Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D60340C483211F0AB8C30DADAE4EC9C.roa
File: 9D60340C483211F0AB8C30DADAE4EC9C.roa (raw, json)
Hash identifier: lG7AHrYC58s5OTlRvaQKqDrLojnX+aGL0LmmKpQnaDs=
Subject key identifier: 2F:A0:AE:8F:93:8E:81:8B:64:1C:10:9A:A8:50:04:82:02:24:32:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D60340C483211F0AB8C30DADAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:44:28 +0000
ROA not before: Fri 13 Jun 2025 08:44:22 +0000
ROA not after: Sun 22 Jun 2025 08:44:22 +0000
asID: 134687
IP address blocks: 156.230.2.0/24 maxlen: 24
156.230.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88994 (0x15ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:44:22 2025 GMT
Not After : Jun 22 08:44:22 2025 GMT
Subject: CN=684be4ec-a7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:53:42:e5:90:99:cb:0d:40:8f:af:3c:4c:
29:66:1a:e1:03:24:74:22:a2:e5:45:b7:e6:82:e6:
e6:7a:a8:d0:8f:ec:54:e7:77:96:e3:2e:93:d6:31:
1b:8d:4b:f1:fe:e4:3a:78:f1:8a:ad:c1:3e:58:8a:
b5:2d:93:c2:3c:a0:5c:a6:12:02:20:6d:bc:ff:d3:
d5:df:fc:e3:e1:39:4c:f5:35:10:5d:c5:78:dd:05:
c8:7f:c1:d2:b0:e3:96:3d:ef:fe:97:d4:53:ba:52:
a3:51:95:6b:8e:af:5f:db:0c:3c:c1:b4:70:fc:81:
d9:f4:aa:80:ea:c7:c9:08:24:73:7c:ce:17:91:cb:
73:85:4a:ff:0e:6b:57:55:d0:42:7b:1b:05:5a:17:
06:a1:66:0c:f5:93:b0:3e:33:4c:41:f1:8a:f4:5e:
0a:58:17:da:38:7d:fb:fc:a9:94:23:5d:4e:26:22:
40:10:88:bf:44:3e:31:2f:b0:2d:ea:c3:0d:3c:6d:
d7:ac:16:5b:85:a2:b2:a9:4a:f7:c2:23:e6:6a:4c:
2c:2d:55:e3:fd:13:27:67:8a:73:0d:fd:c3:f8:f4:
78:61:34:4b:07:d7:65:be:d4:e3:f6:e5:93:67:ba:
b0:c1:04:c9:3e:ed:78:a6:24:e2:90:bb:9d:0d:4c:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:AE:8F:93:8E:81:8B:64:1C:10:9A:A8:50:04:82:02:24:32:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D60340C483211F0AB8C30DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.2.0/24
156.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f4:28:41:d5:14:40:c6:9a:e7:35:8d:ab:94:14:6f:69:f1:
62:e1:37:cd:83:c6:8c:8b:86:07:b2:e9:d3:6d:c1:b5:45:fe:
83:75:67:1b:6b:57:2d:5e:f8:b8:54:3c:1d:3f:58:78:00:de:
4d:30:5b:f9:0c:03:74:ea:db:fb:5b:e9:49:aa:f6:42:80:e1:
25:8f:b4:b1:86:34:1a:f1:1d:6e:03:e1:8c:5b:bc:9e:ca:f8:
6b:44:36:46:db:48:3e:03:2d:12:8f:b1:2e:d8:15:9c:01:a8:
4d:aa:e9:e9:72:3e:8a:45:14:c7:d7:3b:fb:cb:8b:a4:a7:32:
95:ca:49:59:37:50:8a:5b:ff:90:a8:00:79:d7:57:26:d3:46:
72:e6:06:78:0c:3e:27:30:62:c9:04:89:2a:18:38:e2:8b:6b:
0d:b5:f3:de:b6:f9:5a:a0:2d:4c:17:4f:8d:6c:ae:34:85:ec:
d0:e9:67:3f:43:bd:45:2d:5e:97:f0:1f:89:a3:5a:5e:1a:ea:
ce:90:e9:71:bd:14:84:5b:a2:49:0d:fe:37:32:e0:d5:21:5a:
1c:ed:a1:ee:5a:25:53:eb:c0:ab:4e:01:f0:01:e9:fd:7a:77:
ca:ad:f7:c1:3a:54:96:66:7c:17:48:81:a3:8b:be:5c:9a:5e:
08:f0:bf:cd
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVuiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEzMDg0NDIyWhcNMjUwNjIyMDg0NDIyWjAYMRYw
FAYDVQQDEw02ODRiZTRlYy1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu4xTQuWQmcsNQI+vPEwpZhrhAyR0IqLlRbfmgubmeqjQj+xU53eW4y6T
1jEbjUvx/uQ6ePGKrcE+WIq1LZPCPKBcphICIG28/9PV3/zj4TlM9TUQXcV43QXI
f8HSsOOWPe/+l9RTulKjUZVrjq9f2ww8wbRw/IHZ9KqA6sfJCCRzfM4XkctzhUr/
DmtXVdBCexsFWhcGoWYM9ZOwPjNMQfGK9F4KWBfaOH37/KmUI11OJiJAEIi/RD4x
L7At6sMNPG3XrBZbhaKyqUr3wiPmakwsLVXj/RMnZ4pzDf3D+PR4YTRLB9dlvtTj
9uWTZ7qwwQTJPu14piTikLudDUyrLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+g
ro+TjoGLZBwQmqhQBIICJDJjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RDYwMzQwQzQ4MzIxMUYwQUI4QzMwREFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOYCAwQAnOYKMA0GCSqGSIb3
DQEBCwUAA4IBAQAX9ChB1RRAxprnNY2rlBRvafFi4TfNg8aMi4YHsunTbcG1Rf6D
dWcba1ctXvi4VDwdP1h4AN5NMFv5DAN06tv7W+lJqvZCgOElj7SxhjQa8R1uA+GM
W7yeyvhrRDZG20g+Ay0Sj7Eu2BWcAahNqunpcj6KRRTH1zv7y4ukpzKVyklZN1CK
W/+QqAB511cm00Zy5gZ4DD4nMGLJBIkqGDjii2sNtfPetvlaoC1MF0+NbK40hezQ
6Wc/Q71FLV6X8B+Jo1peGurOkOlxvRSEW6JJDf43MuDVIVoc7aHuWiVT68CrTgHw
Aen9enfKrffBOlSWZnwXSIGji75cml4I8L/N
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:13:43 2025 by rpki-client