Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B85E4A24DE711F0BBDF7784DAE4EC9C.roa
File: 2B85E4A24DE711F0BBDF7784DAE4EC9C.roa (raw, json)
Hash identifier: DpO9u9pZDicqFjRvnrurXY689T1HPZ/zz7Fcu4irPWc=
Subject key identifier: 93:F6:23:C2:1C:EB:DF:86:D6:18:B6:B1:D4:56:FA:77:AA:E0:E5:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B85E4A24DE711F0BBDF7784DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 14:59:31 +0000
ROA not before: Fri 20 Jun 2025 14:59:26 +0000
ROA not after: Tue 29 Jul 2025 14:59:26 +0000
asID: 401254
IP address blocks: 156.224.84.0/22 maxlen: 24
156.224.92.0/22 maxlen: 24
156.224.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89465 (0x15d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 14:59:26 2025 GMT
Not After : Jul 29 14:59:26 2025 GMT
Subject: CN=68557753-8f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:f1:36:ce:86:68:fa:a6:1b:69:8f:ac:9f:
b0:d8:2a:1a:55:85:46:46:ad:9b:46:44:ec:41:69:
84:7c:25:e5:a9:71:b8:59:a8:67:99:09:f9:8b:c1:
b0:a2:29:8d:c7:c2:ef:98:00:92:dd:b7:19:68:af:
7a:0f:a6:8b:17:f9:4b:76:5e:1a:de:45:f7:b5:2d:
2b:6a:11:4b:ed:76:76:5e:dc:b5:54:fb:50:f8:93:
22:7b:90:31:06:de:db:a0:74:0b:4c:41:cd:79:53:
97:8c:0e:d0:fa:44:1d:e4:23:e7:14:3c:5e:ea:29:
2a:d7:f4:c0:f0:3b:92:f0:ca:53:fc:73:21:ce:78:
c0:c3:2b:5c:17:86:33:0d:aa:98:2f:17:7c:aa:a6:
c0:76:b9:56:2c:a4:11:4f:73:d5:64:a4:6d:d0:7e:
82:77:54:a3:0e:5d:87:62:ef:9a:14:84:4f:fc:a3:
8b:b7:7e:e7:7d:dc:5f:9a:76:2c:db:e7:26:31:32:
e2:8f:64:73:d7:41:14:00:c9:16:5b:b2:e8:dd:2b:
7c:ea:43:88:22:02:ec:66:d9:d4:23:cf:24:d4:c8:
7f:bb:e1:ab:a8:66:ca:42:79:5d:65:b0:5a:41:83:
a5:2a:49:5d:5f:54:97:f6:2d:1f:25:a3:cc:3a:9f:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:23:C2:1C:EB:DF:86:D6:18:B6:B1:D4:56:FA:77:AA:E0:E5:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B85E4A24DE711F0BBDF7784DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.84.0/22
156.224.92.0-156.224.127.255
Signature Algorithm: sha256WithRSAEncryption
37:11:38:de:aa:b2:d4:c9:58:74:62:81:39:84:59:45:2e:e4:
75:8e:96:af:59:a4:ee:c6:49:36:19:ed:79:16:b4:8b:32:a1:
f8:17:dd:b3:2b:02:b2:e9:3c:d7:d3:3f:d5:b9:3b:b8:ae:78:
42:02:38:bb:6f:d6:1c:04:c4:29:a6:f7:d5:a4:6b:d8:0e:34:
be:52:f0:e7:dc:99:02:bf:ee:bb:cb:51:5e:60:2c:c1:30:a6:
c5:78:cc:b9:42:04:11:c5:e4:c3:e3:4c:2b:82:3f:e2:a5:c4:
3b:91:66:6f:ed:49:b6:cb:4d:00:3b:f5:3d:9f:ed:27:d2:2b:
5e:1d:3f:df:1b:9c:db:ea:29:7e:4c:d6:45:90:68:6c:aa:60:
4c:16:32:38:3c:ca:02:3f:0a:70:f7:f5:b0:91:e9:ea:0d:5a:
e3:3c:66:b2:49:0d:1d:79:03:ce:4b:93:d9:d4:6c:12:61:a9:
92:8f:fb:c5:e6:b3:17:1e:c3:43:22:9c:2a:2d:bd:b5:40:cb:
b0:16:9b:c6:7c:ab:1c:ab:15:6e:78:7b:62:64:cf:ab:90:65:
3a:d1:bd:85:c2:98:87:6e:a1:08:61:47:4a:91:47:fa:3d:4b:
f0:4d:b9:c3:4b:06:25:36:c5:05:5d:ed:75:53:7d:a9:64:84:
42:6e:45:30
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAV15MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIwMTQ1OTI2WhcNMjUwNzI5MTQ1OTI2WjAYMRYw
FAYDVQQDEw02ODU1Nzc1My04ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApmHxNs6GaPqmG2mPrJ+w2CoaVYVGRq2bRkTsQWmEfCXlqXG4WahnmQn5
i8GwoimNx8LvmACS3bcZaK96D6aLF/lLdl4a3kX3tS0rahFL7XZ2Xty1VPtQ+JMi
e5AxBt7boHQLTEHNeVOXjA7Q+kQd5CPnFDxe6ikq1/TA8DuS8MpT/HMhznjAwytc
F4YzDaqYLxd8qqbAdrlWLKQRT3PVZKRt0H6Cd1SjDl2HYu+aFIRP/KOLt37nfdxf
mnYs2+cmMTLij2Rz10EUAMkWW7Lo3St86kOIIgLsZtnUI88k1Mh/u+GrqGbKQnld
ZbBaQYOlKkldX1SX9i0fJaPMOp8hyQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJP2
I8Ic69+G1hi2sdRW+neq4OUyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQjg1RTRBMjRERTcxMUYwQkJERjc3ODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCnOBUMAwDBAKc4FwDBAec4AAw
DQYJKoZIhvcNAQELBQADggEBADcRON6qstTJWHRigTmEWUUu5HWOlq9ZpO7GSTYZ
7XkWtIsyofgX3bMrArLpPNfTP9W5O7iueEICOLtv1hwExCmm99Wka9gONL5S8Ofc
mQK/7rvLUV5gLMEwpsV4zLlCBBHF5MPjTCuCP+KlxDuRZm/tSbbLTQA79T2f7SfS
K14dP98bnNvqKX5M1kWQaGyqYEwWMjg8ygI/CnD39bCR6eoNWuM8ZrJJDR15A85L
k9nUbBJhqZKP+8Xmsxcew0MinCotvbVAy7AWm8Z8qxyrFW54e2Jkz6uQZTrRvYXC
mIduoQhhR0qRR/o9S/BNucNLBiU2xQVd7XVTfalkhEJuRTA=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:15:50 2025 by rpki-client