Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5AA464491111F0BD022B85DAE4EC9C.roa
File: BE5AA464491111F0BD022B85DAE4EC9C.roa (raw, json)
Hash identifier: wb6Yiw2u8PJ0lcqWD7M8aUK9KbWOQID1CYKFd3LAZm8=
Subject key identifier: F5:69:07:36:19:BB:00:64:7E:F2:F0:66:90:A1:9F:62:7A:14:DE:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5AA464491111F0BD022B85DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 11:21:41 +0000
ROA not before: Sat 14 Jun 2025 11:21:36 +0000
ROA not after: Fri 04 Jul 2025 11:21:36 +0000
asID: 398823
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 06:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89123 (0x15c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 11:21:36 2025 GMT
Not After : Jul 4 11:21:36 2025 GMT
Subject: CN=684d5b45-d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:78:70:af:62:6d:95:65:be:c3:57:35:4d:
18:6c:b9:af:55:f3:67:22:a5:95:42:dc:3e:6d:2b:
81:b8:c1:99:4c:a2:3a:43:f4:f0:81:ca:2b:23:cb:
35:c5:94:80:ed:1f:39:51:9c:bd:8b:3c:29:ac:a2:
fd:eb:95:9a:63:17:24:8a:3a:11:06:e9:28:40:12:
32:c8:ff:ef:fd:9b:3f:d7:19:80:86:8e:cd:2d:74:
a6:67:7e:96:24:46:d8:c4:a8:c8:38:f8:e2:ea:b8:
1d:c8:0c:a2:2f:73:a1:ea:0f:63:93:79:18:97:9f:
ed:73:28:10:2f:97:36:de:5a:32:6e:26:2f:58:29:
36:02:7b:cc:90:68:cd:82:8b:0a:e6:69:87:35:27:
82:e2:ee:50:61:3d:b3:b2:ba:73:4c:da:53:bb:53:
5a:bd:fa:54:66:ac:0a:f4:be:93:09:01:fc:1a:a5:
c8:d0:71:15:1a:b1:d3:69:d6:dd:cf:82:e0:bd:d9:
d3:c9:5d:77:a9:89:98:0f:50:b1:8d:e3:b8:62:09:
01:06:1e:75:bd:1f:49:49:d8:07:d7:f9:7f:10:b3:
49:2d:22:73:3d:97:56:7a:29:75:e7:5c:e4:bb:dc:
76:62:4a:6b:a8:f4:b8:b8:91:33:71:ba:5c:9f:c9:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:69:07:36:19:BB:00:64:7E:F2:F0:66:90:A1:9F:62:7A:14:DE:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5AA464491111F0BD022B85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
42:9d:45:50:9a:00:3f:6e:eb:ca:15:fb:a4:dc:7b:6c:c6:3e:
5f:7b:e5:98:04:63:6a:ed:71:62:64:14:75:97:d9:fb:65:09:
94:fb:5e:47:17:3a:02:10:31:41:f4:be:89:87:b5:c6:00:58:
50:a6:a1:3b:b1:c1:df:9d:aa:26:64:7d:04:99:a5:d9:f9:f3:
9a:e4:e4:04:f0:cc:6e:67:a7:72:c5:21:1a:f8:66:c3:c7:02:
2d:27:4e:ed:1f:12:13:86:ed:fd:4b:bf:31:0c:b8:54:d3:e0:
03:92:88:90:39:3c:66:be:f5:ae:d7:44:15:73:85:72:af:93:
b9:5d:67:2f:9f:b0:f9:60:5f:d5:61:2a:f0:0c:60:1e:47:9c:
90:e4:da:2c:9c:c6:fe:27:32:4a:ab:bc:0c:ba:cb:d4:27:4d:
06:0e:63:8b:54:bc:a8:3e:e0:b6:bb:99:4d:7e:36:af:85:0d:
61:88:55:f1:0e:b2:a9:b9:f4:c5:ac:b5:84:2a:2a:09:2b:a5:
af:ae:cc:c8:78:5e:6e:0c:d7:3f:41:b2:07:51:d1:37:06:0a:
87:c8:34:45:62:6b:d7:5e:a7:83:d1:f9:8d:b6:2b:fa:9c:ef:
93:d7:d1:77:48:64:0a:35:1a:ba:84:88:12:e5:cb:81:fd:e2:
05:72:aa:f0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVwjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE0MTEyMTM2WhcNMjUwNzA0MTEyMTM2WjAYMRYw
FAYDVQQDEw02ODRkNWI0NS1kMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFd4cK9ibZVlvsNXNU0YbLmvVfNnIqWVQtw+bSuBuMGZTKI6Q/Twgcor
I8s1xZSA7R85UZy9izwprKL965WaYxckijoRBukoQBIyyP/v/Zs/1xmAho7NLXSm
Z36WJEbYxKjIOPji6rgdyAyiL3Oh6g9jk3kYl5/tcygQL5c23loybiYvWCk2AnvM
kGjNgosK5mmHNSeC4u5QYT2zsrpzTNpTu1NavfpUZqwK9L6TCQH8GqXI0HEVGrHT
adbdz4LgvdnTyV13qYmYD1CxjeO4YgkBBh51vR9JSdgH1/l/ELNJLSJzPZdWeil1
51zku9x2YkprqPS4uJEzcbpcn8kaaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPVp
BzYZuwBkfvLwZpChn2J6FN5kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTVBQTQ2NDQ5MTExMUYwQkQwMjJCODVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCnUVQmgA/buvKFfuk3Htsxj5fe+WYBGNq7XFiZBR1l9n7ZQmU+15HFzoC
EDFB9L6Jh7XGAFhQpqE7scHfnaomZH0EmaXZ+fOa5OQE8MxuZ6dyxSEa+GbDxwIt
J07tHxIThu39S78xDLhU0+ADkoiQOTxmvvWu10QVc4Vyr5O5XWcvn7D5YF/VYSrw
DGAeR5yQ5NosnMb+JzJKq7wMusvUJ00GDmOLVLyoPuC2u5lNfjavhQ1hiFXxDrKp
ufTFrLWEKioJK6WvrszIeF5uDNc/QbIHUdE3BgqHyDRFYmvXXqeD0fmNtiv6nO+T
19F3SGQKNRq6hIgS5cuB/eIFcqrw
-----END CERTIFICATE-----
Generated at Wed Jun 18 10:13:22 2025 by rpki-client