Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060A907C582011F08D14657EDAE4EC9C.roa
File: 060A907C582011F08D14657EDAE4EC9C.roa (raw, json)
Hash identifier: B2aQ4+PlOTPI1fxN7PFMKw2i1svJr0lUdL8zYOIHyKw=
Subject key identifier: C0:16:67:73:0D:A1:CB:72:37:75:9C:99:DD:92:CF:3F:EB:EF:74:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060A907C582011F08D14657EDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 15:11:42 +0000
ROA not before: Thu 03 Jul 2025 15:11:37 +0000
ROA not after: Thu 21 Aug 2025 15:11:37 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90274 (0x160a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 15:11:37 2025 GMT
Not After : Aug 21 15:11:37 2025 GMT
Subject: CN=68669dad-c960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:71:b5:0d:49:c4:8a:d7:58:7c:26:1a:3a:
72:8f:a7:eb:ea:95:7f:5b:7a:3c:c3:5d:63:69:a9:
d3:68:78:ea:29:5b:06:36:32:5c:66:fa:68:3f:23:
5a:f1:8b:2e:59:e3:7f:ff:59:df:00:35:eb:a6:02:
08:67:3c:c6:bd:bf:29:56:41:fa:c3:c8:2e:b0:e9:
83:30:82:29:f2:55:9e:26:0f:61:39:1f:fe:0e:81:
88:80:65:8b:d8:86:f5:e6:b8:b7:59:ae:dd:79:6f:
5b:ff:f5:74:fd:e7:c9:77:9b:2b:a1:ff:c9:65:12:
07:5d:c3:15:f2:73:3f:4d:23:43:7c:40:db:3a:b8:
30:77:dc:ae:e2:ca:a0:fc:48:24:3e:fa:ab:99:7f:
1a:61:20:1b:2b:29:49:25:11:de:c7:5b:38:7d:ba:
7e:53:5e:66:0d:9e:11:0a:1b:d2:6c:d0:d2:79:02:
54:f1:e2:03:0b:a2:da:14:a8:08:a8:ae:0e:bb:2b:
3b:de:5b:24:7e:be:0d:92:d4:cb:d2:2e:b9:56:2c:
c9:01:a3:06:d0:b7:7c:5d:18:c9:65:30:85:f8:57:
a3:30:07:fe:3e:47:53:fc:90:ae:92:33:84:6b:8a:
42:c6:0d:20:7b:36:8e:f7:f8:73:c9:c6:7d:a4:f0:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:67:73:0D:A1:CB:72:37:75:9C:99:DD:92:CF:3F:EB:EF:74:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060A907C582011F08D14657EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
78:76:a4:11:29:79:31:01:6f:17:4d:e3:e6:ee:ec:6a:4f:89:
a9:bd:ca:cd:d9:40:d8:6b:8b:11:f6:08:08:06:c6:5b:55:78:
10:2a:4e:2b:e9:67:34:ce:51:86:2a:9c:64:a5:b8:4d:51:b8:
a1:c7:fc:f7:d4:93:24:32:2e:c4:d2:ae:03:47:0e:26:bf:18:
01:ea:f0:e1:35:04:56:ff:7b:cb:e4:47:12:ef:d3:a6:fc:b2:
f4:6f:f2:34:e2:26:e6:48:9b:eb:57:be:fd:06:e7:ab:90:da:
f3:e5:ec:c2:c3:a4:c5:ed:98:e9:3b:c9:35:e1:ba:ad:09:70:
1a:89:12:2f:b6:12:03:ac:5d:bc:94:c7:81:25:da:9a:91:6e:
c1:79:c8:eb:26:0c:5b:ff:e9:fd:6f:94:32:51:2e:c5:75:7b:
5f:e8:c5:6f:a8:d0:61:ea:3c:a2:04:14:1a:e2:68:52:69:9d:
a4:b9:d4:8b:79:d6:75:7b:e8:dc:62:a5:38:e6:14:86:8e:d1:
db:34:eb:78:54:eb:fc:30:04:d3:3a:8f:bf:53:74:32:64:4b:
31:87:b0:6d:a0:96:32:84:68:42:46:b2:53:7d:79:f0:34:90:
03:2b:e9:87:75:a9:f0:c9:57:23:0d:fa:4e:1d:c0:c1:3f:89:
3a:c6:5a:31
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWCiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTUxMTM3WhcNMjUwODIxMTUxMTM3WjAYMRYw
FAYDVQQDEw02ODY2OWRhZC1jOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyWVxtQ1JxIrXWHwmGjpyj6fr6pV/W3o8w11jaanTaHjqKVsGNjJcZvpo
PyNa8YsuWeN//1nfADXrpgIIZzzGvb8pVkH6w8gusOmDMIIp8lWeJg9hOR/+DoGI
gGWL2Ib15ri3Wa7deW9b//V0/efJd5srof/JZRIHXcMV8nM/TSNDfEDbOrgwd9yu
4sqg/EgkPvqrmX8aYSAbKylJJRHex1s4fbp+U15mDZ4RChvSbNDSeQJU8eIDC6La
FKgIqK4Ouys73lskfr4NktTL0i65VizJAaMG0Ld8XRjJZTCF+FejMAf+PkdT/JCu
kjOEa4pCxg0gezaO9/hzycZ9pPBv/QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMAW
Z3MNoctyN3Wcmd2Szz/r73TZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjBBOTA3QzU4MjAxMUYwOEQxNDY1N0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec6YADBAOc6ZAwDQYJKoZI
hvcNAQELBQADggEBAHh2pBEpeTEBbxdN4+bu7GpPiam9ys3ZQNhrixH2CAgGxltV
eBAqTivpZzTOUYYqnGSluE1RuKHH/PfUkyQyLsTSrgNHDia/GAHq8OE1BFb/e8vk
RxLv06b8svRv8jTiJuZIm+tXvv0G56uQ2vPl7MLDpMXtmOk7yTXhuq0JcBqJEi+2
EgOsXbyUx4El2pqRbsF5yOsmDFv/6f1vlDJRLsV1e1/oxW+o0GHqPKIEFBriaFJp
naS51It51nV76NxipTjmFIaO0ds063hU6/wwBNM6j79TdDJkSzGHsG2gljKEaEJG
slN9efA0kAMr6Yd1qfDJVyMN+k4dwME/iTrGWjE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:50 2025 by rpki-client