Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122D4E905CD911F0B413F6C1DAE4EC9C.roa
File: 122D4E905CD911F0B413F6C1DAE4EC9C.roa (raw, json)
Hash identifier: DSSn1/RIWXoGjcXSxqL7uKB1pAdCZnuueRNWjEzm0Po=
Subject key identifier: 0A:B6:85:EC:BA:C2:0A:FE:51:BE:F6:8F:D3:26:E4:90:A4:E4:51:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01640E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122D4E905CD911F0B413F6C1DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 15:26:24 +0000
ROA not before: Wed 09 Jul 2025 15:26:18 +0000
ROA not after: Thu 24 Jul 2025 15:26:18 +0000
asID: 214238
IP address blocks: 156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.241.40.0/24 maxlen: 24
156.241.42.0/24 maxlen: 24
156.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91150 (0x1640e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 15:26:18 2025 GMT
Not After : Jul 24 15:26:18 2025 GMT
Subject: CN=686e8a1f-6344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:08:6b:0b:4c:5e:75:5c:42:27:b9:f0:e9:
50:7d:91:43:13:c6:8c:ad:9c:af:36:31:70:8d:69:
08:fe:52:1d:35:fb:44:7d:65:68:18:88:01:c9:b8:
7e:e8:4d:04:f1:38:ae:f6:69:06:b2:43:0b:8d:5b:
3b:df:67:54:33:13:30:8c:35:5e:0d:ac:ca:f8:b7:
5b:2b:02:da:a1:93:12:17:aa:94:88:3f:11:12:16:
99:96:b0:d1:2b:80:74:5c:f6:64:e6:43:bd:1f:3c:
2f:f8:40:84:43:a5:5a:3c:69:3b:dd:e6:68:01:af:
2e:e9:8e:d6:1a:89:5f:18:e2:2c:f1:da:01:e2:58:
d0:66:b9:6d:02:c2:12:bd:9d:7a:39:24:d7:1d:eb:
cf:a6:cb:73:14:5b:84:77:05:87:db:43:9c:6d:d9:
a1:32:5a:55:a5:18:01:ed:e7:03:62:62:ca:ac:ee:
80:ed:74:31:1b:fd:d0:78:63:62:08:54:a5:bb:ef:
1b:a5:f2:a4:e9:17:13:76:72:fa:e6:60:cd:3b:34:
34:86:e0:13:22:55:f2:1d:21:5a:d2:70:ae:a0:fa:
56:ce:3a:8b:b0:5c:f9:cb:b4:85:40:e2:3d:8d:1a:
a9:75:38:7f:ed:4b:49:4c:53:03:54:d3:87:4a:23:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:85:EC:BA:C2:0A:FE:51:BE:F6:8F:D3:26:E4:90:A4:E4:51:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/122D4E905CD911F0B413F6C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.21.0-156.239.22.255
156.241.40.0/24
156.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
48:61:ad:44:2a:dd:8d:a9:36:32:05:19:0f:e4:f4:93:6c:23:
60:2c:ca:9a:ea:71:de:b2:17:1b:6c:8a:83:40:21:9f:03:31:
c3:e0:f4:27:ae:9b:14:01:38:50:02:8d:32:bd:74:77:a5:94:
75:60:75:91:e1:b1:67:dd:35:0b:7f:3d:38:99:79:4b:76:bd:
5b:5f:52:6f:e1:d3:50:01:b2:35:80:0a:ab:05:f9:de:16:a6:
0a:6b:64:27:31:33:90:ca:64:a2:1c:3e:a1:95:dd:65:16:f4:
ad:42:0d:10:23:35:4a:eb:3e:c8:98:21:7f:f9:98:3c:99:d8:
2c:bf:d8:ae:ac:3c:9e:9c:ae:ed:16:92:41:fc:af:7d:18:d6:
1a:07:8d:df:76:3d:af:68:1a:d7:86:21:56:05:70:f5:4b:d3:
1a:28:bf:4e:98:01:b2:65:a2:3e:ae:6d:41:0e:e1:d5:a5:5e:
d4:75:99:22:a8:28:c8:b8:01:8b:ce:cc:ee:f8:50:12:1c:24:
84:9d:e2:ed:fa:f7:38:d7:ba:0f:29:2d:77:cd:db:94:be:d4:
a1:62:b8:27:14:43:1c:fe:b6:c6:ef:11:59:a3:54:5e:a8:0d:
60:7f:f5:25:a8:45:ff:d1:8e:b0:cb:ce:42:f1:0e:f6:b5:e6:
d9:a7:d1:61
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAWQOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA5MTUyNjE4WhcNMjUwNzI0MTUyNjE4WjAYMRYw
FAYDVQQDEw02ODZlOGExZi02MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8cIawtMXnVcQie58OlQfZFDE8aMrZyvNjFwjWkI/lIdNftEfWVoGIgB
ybh+6E0E8Tiu9mkGskMLjVs732dUMxMwjDVeDazK+LdbKwLaoZMSF6qUiD8REhaZ
lrDRK4B0XPZk5kO9Hzwv+ECEQ6VaPGk73eZoAa8u6Y7WGolfGOIs8doB4ljQZrlt
AsISvZ16OSTXHevPpstzFFuEdwWH20OcbdmhMlpVpRgB7ecDYmLKrO6A7XQxG/3Q
eGNiCFSlu+8bpfKk6RcTdnL65mDNOzQ0huATIlXyHSFa0nCuoPpWzjqLsFz5y7SF
QOI9jRqpdTh/7UtJTFMDVNOHSiN6VQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAq2
hey6wgr+Ub72j9Mm5JCk5FF2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjJENEU5MDVDRDkxMUYwQjQxM0Y2QzFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACc7xUDBACc7xYDBACc8SgD
BAGc8SowDQYJKoZIhvcNAQELBQADggEBAEhhrUQq3Y2pNjIFGQ/k9JNsI2Asyprq
cd6yFxtsioNAIZ8DMcPg9CeumxQBOFACjTK9dHellHVgdZHhsWfdNQt/PTiZeUt2
vVtfUm/h01ABsjWACqsF+d4WpgprZCcxM5DKZKIcPqGV3WUW9K1CDRAjNUrrPsiY
IX/5mDyZ2Cy/2K6sPJ6cru0WkkH8r30Y1hoHjd92Pa9oGteGIVYFcPVL0xoov06Y
AbJloj6ubUEO4dWlXtR1mSKoKMi4AYvOzO74UBIcJISd4u369zjXug8pLXfN25S+
1KFiuCcUQxz+tsbvEVmjVF6oDWB/9SWoRf/RjrDLzkLxDva15tmn0WE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:16 2025 by rpki-client