Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C4707C42CD11F0BA5308B5DAE4EC9C.roa
File: C4C4707C42CD11F0BA5308B5DAE4EC9C.roa (raw, json)
Hash identifier: q4YyTEVSgjHyXNTA3bZ+rsBOaz3x+KKthcyBPhP/eYc=
Subject key identifier: EC:33:62:95:39:D1:7C:03:ED:99:A4:66:AC:39:16:0C:78:26:B8:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C4707C42CD11F0BA5308B5DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 11:59:59 +0000
ROA not before: Fri 06 Jun 2025 11:59:54 +0000
ROA not after: Sun 31 Aug 2025 11:59:54 +0000
asID: 399077
IP address blocks: 156.240.222.0/24 maxlen: 24
156.240.223.0/24 maxlen: 24
156.240.224.0/24 maxlen: 24
156.240.225.0/24 maxlen: 24
156.240.226.0/24 maxlen: 24
156.240.227.0/24 maxlen: 24
156.240.228.0/24 maxlen: 24
156.240.229.0/24 maxlen: 24
156.240.230.0/24 maxlen: 24
156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
156.240.234.0/24 maxlen: 24
156.240.235.0/24 maxlen: 24
156.240.236.0/24 maxlen: 24
156.240.237.0/24 maxlen: 24
156.240.238.0/24 maxlen: 24
156.240.239.0/24 maxlen: 24
156.240.240.0/24 maxlen: 24
156.240.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88574 (0x159fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 11:59:54 2025 GMT
Not After : Aug 31 11:59:54 2025 GMT
Subject: CN=6842d83f-8873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:1a:58:f3:d4:02:3f:ec:9f:df:77:b6:20:
62:db:72:6e:23:2f:27:c2:d1:c8:7f:fa:83:74:d8:
58:e3:ab:55:e1:87:12:2b:51:cb:33:74:65:54:ca:
7d:1d:55:bc:cf:96:36:bd:2e:1f:cf:4a:37:1b:ad:
4a:67:81:04:97:fe:0d:cc:35:dd:0c:ee:1c:5a:8b:
a9:4e:c4:98:65:7b:03:40:ab:c6:53:97:5e:23:36:
01:4d:52:21:9d:57:0a:57:39:34:a3:e0:76:2c:58:
85:ae:52:47:27:c8:63:4f:51:ad:ca:aa:45:a5:60:
3b:04:0f:a1:b2:6d:a9:59:c6:84:97:df:64:38:11:
c2:c8:09:8b:85:ac:2e:fd:22:ff:05:40:0a:71:5e:
a9:3c:41:95:6b:31:62:fb:2d:a8:32:5d:bd:a3:f0:
20:81:50:af:b2:68:8e:4c:e0:a1:b9:86:dc:eb:91:
d7:ca:c7:5d:52:e8:23:9c:7e:17:75:c6:ea:0d:91:
e5:c3:6c:8e:c7:26:0a:fd:65:8e:4f:01:d2:ba:58:
ca:96:4d:9f:2c:b6:3a:74:ad:db:df:ae:88:17:b4:
03:17:9f:c7:43:4d:40:dc:27:20:12:e1:ad:3d:bd:
8f:c1:47:c6:0e:6a:f2:7e:61:f6:0a:77:f9:0f:3d:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:62:95:39:D1:7C:03:ED:99:A4:66:AC:39:16:0C:78:26:B8:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C4707C42CD11F0BA5308B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.222.0-156.240.241.255
Signature Algorithm: sha256WithRSAEncryption
65:3a:61:84:7a:51:85:67:da:52:c1:dc:d1:e2:69:7b:8e:d7:
f8:66:11:82:dd:87:5e:f6:bc:92:2e:17:17:7d:0b:f8:b8:9c:
48:2e:f3:33:24:8f:11:16:ff:9c:74:06:05:88:fc:c4:6f:cb:
e2:cd:81:90:de:56:f4:fe:a9:f4:59:48:3b:0b:f3:0b:c7:8f:
4e:3e:fe:1a:02:0e:1c:bd:ba:76:21:09:09:b5:37:33:0d:01:
4d:83:58:34:ad:fa:39:c8:40:b9:8c:41:24:6c:ee:53:d4:f6:
93:70:a1:95:a5:35:bb:c1:5f:df:1f:d4:a0:59:95:32:d5:97:
3a:bd:54:9a:f7:13:7c:ac:04:85:50:e4:9a:b3:aa:e1:cf:8e:
e9:bd:2c:e6:f5:41:f9:19:0a:f1:37:94:e4:51:9e:ce:07:d7:
5c:89:53:67:b0:a3:18:55:32:4c:ff:e0:08:77:cb:b5:48:14:
e9:39:ba:43:f0:57:7b:f8:02:f9:98:1a:88:59:f0:59:51:10:
2a:a2:ff:34:81:50:f4:5a:2d:f8:f4:67:fb:95:f2:ff:1c:b5:
3f:52:73:33:5d:3c:bc:ad:54:c4:73:a8:65:d0:d2:e2:48:ca:
17:a4:2a:bd:9a:78:47:ad:93:34:be:ee:df:14:cd:6b:4c:ef:
57:d0:16:0c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVn+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjA2MTE1OTU0WhcNMjUwODMxMTE1OTU0WjAYMRYw
FAYDVQQDEw02ODQyZDgzZi04ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2K0aWPPUAj/sn993tiBi23JuIy8nwtHIf/qDdNhY46tV4YcSK1HLM3Rl
VMp9HVW8z5Y2vS4fz0o3G61KZ4EEl/4NzDXdDO4cWoupTsSYZXsDQKvGU5deIzYB
TVIhnVcKVzk0o+B2LFiFrlJHJ8hjT1GtyqpFpWA7BA+hsm2pWcaEl99kOBHCyAmL
hawu/SL/BUAKcV6pPEGVazFi+y2oMl29o/AggVCvsmiOTOChuYbc65HXysddUugj
nH4XdcbqDZHlw2yOxyYK/WWOTwHSuljKlk2fLLY6dK3b366IF7QDF5/HQ01A3Ccg
EuGtPb2PwUfGDmryfmH2Cnf5Dz0BYQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOwz
YpU50XwD7ZmkZqw5Fgx4JrgyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNEM0NzA3QzQyQ0QxMUYwQkE1MzA4QjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc8N4DBAGc8PAwDQYJKoZI
hvcNAQELBQADggEBAGU6YYR6UYVn2lLB3NHiaXuO1/hmEYLdh172vJIuFxd9C/i4
nEgu8zMkjxEW/5x0BgWI/MRvy+LNgZDeVvT+qfRZSDsL8wvHj04+/hoCDhy9unYh
CQm1NzMNAU2DWDSt+jnIQLmMQSRs7lPU9pNwoZWlNbvBX98f1KBZlTLVlzq9VJr3
E3ysBIVQ5JqzquHPjum9LOb1QfkZCvE3lORRns4H11yJU2ewoxhVMkz/4Ah3y7VI
FOk5ukPwV3v4AvmYGohZ8FlRECqi/zSBUPRaLfj0Z/uV8v8ctT9SczNdPLytVMRz
qGXQ0uJIyhekKr2aeEetkzS+7t8UzWtM71fQFgw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:41 2025 by rpki-client