Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF8B2C632011F0B309DF83DAE4EC9C.roa
File: 4DDF8B2C632011F0B309DF83DAE4EC9C.roa (raw, json)
Hash identifier: +qq/iRlt8s7HzIuhXJ6JDF6gu7poxCrVacXMQJZgRSs=
Subject key identifier: 25:3F:B6:A3:02:66:5E:AA:C4:26:C0:E2:33:A9:C7:1E:1D:70:B1:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF8B2C632011F0B309DF83DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 15:11:25 +0000
ROA not before: Thu 17 Jul 2025 15:11:20 +0000
ROA not after: Sun 31 Aug 2025 15:11:20 +0000
asID: 44559
IP address blocks: 156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
156.248.21.0/24 maxlen: 24
156.248.23.0/24 maxlen: 24
156.249.19.0/24 maxlen: 24
156.249.80.0/24 maxlen: 24
156.249.81.0/24 maxlen: 24
156.249.83.0/24 maxlen: 24
156.249.97.0/24 maxlen: 24
156.249.98.0/24 maxlen: 24
156.249.99.0/24 maxlen: 24
156.249.100.0/24 maxlen: 24
156.249.103.0/24 maxlen: 24
156.249.112.0/24 maxlen: 24
156.249.113.0/24 maxlen: 24
156.249.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91632 (0x165f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 15:11:20 2025 GMT
Not After : Aug 31 15:11:20 2025 GMT
Subject: CN=6879129d-2454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:08:c0:6c:84:2f:3a:e0:a7:11:d5:a9:4f:
eb:6b:9e:61:87:fa:e4:56:7f:de:0d:76:78:d4:9f:
dc:a9:ad:e5:97:aa:d6:28:26:a1:f2:fc:4d:e4:21:
c6:0e:2e:8e:22:18:03:b5:07:a2:10:66:d2:23:4b:
3e:10:06:fa:33:1f:df:36:18:b9:d5:44:ff:ba:5a:
6c:ec:53:a4:4a:9a:3c:cc:23:1a:9b:fa:a0:84:7f:
96:b0:8e:4b:7b:f8:59:58:e5:03:48:fd:21:34:39:
66:6e:dd:d1:5c:26:f5:17:8c:21:49:7b:f0:52:4e:
bb:69:64:c5:05:94:1d:c0:0b:eb:90:eb:c2:29:c7:
75:32:13:a3:8a:85:d6:57:fb:ec:b2:f0:2a:b5:77:
06:6a:39:30:90:0e:de:96:43:c3:06:c5:79:5b:92:
a0:4d:98:34:93:cd:40:d0:27:5d:82:f2:c2:3f:ac:
81:c4:71:5e:df:52:7a:eb:d6:37:d0:74:d8:0e:1c:
e4:29:9b:36:fc:69:bb:dd:49:b7:f1:7e:1d:49:e3:
0d:ad:a5:be:2c:3e:73:7f:90:b6:03:21:43:c3:03:
93:65:23:28:44:19:97:96:f8:08:8a:62:d3:d6:e5:
d4:aa:67:30:71:c6:9b:92:4f:ec:3e:c2:30:d8:16:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:B6:A3:02:66:5E:AA:C4:26:C0:E2:33:A9:C7:1E:1D:70:B1:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF8B2C632011F0B309DF83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.6.0/23
156.248.20.0/23
156.248.23.0/24
156.249.19.0/24
156.249.80.0/23
156.249.83.0/24
156.249.97.0-156.249.100.255
156.249.103.0/24
156.249.112.0-156.249.114.255
Signature Algorithm: sha256WithRSAEncryption
55:ba:38:c5:e3:7f:c3:7c:cb:e7:38:c3:9f:11:31:d8:a5:c0:
45:b4:80:b9:91:1a:ca:5f:88:ea:7c:17:ad:3c:f5:c8:ee:f0:
9a:18:e8:eb:14:15:bb:34:19:2f:29:c2:fc:25:5d:92:86:ff:
fe:43:40:3b:ec:70:b5:f8:29:06:b6:30:b5:2d:6a:01:c9:bf:
48:1b:69:a0:9f:29:14:fa:cf:f5:42:0b:d4:8e:fa:e5:2b:f9:
07:aa:01:ba:07:9e:bb:4b:ed:eb:e9:94:50:e3:28:b3:b3:99:
b9:af:c5:07:06:70:69:fc:5e:ca:e1:21:e6:32:58:da:06:0d:
52:a4:30:a9:68:b0:3c:1b:40:76:54:e3:76:66:82:67:2c:c6:
cf:28:db:85:20:6c:25:e5:03:62:24:18:d1:12:83:98:bc:fb:
61:c4:67:4a:42:f9:53:80:98:ba:ba:57:48:60:e0:14:bf:a3:
3e:67:f1:c6:ea:58:0e:78:2f:d1:a0:9b:8c:33:3a:94:6b:8f:
dc:c4:9e:e2:2a:a9:2d:a5:a6:50:08:ee:bc:da:7e:33:30:57:
02:9c:d7:fb:85:c4:ab:b0:76:a4:16:f1:00:49:1c:ad:98:53:
5b:d9:89:10:1f:28:13:25:3a:74:ad:2b:6f:30:ca:25:cc:8d:
5c:ce:8f:eb
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIDAWXwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE3MTUxMTIwWhcNMjUwODMxMTUxMTIwWjAYMRYw
FAYDVQQDEw02ODc5MTI5ZC0yNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAufkIwGyELzrgpxHVqU/ra55hh/rkVn/eDXZ41J/cqa3ll6rWKCah8vxN
5CHGDi6OIhgDtQeiEGbSI0s+EAb6Mx/fNhi51UT/ulps7FOkSpo8zCMam/qghH+W
sI5Le/hZWOUDSP0hNDlmbt3RXCb1F4whSXvwUk67aWTFBZQdwAvrkOvCKcd1MhOj
ioXWV/vssvAqtXcGajkwkA7elkPDBsV5W5KgTZg0k81A0CddgvLCP6yBxHFe31J6
69Y30HTYDhzkKZs2/Gm73Um38X4dSeMNraW+LD5zf5C2AyFDwwOTZSMoRBmXlvgI
imLT1uXUqmcwccabkk/sPsIw2BYyiQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFCU/
tqMCZl6qxCbA4jOpxx4dcLHIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RERGOEIyQzYzMjAxMUYwQjMwOURGODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBnPgGAwQBnPgUAwQAnPgXAwQA
nPkTAwQBnPlQAwQAnPlTMAwDBACc+WEDBACc+WQDBACc+WcwDAMEBJz5cAMEAJz5
cjANBgkqhkiG9w0BAQsFAAOCAQEAVbo4xeN/w3zL5zjDnxEx2KXARbSAuZEayl+I
6nwXrTz1yO7wmhjo6xQVuzQZLynC/CVdkob//kNAO+xwtfgpBrYwtS1qAcm/SBtp
oJ8pFPrP9UIL1I765Sv5B6oBugeeu0vt6+mUUOMos7OZua/FBwZwafxeyuEh5jJY
2gYNUqQwqWiwPBtAdlTjdmaCZyzGzyjbhSBsJeUDYiQY0RKDmLz7YcRnSkL5U4CY
urpXSGDgFL+jPmfxxupYDngv0aCbjDM6lGuP3MSe4iqpLaWmUAjuvNp+MzBXApzX
+4XEq7B2pBbxAEkcrZhTW9mJEB8oEyU6dK0rbzDKJcyNXM6P6w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:31:17 2025 by rpki-client