Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C62C972598C11F0995963C7DAE4EC9C.roa
File: 0C62C972598C11F0995963C7DAE4EC9C.roa (raw, json)
Hash identifier: u1+PfOgHXu84wcqih4cLUjqvu2T2FrsQvkkFSEqWFag=
Subject key identifier: 1B:A9:56:90:3F:34:DC:72:6A:44:F2:6A:F2:AA:3E:50:6C:9D:D3:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C62C972598C11F0995963C7DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 10:37:29 +0000
ROA not before: Sat 05 Jul 2025 10:37:24 +0000
ROA not after: Thu 21 Aug 2025 10:37:24 +0000
asID: 42689
IP address blocks: 156.233.152.0/21 maxlen: 24
156.233.160.0/20 maxlen: 24
156.241.48.0/21 maxlen: 24
156.241.56.0/22 maxlen: 24
156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90521 (0x16199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 10:37:24 2025 GMT
Not After : Aug 21 10:37:24 2025 GMT
Subject: CN=68690069-48ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1e:a7:f5:ce:35:f6:23:34:16:ad:36:6b:ff:
01:48:b7:34:cb:b0:b3:18:3e:04:bf:c3:c3:18:29:
aa:78:4b:04:09:ef:c9:49:3f:39:2a:22:b6:f4:f5:
6d:02:a6:8d:7a:8b:14:31:89:32:80:ad:ca:e6:b7:
9a:ec:9d:bf:39:b8:5f:04:1f:1a:4a:26:30:b8:06:
9b:10:00:55:dd:1b:3a:76:ad:c5:40:50:ad:5e:b3:
d4:e2:7d:14:bb:0c:7d:35:44:f5:a1:1d:df:1c:bc:
a1:c7:3f:c5:a6:15:1a:4f:af:94:11:4f:92:f2:d5:
a2:4c:af:da:4e:72:37:ac:9a:35:c5:f6:d9:b7:4f:
f1:3a:20:3e:04:e5:7a:05:d6:34:4c:63:95:eb:1e:
91:39:b7:ec:25:08:5d:54:b4:63:21:a8:1d:ca:a0:
6e:7b:6a:70:95:6d:00:ba:46:93:1d:72:68:cc:ad:
af:4b:ac:30:dc:79:ca:1a:b4:00:4b:99:b9:d6:aa:
c5:b9:45:fb:5a:4d:77:63:c8:a6:1b:12:41:05:62:
a4:8d:a0:39:51:05:31:41:d4:f3:a9:c5:4e:d1:df:
c0:1e:86:df:d8:87:c5:fd:cb:f4:78:e1:cd:1a:41:
d3:46:d6:db:b7:2a:6d:22:5a:b1:e3:b4:62:06:00:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:56:90:3F:34:DC:72:6A:44:F2:6A:F2:AA:3E:50:6C:9D:D3:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C62C972598C11F0995963C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.152.0-156.233.175.255
156.241.48.0-156.241.59.255
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
22:fa:f5:15:fc:75:7f:49:98:e1:9c:af:18:9d:75:d7:d7:c8:
72:60:1b:07:bd:4e:ad:fc:b7:a4:6b:db:62:db:a7:0c:37:98:
8a:31:f9:02:d5:ee:d6:ad:5d:b2:05:7e:b8:f7:c0:03:d1:df:
bb:cc:9d:bc:3d:08:83:c4:54:6a:0f:5e:88:5c:6f:89:a0:06:
7a:f7:79:ab:6d:90:af:b3:5a:6d:cb:a2:74:04:98:b4:c3:47:
0e:cc:ea:d7:3f:81:18:f1:a5:a8:03:21:f9:e7:e8:f8:66:a6:
db:0c:7c:dc:27:8d:08:e2:3c:8c:19:5a:5d:43:09:b8:6b:eb:
dc:5f:69:e5:ea:1d:30:fa:38:90:1d:a4:83:68:3e:bf:ff:0c:
63:28:29:8a:da:94:3e:8b:50:1b:96:a3:4b:f3:c1:80:89:3c:
5e:3a:af:b9:00:10:c9:f2:31:0f:a8:6c:3b:bb:74:58:4a:4f:
45:18:e6:20:92:29:d1:07:34:df:81:87:56:c1:13:ee:a7:82:
ec:b1:16:cd:3e:4e:19:e7:32:5a:12:58:04:45:62:ec:70:40:
cf:6a:21:65:9a:3c:88:0f:9e:f3:16:88:1f:4f:f2:e8:6a:22:
4a:e8:e2:11:66:1e:36:d9:60:65:3f:64:f2:64:c2:bc:5c:d7:
94:95:fb:00
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAWGZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MTAzNzI0WhcNMjUwODIxMTAzNzI0WjAYMRYw
FAYDVQQDEw02ODY5MDA2OS00OGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8R6n9c419iM0Fq02a/8BSLc0y7CzGD4Ev8PDGCmqeEsECe/JST85KiK2
9PVtAqaNeosUMYkygK3K5rea7J2/ObhfBB8aSiYwuAabEABV3Rs6dq3FQFCtXrPU
4n0Uuwx9NUT1oR3fHLyhxz/FphUaT6+UEU+S8tWiTK/aTnI3rJo1xfbZt0/xOiA+
BOV6BdY0TGOV6x6RObfsJQhdVLRjIagdyqBue2pwlW0AukaTHXJozK2vS6ww3HnK
GrQAS5m51qrFuUX7Wk13Y8imGxJBBWKkjaA5UQUxQdTzqcVO0d/AHobf2IfF/cv0
eOHNGkHTRtbbtyptIlqx47RiBgCbQQIDAQABo4ICvjCCArowHQYDVR0OBBYEFBup
VpA/NNxyakTyavKqPlBsndPlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQzYyQzk3MjU5OEMxMUYwOTk1OTYzQzdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAOc6ZgDBASc6aAwDAMEBJzx
MAMEApzxOAMEBJz7UDANBgkqhkiG9w0BAQsFAAOCAQEAIvr1Ffx1f0mY4ZyvGJ11
19fIcmAbB71Orfy3pGvbYtunDDeYijH5AtXu1q1dsgV+uPfAA9Hfu8ydvD0Ig8RU
ag9eiFxviaAGevd5q22Qr7NabcuidASYtMNHDszq1z+BGPGlqAMh+efo+Gam2wx8
3CeNCOI8jBlaXUMJuGvr3F9p5eodMPo4kB2kg2g+v/8MYygpitqUPotQG5ajS/PB
gIk8XjqvuQAQyfIxD6hsO7t0WEpPRRjmIJIp0Qc034GHVsET7qeC7LEWzT5OGecy
WhJYBEVi7HBAz2ohZZo8iA+e8xaIH0/y6GoiSujiEWYeNtlgZT9k8mTCvFzXlJX7
AA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:21:46 2025 by rpki-client