Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263243E0618F11F0A0F190BFDAE4EC9C.roa
File: 263243E0618F11F0A0F190BFDAE4EC9C.roa (raw, json)
Hash identifier: 0TDxfFtYJac2YByQ8gOF4ERAooDLTWXRx4r0pfWb79c=
Subject key identifier: 74:A9:6E:8A:A9:74:5C:CE:0F:36:46:26:39:CE:95:D3:35:6C:79:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263243E0618F11F0A0F190BFDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 15:19:50 +0000
ROA not before: Tue 15 Jul 2025 15:19:45 +0000
ROA not after: Tue 22 Jul 2025 15:19:45 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91493 (0x16565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 15:19:45 2025 GMT
Not After : Jul 22 15:19:45 2025 GMT
Subject: CN=68767196-38b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:ea:85:8b:cb:1c:8a:56:a4:97:e9:ee:a7:
11:41:7c:a7:07:ac:7d:97:ce:44:ff:ba:eb:a5:5a:
a0:8e:dd:c2:b8:59:e8:28:25:00:10:ad:06:b6:0e:
b0:56:dc:e0:33:e8:81:63:43:91:72:f7:d9:3e:1c:
f8:a8:41:dd:7e:fb:83:fd:d1:04:8b:65:49:c7:2b:
6a:e0:e4:9a:6a:38:ed:fd:22:4f:4b:56:99:bd:08:
6f:07:d9:1b:e9:ee:a8:ee:6b:36:fb:20:f6:09:fd:
37:9f:6e:75:e2:58:4e:99:69:63:2f:22:58:be:19:
f2:b9:83:90:25:a5:46:a5:25:63:ed:a2:91:ef:93:
d1:7e:35:f7:37:71:b2:f3:5d:b0:ac:e6:8f:b3:74:
e3:c1:2e:5b:7a:67:99:b1:a4:74:19:de:6e:fe:4a:
3d:bd:74:01:aa:6f:49:72:46:e1:02:3a:8c:3d:e9:
2a:f0:7b:86:b3:96:d2:c9:c6:cb:60:b6:99:32:b6:
b9:4b:ee:46:fa:84:39:09:9b:a0:5d:3f:f8:56:85:
b1:8f:c8:27:4b:52:cf:56:bd:93:a7:f4:e4:fa:e7:
d6:36:d3:9d:f1:0a:86:0f:ca:7f:7c:b1:de:11:e2:
83:a0:66:a7:ae:a7:5e:cd:28:99:83:62:b6:eb:63:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:6E:8A:A9:74:5C:CE:0F:36:46:26:39:CE:95:D3:35:6C:79:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263243E0618F11F0A0F190BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:07:9c:df:27:0c:98:07:d0:3a:48:a9:d1:13:a1:4f:ab:d2:
46:33:1d:fb:70:88:e2:66:41:c0:89:78:f2:52:d6:dd:b1:12:
fc:66:06:f4:b5:e8:0b:47:b2:54:33:6c:64:ce:08:a5:b5:a2:
fc:e1:f7:1f:ce:d5:63:bb:cc:93:5b:d1:c1:d8:31:17:ad:33:
18:ea:93:22:f3:e3:87:3e:9f:5a:fc:23:91:13:9d:a1:fa:c5:
26:d0:b5:08:94:87:a4:44:fc:71:19:7c:9b:2d:f8:d6:2b:8d:
06:24:d4:7b:ce:da:f3:88:8f:6d:c4:35:ee:d1:4b:00:d3:5a:
5c:3d:83:87:50:dd:68:02:a6:85:9f:e1:84:8f:84:98:64:ad:
17:60:88:f0:82:57:d3:77:84:36:b2:ae:20:0c:b5:ea:b6:e8:
60:d9:ee:f6:d4:c8:c8:e8:13:ab:d2:f2:cf:e3:31:b3:af:c9:
3d:34:21:2d:9a:bd:4b:31:6c:39:fd:81:0d:75:65:46:b9:91:
07:a1:f1:4e:9b:bb:77:6d:a7:ac:a0:78:b6:64:2e:36:b0:34:
cc:80:67:59:e7:32:6f:36:88:24:14:3b:74:c2:d6:49:44:ca:
17:c6:2f:53:58:88:b5:42:37:d2:49:14:cb:7b:8f:d4:12:7d:
16:4f:99:1c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWVlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE1MTUxOTQ1WhcNMjUwNzIyMTUxOTQ1WjAYMRYw
FAYDVQQDEw02ODc2NzE5Ni0zOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzKvqhYvLHIpWpJfp7qcRQXynB6x9l85E/7rrpVqgjt3CuFnoKCUAEK0G
tg6wVtzgM+iBY0ORcvfZPhz4qEHdfvuD/dEEi2VJxytq4OSaajjt/SJPS1aZvQhv
B9kb6e6o7ms2+yD2Cf03n2514lhOmWljLyJYvhnyuYOQJaVGpSVj7aKR75PRfjX3
N3Gy812wrOaPs3TjwS5bemeZsaR0Gd5u/ko9vXQBqm9JckbhAjqMPekq8HuGs5bS
ycbLYLaZMra5S+5G+oQ5CZugXT/4VoWxj8gnS1LPVr2Tp/Tk+ufWNtOd8QqGD8p/
fLHeEeKDoGanrqdezSiZg2K262PN/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHSp
boqpdFzODzZGJjnOldM1bHmDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNjMyNDNFMDYxOEYxMUYwQTBGMTkwQkZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnPeAMA0GCSqGSIb3DQEBCwUA
A4IBAQCNB5zfJwyYB9A6SKnRE6FPq9JGMx37cIjiZkHAiXjyUtbdsRL8Zgb0tegL
R7JUM2xkzgiltaL84fcfztVju8yTW9HB2DEXrTMY6pMi8+OHPp9a/CORE52h+sUm
0LUIlIekRPxxGXybLfjWK40GJNR7ztrziI9txDXu0UsA01pcPYOHUN1oAqaFn+GE
j4SYZK0XYIjwglfTd4Q2sq4gDLXqtuhg2e721MjI6BOr0vLP4zGzr8k9NCEtmr1L
MWw5/YENdWVGuZEHofFOm7t3baesoHi2ZC42sDTMgGdZ5zJvNogkFDt0wtZJRMoX
xi9TWIi1QjfSSRTLe4/UEn0WT5kc
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:07 2025 by rpki-client