Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4405FC225A6E11F0AF565881DAE4EC9C.roa
File: 4405FC225A6E11F0AF565881DAE4EC9C.roa (raw, json)
Hash identifier: 6Ay4wBYq1cG2433BtCsv67Cx458PPdIx9iEhb+3TfS8=
Subject key identifier: 77:A5:53:01:4B:FD:F8:53:C7:24:77:32:09:D2:34:6F:64:51:63:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01620A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4405FC225A6E11F0AF565881DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:36:49 +0000
ROA not before: Sun 06 Jul 2025 13:36:44 +0000
ROA not after: Thu 07 Aug 2025 13:36:44 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90634 (0x1620a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 13:36:44 2025 GMT
Not After : Aug 7 13:36:44 2025 GMT
Subject: CN=686a7bf0-3084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:96:c4:da:38:71:21:46:79:9d:ac:1c:f5:
50:2b:c3:89:bd:ce:88:e6:59:b2:62:99:85:e1:53:
6f:1f:77:5b:c8:d4:a4:21:4e:3d:de:20:3f:d9:f3:
89:9b:9e:cc:5b:b1:0b:76:36:37:1f:7b:49:7d:0c:
de:9d:12:b8:d4:aa:0b:d3:5e:87:45:e2:08:71:0f:
0d:78:af:5a:38:19:01:d7:7a:31:bc:c9:ba:a6:35:
48:c5:a7:30:0e:e6:7d:4d:d4:c1:43:a6:5e:7e:9f:
76:cd:07:6b:14:85:88:3d:ae:bf:d2:2b:a5:af:8c:
33:bc:3c:47:17:64:4f:ea:04:e9:1d:8b:02:34:22:
65:bd:5d:0b:a2:5f:a1:8a:20:ec:58:0e:d5:40:9c:
30:cc:9f:a0:e3:68:9f:20:12:09:43:8e:42:c1:10:
1a:1a:0d:ff:88:de:4a:27:8b:b5:b2:3f:e5:4b:91:
f8:21:3f:06:f7:50:15:84:3d:88:d8:da:b5:b9:ea:
55:8a:58:48:d0:7b:dd:d9:cf:70:91:b4:79:3e:44:
64:5d:ba:56:2d:de:f8:af:c7:0f:39:db:98:5e:ff:
40:f2:65:e5:5e:11:17:d3:db:72:48:6b:6e:47:8c:
60:38:ab:1e:fd:73:82:79:81:ed:61:5c:a1:1b:bd:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:53:01:4B:FD:F8:53:C7:24:77:32:09:D2:34:6F:64:51:63:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4405FC225A6E11F0AF565881DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.249.137.0-156.249.138.255
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
7e:aa:8c:ec:c4:bc:f9:a9:bb:1c:04:01:ef:67:26:c7:35:22:
d1:71:a2:f1:f4:05:70:1a:6f:3e:0e:3a:23:f8:96:a0:59:b9:
6a:25:60:a6:71:4f:3e:98:db:79:d8:32:e3:0a:a1:5d:7c:3f:
15:58:ce:d0:ff:10:83:23:50:83:b9:0c:f0:14:03:94:b8:1e:
43:f1:c2:8c:87:41:ac:46:57:c0:5e:b1:7d:d5:3f:df:6c:fb:
3b:cb:83:65:03:b6:b3:03:a2:9d:b6:5e:34:8f:d2:ab:12:f8:
ab:f9:57:52:23:6d:f9:04:be:8e:bd:5d:70:01:ea:0a:1a:f4:
3a:a5:b9:ca:8c:fa:f3:05:05:23:5c:7c:a7:b7:ec:53:81:2c:
36:25:33:ca:b0:95:b8:c1:cf:d0:87:45:f6:4d:d2:9c:ae:0f:
23:93:8c:9b:96:a6:da:46:2f:29:c1:84:7b:30:c6:92:95:4f:
ef:62:4c:b4:b2:f5:a6:c3:eb:3b:11:ad:e7:db:dc:d3:be:9b:
be:1e:f6:57:e0:6d:87:7e:fa:1b:5d:d5:2a:36:db:d2:b0:a2:
3b:df:9a:37:3a:15:6d:e5:08:bf:da:1f:64:f6:d5:2e:1a:c7:
8e:0e:69:51:d8:da:e9:4b:8d:14:01:ff:63:dd:de:29:db:78:
c3:c0:7b:54
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAWIKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTMzNjQ0WhcNMjUwODA3MTMzNjQ0WjAYMRYw
FAYDVQQDEw02ODZhN2JmMC0zMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1gCWxNo4cSFGeZ2sHPVQK8OJvc6I5lmyYpmF4VNvH3dbyNSkIU493iA/
2fOJm57MW7ELdjY3H3tJfQzenRK41KoL016HReIIcQ8NeK9aOBkB13oxvMm6pjVI
xacwDuZ9TdTBQ6Zefp92zQdrFIWIPa6/0iulr4wzvDxHF2RP6gTpHYsCNCJlvV0L
ol+hiiDsWA7VQJwwzJ+g42ifIBIJQ45CwRAaGg3/iN5KJ4u1sj/lS5H4IT8G91AV
hD2I2Nq1uepVilhI0Hvd2c9wkbR5PkRkXbpWLd74r8cPOduYXv9A8mXlXhEX09ty
SGtuR4xgOKse/XOCeYHtYVyhG70BBwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFHel
UwFL/fhTxyR3MgnSNG9kUWPVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDA1RkMyMjVBNkUxMUYwQUY1NjU4ODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBACc5F8DBACc5GAwDAMEAJz5
iQMEAJz5ijAMAwQCnP2kAwQBnP2oMA0GCSqGSIb3DQEBCwUAA4IBAQB+qozsxLz5
qbscBAHvZybHNSLRcaLx9AVwGm8+Djoj+JagWblqJWCmcU8+mNt52DLjCqFdfD8V
WM7Q/xCDI1CDuQzwFAOUuB5D8cKMh0GsRlfAXrF91T/fbPs7y4NlA7azA6Kdtl40
j9KrEvir+VdSI235BL6OvV1wAeoKGvQ6pbnKjPrzBQUjXHynt+xTgSw2JTPKsJW4
wc/Qh0X2TdKcrg8jk4yblqbaRi8pwYR7MMaSlU/vYky0svWmw+s7Ea3n29zTvpu+
HvZX4G2HfvobXdUqNtvSsKI735o3OhVt5Qi/2h9k9tUuGseODmlR2NrpS40UAf9j
3d4p23jDwHtU
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:55 2025 by rpki-client