Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56425908566311F0B67B0EB5DAE4EC9C.roa
File: 56425908566311F0B67B0EB5DAE4EC9C.roa (raw, json)
Hash identifier: w6jMEjoYyiiZxae4YJ6xpc4fMCqpAykt9vGfUgVfIY8=
Subject key identifier: 5A:4F:91:32:8A:1C:EE:7F:2E:02:FA:DE:CB:ED:DC:B3:CD:CE:26:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56425908566311F0B67B0EB5DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 10:08:30 +0000
ROA not before: Tue 01 Jul 2025 10:08:24 +0000
ROA not after: Thu 07 Aug 2025 10:08:24 +0000
asID: 200373
IP address blocks: 156.228.178.0/24 maxlen: 24
156.228.179.0/24 maxlen: 24
156.228.180.0/24 maxlen: 24
156.228.181.0/24 maxlen: 24
156.228.182.0/24 maxlen: 24
156.228.183.0/24 maxlen: 24
156.228.184.0/24 maxlen: 24
156.228.185.0/24 maxlen: 24
156.228.189.0/24 maxlen: 24
156.228.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90048 (0x15fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 10:08:24 2025 GMT
Not After : Aug 7 10:08:24 2025 GMT
Subject: CN=6863b39e-443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5b:2e:18:14:77:b8:63:24:94:76:76:19:ee:
26:4e:33:fb:3a:91:26:2f:f5:c7:4c:35:68:23:88:
ec:25:59:43:4d:ad:84:9d:79:c3:da:b7:9b:10:d1:
54:1d:a1:1b:ef:bc:5b:0f:6e:62:92:a2:d9:a9:f1:
21:11:a2:93:71:a7:82:81:ed:8b:69:44:7c:82:f4:
fe:bb:31:95:38:69:36:09:1c:16:dd:c5:07:fb:8d:
96:6a:57:91:24:3c:89:8c:ff:3a:04:3d:0a:ee:13:
13:49:76:2d:61:bc:28:93:af:f7:73:3f:fb:ef:7b:
c1:4d:5c:f8:e8:19:d7:4d:16:b4:22:42:f3:b4:00:
88:ab:6e:a2:c7:4f:84:79:b4:eb:78:ac:05:43:d7:
9f:7d:9d:8f:4c:a7:52:7f:35:21:ac:cd:06:10:c4:
cc:ad:51:e1:51:25:52:c3:f6:d6:ff:53:fd:58:17:
1d:4c:35:e1:d7:05:28:98:ce:c7:bc:f2:0a:00:bf:
86:d2:b8:a6:d5:33:a2:af:03:9c:36:94:0b:4f:3c:
75:e2:59:43:d6:83:2c:6c:dd:4b:1b:d9:c3:90:7c:
7c:40:d6:8e:75:bf:9c:5f:f6:99:27:e1:44:15:6a:
e9:e4:02:b5:17:b5:8f:90:e9:5f:0e:2f:9f:f3:6a:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:91:32:8A:1C:EE:7F:2E:02:FA:DE:CB:ED:DC:B3:CD:CE:26:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56425908566311F0B67B0EB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.178.0-156.228.185.255
156.228.189.0-156.228.190.255
Signature Algorithm: sha256WithRSAEncryption
05:29:0d:d2:f0:87:f3:cd:ad:5f:44:db:91:b3:35:0c:ee:45:
1c:e0:e7:9a:dc:14:bb:1e:c3:0c:94:31:e6:49:45:1d:3a:78:
24:b9:6e:62:92:ee:1d:a1:9f:3f:21:c6:e0:de:3e:ca:5d:4e:
12:cc:bd:c4:be:69:2b:26:ee:96:8f:ee:0d:34:dd:00:52:49:
c6:00:74:25:2b:b6:83:a8:41:5f:be:28:3d:c5:ba:b4:75:08:
04:74:7c:b9:d0:9c:41:f4:28:27:eb:0b:64:a8:e2:71:30:79:
80:b4:48:7b:43:ed:a7:51:06:cc:ca:f3:8b:ac:71:36:c1:c4:
43:63:13:29:d2:02:f1:89:a2:04:e6:ab:da:5f:71:a1:69:66:
8a:eb:0c:1f:82:98:77:18:39:4b:f9:0f:b3:5f:aa:02:c1:07:
d8:d1:37:43:6e:7a:6c:4e:7a:f6:fe:41:dd:39:f1:66:8e:bb:
9b:95:6a:e3:5d:2e:bd:4c:dd:d1:4c:4e:cd:d5:ad:d9:56:a2:
85:1f:5d:07:c8:9f:e6:89:61:6e:10:8d:ed:76:e8:3c:03:83:
9c:f7:59:f2:05:07:8f:73:a5:67:e0:0d:71:cc:a2:a2:8d:38:
90:1e:49:70:94:e0:38:f1:39:1d:bb:0f:5e:4a:fa:f1:78:d6:
68:0a:84:9b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAV/AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAxMTAwODI0WhcNMjUwODA3MTAwODI0WjAYMRYw
FAYDVQQDEw02ODYzYjM5ZS00NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA71suGBR3uGMklHZ2Ge4mTjP7OpEmL/XHTDVoI4jsJVlDTa2EnXnD2reb
ENFUHaEb77xbD25ikqLZqfEhEaKTcaeCge2LaUR8gvT+uzGVOGk2CRwW3cUH+42W
aleRJDyJjP86BD0K7hMTSXYtYbwok6/3cz/773vBTVz46BnXTRa0IkLztACIq26i
x0+EebTreKwFQ9effZ2PTKdSfzUhrM0GEMTMrVHhUSVSw/bW/1P9WBcdTDXh1wUo
mM7HvPIKAL+G0rim1TOirwOcNpQLTzx14llD1oMsbN1LG9nDkHx8QNaOdb+cX/aZ
J+FEFWrp5AK1F7WPkOlfDi+f82oV+wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFFpP
kTKKHO5/LgL63svt3LPNziZdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NjQyNTkwODU2NjMxMUYwQjY3QjBFQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGc5LIDBAGc5LgwDAMEAJzk
vQMEAJzkvjANBgkqhkiG9w0BAQsFAAOCAQEABSkN0vCH882tX0TbkbM1DO5FHODn
mtwUux7DDJQx5klFHTp4JLluYpLuHaGfPyHG4N4+yl1OEsy9xL5pKybulo/uDTTd
AFJJxgB0JSu2g6hBX74oPcW6tHUIBHR8udCcQfQoJ+sLZKjicTB5gLRIe0Ptp1EG
zMrzi6xxNsHEQ2MTKdIC8YmiBOar2l9xoWlmiusMH4KYdxg5S/kPs1+qAsEH2NE3
Q256bE569v5B3TnxZo67m5Vq410uvUzd0UxOzdWt2VaihR9dB8if5olhbhCN7Xbo
PAODnPdZ8gUHj3OlZ+ANccyioo04kB5JcJTgOPE5HbsPXkr68XjWaAqEmw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:33:33 2025 by rpki-client