQxMUYwOTAxM0NEN0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOelMA0GCSqGSIb3DQEBCwUA
A4IBAQCmOeIO0Gq0BUbpsDB/KcpKARXj2UMcBqq6cHorl2Rorl7+2pleaf82sl1G
w6pBW6bGDBPyrXThHLoo3nSRvqCxbedi7/T8iuLoHGamm1cK1dnFhQaT9z3zdJXI
wHYYRdijhZaR7j4w6kTI8gBXZura0rOnkxBM75hZ2Xu/qg9AmKBO7pWBxNsZyxqG
MrbI37HBnQXjtT+Gcp8Ge7pRK8QEgx0LdxJVJShMPklH/CTw0Bf6oGa3FI5xQwzd
YTX1r+JbWbA6Qac6R/iy1P8MwhsfDq6pMJH3tbmFjuJZFWona6mmshcxCWCsUh5E
qjE6iFQXhT7AxoYp1aHleFUMMvC2
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:19 2025 by rpki-client