Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0FD09A0693811F0A48EC9BDDAE4EC9C.roa
File: B0FD09A0693811F0A48EC9BDDAE4EC9C.roa (raw, json)
Hash identifier: fhfn/74O/49tqwCOh0HHv62HvAMGLt3eAkivvt+WI1g=
Subject key identifier: D9:B9:3E:FC:F4:8A:0C:E1:4B:F1:AE:01:67:0E:BA:60:F7:0E:C4:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0FD09A0693811F0A48EC9BDDAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:21:06 +0000
ROA not before: Fri 25 Jul 2025 09:21:01 +0000
ROA not after: Sat 30 Aug 2025 09:21:01 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92066 (0x167a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:21:01 2025 GMT
Not After : Aug 30 09:21:01 2025 GMT
Subject: CN=68834c82-f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:fb:47:a6:fc:6a:45:89:c8:4e:a7:dc:ae:
a0:fc:b0:2a:ba:be:a9:7b:33:27:f3:91:28:90:f3:
89:f9:41:61:20:c5:79:30:24:b5:2a:86:ec:39:76:
a5:2d:13:95:e9:7f:c0:7c:e2:05:cc:4b:49:18:ab:
eb:44:7d:d1:e6:e3:86:b2:db:09:34:4a:1f:47:f4:
d2:4f:e3:07:9a:1f:7c:21:e0:29:4e:01:15:b5:25:
da:f7:1d:34:9e:d3:4d:40:f1:46:b2:c1:ee:1f:10:
1e:41:1e:ca:b9:7a:75:0c:ab:10:dc:07:ea:c3:5a:
2f:6d:b3:35:61:13:d0:5d:2a:c1:37:19:77:75:d8:
ef:15:dc:a6:5c:0b:f2:03:a8:a1:df:6d:c0:de:90:
ea:97:5b:3a:d4:71:90:dc:10:e0:3e:bc:08:42:29:
eb:6f:e0:86:c4:72:c1:a4:55:e5:5c:06:d1:ff:19:
73:3c:85:8d:63:6a:bd:99:6f:34:c9:60:c3:d7:df:
e8:bc:b1:fb:fb:74:a3:e5:09:50:88:37:ca:4d:f1:
1e:4f:22:29:81:68:e0:8d:e1:e6:27:16:4d:47:26:
89:3b:7d:e8:ff:90:a1:48:63:12:2c:db:2b:c7:08:
53:f9:ff:ef:d2:79:44:f4:ec:f1:d9:4c:5a:4f:fd:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:3E:FC:F4:8A:0C:E1:4B:F1:AE:01:67:0E:BA:60:F7:0E:C4:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0FD09A0693811F0A48EC9BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
14:1a:98:8e:35:e5:62:d3:c5:b5:23:85:2c:f2:9f:e7:63:a6:
00:74:1a:b7:9f:1d:97:e5:51:66:f7:9f:f8:72:7c:ef:2f:26:
07:71:fe:da:dc:db:18:04:54:ee:0f:09:81:8e:cb:f5:a9:90:
99:2c:22:34:35:67:6c:05:a1:82:54:ed:53:53:34:6a:9f:44:
30:f7:59:20:5c:2b:6e:b2:40:d5:d0:7c:d6:4b:92:72:f5:29:
fc:35:1b:71:1f:ca:cb:db:bc:c5:6d:74:13:06:f2:37:bd:75:
d1:d8:1e:96:8e:75:d0:0e:de:c5:0f:3c:31:f3:18:e2:32:2f:
26:06:81:bb:e0:60:a6:46:d5:cf:e9:52:41:ad:91:33:94:f8:
65:81:f2:79:7c:c5:fe:f0:e7:33:e1:e5:9e:ed:21:c6:83:75:
24:0b:80:ee:14:06:64:6c:53:eb:4a:09:fd:e5:8c:ac:d2:9c:
39:d7:b2:b8:83:2c:64:b2:79:f3:73:00:87:70:b1:52:98:a4:
0c:37:15:4a:b2:a7:0c:89:c8:6f:30:51:25:61:8a:57:b6:be:
48:2c:f3:ab:80:09:d3:8d:70:86:d4:65:b9:73:7b:10:d5:da:
c8:32:38:e5:d6:26:44:b2:67:54:f0:d5:13:35:d2:d2:05:62:
45:91:97:d8
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAWeiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI1MDkyMTAxWhcNMjUwODMwMDkyMTAxWjAYMRYw
FAYDVQQDEw02ODgzNGM4Mi1mODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv7L7R6b8akWJyE6n3K6g/LAqur6pezMn85EokPOJ+UFhIMV5MCS1Kobs
OXalLROV6X/AfOIFzEtJGKvrRH3R5uOGstsJNEofR/TST+MHmh98IeApTgEVtSXa
9x00ntNNQPFGssHuHxAeQR7KuXp1DKsQ3Afqw1ovbbM1YRPQXSrBNxl3ddjvFdym
XAvyA6ih323A3pDql1s61HGQ3BDgPrwIQinrb+CGxHLBpFXlXAbR/xlzPIWNY2q9
mW80yWDD19/ovLH7+3Sj5QlQiDfKTfEeTyIpgWjgjeHmJxZNRyaJO33o/5ChSGMS
LNsrxwhT+f/v0nlE9Ozx2UxaT/2EgwIDAQABo4IC0DCCAswwHQYDVR0OBBYEFNm5
Pvz0igzhS/GuAWcOumD3DsR+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMEZEMDlBMDY5MzgxMUYwQTQ4RUM5QkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQDnPWAAwQBnPW8MAwDBAGc9cYD
BAKc9cgwDAMEAJz10QMEAJz10gMEAZz18gMEA5z1+DANBgkqhkiG9w0BAQsFAAOC
AQEAFBqYjjXlYtPFtSOFLPKf52OmAHQat58dl+VRZvef+HJ87y8mB3H+2tzbGARU
7g8JgY7L9amQmSwiNDVnbAWhglTtU1M0ap9EMPdZIFwrbrJA1dB81kuScvUp/DUb
cR/Ky9u8xW10EwbyN7110dgelo510A7exQ88MfMY4jIvJgaBu+BgpkbVz+lSQa2R
M5T4ZYHyeXzF/vDnM+Hlnu0hxoN1JAuA7hQGZGxT60oJ/eWMrNKcOdeyuIMsZLJ5
83MAh3CxUpikDDcVSrKnDInIbzBRJWGKV7a+SCzzq4AJ041whtRluXN7ENXayDI4
5dYmRLJnVPDVEzXS0gViRZGX2A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:02 2025 by rpki-client