Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0428512A5A7F11F0B198A2EBDAE4EC9C.roa
File: 0428512A5A7F11F0B198A2EBDAE4EC9C.roa (raw, json)
Hash identifier: Gjri1vXpoH4Wju6qDZg4rprzHUW1SwTs/yy6pS8DDug=
Subject key identifier: 6A:9C:45:DC:41:FB:F8:07:B5:2F:A4:B3:DD:D9:FA:63:8E:80:60:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016249
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0428512A5A7F11F0B198A2EBDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:36:43 +0000
ROA not before: Sun 06 Jul 2025 15:36:38 +0000
ROA not after: Fri 25 Jul 2025 15:36:38 +0000
asID: 203020
IP address blocks: 156.233.196.0/22 maxlen: 24
156.238.172.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.243.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90697 (0x16249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 15:36:38 2025 GMT
Not After : Jul 25 15:36:38 2025 GMT
Subject: CN=686a980b-9757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:6d:20:6a:8e:ee:e0:f6:33:46:16:6f:04:
55:8f:c6:24:9c:eb:1d:35:c0:6d:5a:5d:f7:36:58:
28:7a:80:9c:46:86:c8:b2:70:c2:77:d9:87:f2:5c:
c6:76:8f:79:06:3e:ab:a3:07:17:7e:ac:a3:85:81:
09:be:9a:88:9d:9e:5a:b7:eb:45:2a:46:db:88:21:
f8:1f:07:91:90:bb:9f:94:bd:4e:ae:d6:87:40:f7:
de:93:98:f3:37:5f:db:07:db:7d:3a:22:00:0b:08:
00:e7:dc:f3:3b:4e:0b:74:de:0f:e6:34:19:47:23:
b6:00:3c:8e:2a:3d:f8:8c:fd:da:66:34:e9:2d:00:
70:8d:22:3d:d5:83:5f:f3:b7:ec:95:e8:b1:53:fd:
54:20:e3:00:91:48:b2:36:73:f6:e2:23:53:1f:38:
43:8d:1a:2e:f3:be:5f:ef:7a:31:59:88:96:67:9b:
c2:e5:b7:51:a6:90:f8:4a:99:9a:94:4c:50:85:be:
16:91:20:6e:e3:33:10:4c:8d:5f:0e:94:01:cc:6b:
7d:d4:d8:a6:93:d9:ed:e0:ec:25:af:89:b9:42:d5:
56:fd:02:e5:f8:00:24:12:c9:2f:c2:1e:07:53:03:
e5:bb:cc:d0:24:ce:57:ab:c1:54:ea:58:41:63:40:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:45:DC:41:FB:F8:07:B5:2F:A4:B3:DD:D9:FA:63:8E:80:60:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0428512A5A7F11F0B198A2EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.196.0/22
156.238.172.0/22
156.239.136.0/22
156.243.88.0/21
Signature Algorithm: sha256WithRSAEncryption
87:53:cd:2e:5c:80:d3:9a:05:4e:e3:b7:43:09:36:68:e8:8a:
df:92:75:6a:b2:fc:47:ef:ba:49:11:17:23:a9:b3:9c:31:f8:
9d:93:07:b7:5f:70:f2:d5:c2:3c:9d:6b:8d:b9:44:8e:87:dd:
98:39:64:cc:2f:ed:ac:6c:f4:9c:de:50:bd:69:8d:8f:f9:95:
3d:63:25:a7:a1:44:03:c3:54:39:43:cb:c2:3e:26:7c:9d:a0:
88:ac:e5:e3:83:08:63:57:5d:cf:ff:21:c5:42:2b:6e:47:a6:
56:ef:f3:b5:8a:d6:e7:31:94:05:2e:7a:43:08:63:e1:10:9b:
9d:b7:13:d4:87:a2:73:94:48:3f:c9:4c:5a:4a:2c:82:4c:8a:
7b:39:fe:e3:bd:e2:7b:4c:3c:30:54:2f:df:3e:27:d1:24:93:
87:0c:0e:a9:e6:7a:d7:1d:a9:ef:61:36:52:b9:a6:81:d7:9f:
98:64:51:cc:90:2b:bc:3c:45:2a:93:6a:7a:22:8c:62:8e:ee:
ee:39:8a:fe:76:7c:4c:9d:d2:1b:2e:1a:93:fb:6a:82:f4:dc:
bb:8b:67:44:5c:47:bb:53:63:87:e4:77:f8:9d:60:db:7c:3b:
d8:16:5d:06:1f:16:cd:91:69:1b:1d:52:c8:ea:65:0b:4d:30:
2d:54:b2:19
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAWJJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTUzNjM4WhcNMjUwNzI1MTUzNjM4WjAYMRYw
FAYDVQQDEw02ODZhOTgwYi05NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArkltIGqO7uD2M0YWbwRVj8YknOsdNcBtWl33NlgoeoCcRobIsnDCd9mH
8lzGdo95Bj6rowcXfqyjhYEJvpqInZ5at+tFKkbbiCH4HweRkLuflL1OrtaHQPfe
k5jzN1/bB9t9OiIACwgA59zzO04LdN4P5jQZRyO2ADyOKj34jP3aZjTpLQBwjSI9
1YNf87fsleixU/1UIOMAkUiyNnP24iNTHzhDjRou875f73oxWYiWZ5vC5bdRppD4
SpmalExQhb4WkSBu4zMQTI1fDpQBzGt91Nimk9nt4Owlr4m5QtVW/QLl+AAkEskv
wh4HUwPlu8zQJM5Xq8FU6lhBY0CVlwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGqc
RdxB+/gHtS+ks93Z+mOOgGAOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDI4NTEyQTVBN0YxMUYwQjE5OEEyRUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnOnEAwQCnO6sAwQCnO+IAwQD
nPNYMA0GCSqGSIb3DQEBCwUAA4IBAQCHU80uXIDTmgVO47dDCTZo6IrfknVqsvxH
77pJERcjqbOcMfidkwe3X3Dy1cI8nWuNuUSOh92YOWTML+2sbPSc3lC9aY2P+ZU9
YyWnoUQDw1Q5Q8vCPiZ8naCIrOXjgwhjV13P/yHFQituR6ZW7/O1itbnMZQFLnpD
CGPhEJudtxPUh6JzlEg/yUxaSiyCTIp7Of7jveJ7TDwwVC/fPifRJJOHDA6p5nrX
HanvYTZSuaaB15+YZFHMkCu8PEUqk2p6Ioxiju7uOYr+dnxMndIbLhqT+2qC9Ny7
i2dEXEe7U2OH5Hf4nWDbfDvYFl0GHxbNkWkbHVLI6mULTTAtVLIZ
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:40 2025 by rpki-client