Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D854F8C59D311F0B61F8F90DAE4EC9C.roa
File: 4D854F8C59D311F0B61F8F90DAE4EC9C.roa (raw, json)
Hash identifier: Hf9e9fFCct1TgvJaUG25xaleuyj5CEpgf6PtAIJiSsY=
Subject key identifier: 04:A2:AE:CE:20:D9:0E:1E:DB:FE:BC:EA:98:AB:C2:B2:79:7A:0B:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D854F8C59D311F0B61F8F90DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 19:07:32 +0000
ROA not before: Sat 05 Jul 2025 19:07:28 +0000
ROA not after: Sat 06 Sep 2025 19:07:28 +0000
asID: 44901
IP address blocks: 156.229.125.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90583 (0x161d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 19:07:28 2025 GMT
Not After : Sep 6 19:07:28 2025 GMT
Subject: CN=686977f4-4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:52:8c:a0:93:63:3d:08:36:b6:a8:95:be:
9e:f7:45:84:88:f7:d1:c5:31:28:4f:ed:e6:78:a9:
13:cf:22:69:e9:81:01:a1:c3:b9:7e:1e:be:00:5a:
93:c0:8e:6e:2e:48:2b:b9:2f:ce:77:d3:48:f3:fd:
02:f3:10:1e:e8:a1:d1:a7:9c:bd:c6:53:02:a5:2f:
8e:4a:de:d2:83:e9:73:02:fa:de:44:05:76:bf:6c:
3c:17:a2:95:a0:65:6e:c3:85:34:9b:a0:e0:b2:64:
23:de:e0:32:d8:8d:92:42:2d:db:aa:5b:c2:f6:92:
8e:c8:2a:29:58:a1:90:b8:31:60:54:78:ef:ec:36:
24:96:ba:f3:4e:bc:73:20:ae:23:49:09:e7:bf:39:
bc:59:c4:5c:45:97:79:9d:93:a8:91:1e:98:f8:eb:
c4:2a:31:2e:f2:96:a7:ca:6e:97:70:a9:35:e6:bb:
2a:8d:55:c1:0a:8d:75:f1:50:9d:0f:e9:60:ef:1a:
73:98:90:8d:e4:8b:2a:1c:df:8d:93:0c:da:aa:ee:
91:1d:6a:9e:2e:2a:a3:59:f9:23:f2:a1:ef:27:36:
00:ed:26:5e:11:f9:2f:53:8a:87:b1:5c:9a:e2:31:
2d:76:2c:50:a7:93:38:6c:dd:99:b9:5b:9f:61:a8:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:AE:CE:20:D9:0E:1E:DB:FE:BC:EA:98:AB:C2:B2:79:7A:0B:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D854F8C59D311F0B61F8F90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:45:a1:e3:fb:16:00:2d:b2:e3:21:1a:e9:03:5e:9e:35:c2:
09:71:61:e4:d2:4e:52:83:58:77:5b:44:f9:6c:46:39:51:ea:
51:01:57:d8:7a:e1:71:7a:d7:c4:ba:c9:b6:11:76:65:9a:b2:
8d:b5:11:b1:c0:57:2a:96:4e:9e:ce:a9:d4:8f:69:d5:7c:09:
cf:1d:26:4e:43:bb:ce:2b:3f:37:f0:ae:d9:d6:0a:19:9c:b6:
d9:dc:aa:80:ce:77:5b:34:16:ae:a4:e9:ca:bd:07:d1:ec:d9:
20:c4:24:ee:7a:69:ee:75:0d:7b:dc:96:b8:ba:46:45:bf:44:
34:fb:b3:c2:ea:6b:57:01:8f:1d:6e:08:a9:90:e1:12:05:50:
3f:37:8d:fa:48:e1:25:cf:e8:e6:a1:aa:cf:4e:45:c3:40:a3:
fd:77:8d:fd:13:a2:5b:d5:cd:1a:d1:df:2b:84:02:9f:c9:a7:
16:64:2f:5f:91:03:0a:bf:7e:19:56:aa:e7:09:e4:ef:d1:76:
b1:39:29:bd:95:70:a4:b4:d5:50:25:41:93:0d:40:2c:bc:e6:
a0:19:08:3d:e6:37:62:5f:d0:30:39:9e:02:a9:12:4c:b9:ad:
2f:1f:8b:71:83:35:cb:2e:3f:0f:aa:3d:a1:67:d3:4b:b9:31:
dc:37:8e:af
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWHXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MTkwNzI4WhcNMjUwOTA2MTkwNzI4WjAYMRYw
FAYDVQQDEw02ODY5NzdmNC00YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0pJSjKCTYz0INraolb6e90WEiPfRxTEoT+3meKkTzyJp6YEBocO5fh6+
AFqTwI5uLkgruS/Od9NI8/0C8xAe6KHRp5y9xlMCpS+OSt7Sg+lzAvreRAV2v2w8
F6KVoGVuw4U0m6DgsmQj3uAy2I2SQi3bqlvC9pKOyCopWKGQuDFgVHjv7DYklrrz
TrxzIK4jSQnnvzm8WcRcRZd5nZOokR6Y+OvEKjEu8panym6XcKk15rsqjVXBCo11
8VCdD+lg7xpzmJCN5IsqHN+Nkwzaqu6RHWqeLiqjWfkj8qHvJzYA7SZeEfkvU4qH
sVya4jEtdixQp5M4bN2ZuVufYaixzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASi
rs4g2Q4e2/686pirwrJ5egvlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RDg1NEY4QzU5RDMxMUYwQjYxRjhGOTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOV9AwQAnOXvMA0GCSqGSIb3
DQEBCwUAA4IBAQANRaHj+xYALbLjIRrpA16eNcIJcWHk0k5Sg1h3W0T5bEY5UepR
AVfYeuFxetfEusm2EXZlmrKNtRGxwFcqlk6ezqnUj2nVfAnPHSZOQ7vOKz838K7Z
1goZnLbZ3KqAzndbNBaupOnKvQfR7NkgxCTuemnudQ173Ja4ukZFv0Q0+7PC6mtX
AY8dbgipkOESBVA/N436SOElz+jmoarPTkXDQKP9d439E6Jb1c0a0d8rhAKfyacW
ZC9fkQMKv34ZVqrnCeTv0XaxOSm9lXCktNVQJUGTDUAsvOagGQg95jdiX9AwOZ4C
qRJMua0vH4txgzXLLj8Pqj2hZ9NLuTHcN46v
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:08:04 2025 by rpki-client