Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1E32485E4E11F0A38AF98FDAE4EC9C.roa
File: 5F1E32485E4E11F0A38AF98FDAE4EC9C.roa (raw, json)
Hash identifier: O9krThQWCo1aKEBGgMohcg1ubDqLH1TqFBkQ/z/mQe8=
Subject key identifier: 12:70:4F:15:E6:90:32:56:59:F7:5D:CD:FC:20:EE:E2:A7:19:91:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016496
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1E32485E4E11F0A38AF98FDAE4EC9C.roa
Signing time: Fri 11 Jul 2025 11:58:35 +0000
ROA not before: Fri 11 Jul 2025 11:58:30 +0000
ROA not after: Sat 16 Aug 2025 11:58:30 +0000
asID: 22773
IP address blocks: 156.243.100.0/24 maxlen: 24
156.243.101.0/24 maxlen: 24
156.243.102.0/24 maxlen: 24
156.243.103.0/24 maxlen: 24
156.243.104.0/24 maxlen: 24
156.243.105.0/24 maxlen: 24
156.243.106.0/24 maxlen: 24
156.243.107.0/24 maxlen: 24
156.243.193.0/24 maxlen: 24
156.243.194.0/24 maxlen: 24
156.243.195.0/24 maxlen: 24
156.243.196.0/24 maxlen: 24
156.243.197.0/24 maxlen: 24
156.243.198.0/24 maxlen: 24
156.243.199.0/24 maxlen: 24
156.243.200.0/24 maxlen: 24
156.243.201.0/24 maxlen: 24
156.243.202.0/24 maxlen: 24
156.243.203.0/24 maxlen: 24
156.243.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91286 (0x16496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 11:58:30 2025 GMT
Not After : Aug 16 11:58:30 2025 GMT
Subject: CN=6870fc6b-08f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:34:07:71:19:5d:55:94:5c:5d:b8:6f:25:
9f:98:e2:24:d6:a1:5b:82:1b:a7:63:17:98:67:d6:
5d:91:86:85:40:cf:52:59:6c:77:19:a0:f3:ac:42:
bb:14:13:f3:34:d7:70:f2:72:c8:c7:de:8e:83:5e:
0e:ab:ed:a1:b5:d8:c0:0e:00:7a:ab:d5:29:be:ae:
91:dc:b0:f1:76:41:b3:3e:29:6b:1a:d6:6d:7a:11:
0f:27:7b:67:10:19:39:c2:93:b3:f1:f8:bf:ff:8e:
52:90:33:79:8a:d0:7d:fb:ea:f8:94:06:01:be:c6:
06:dc:52:96:37:cf:13:2d:06:89:a2:de:34:92:83:
8a:48:13:dc:35:99:4b:bb:8e:17:85:9d:48:d3:43:
e6:85:e3:56:10:ad:4d:de:94:88:91:c9:77:70:e7:
d9:f8:10:80:91:c9:40:c9:fd:fd:bb:40:f6:e8:06:
b7:4e:71:55:cf:03:96:8b:09:60:50:60:4c:9a:35:
5a:f1:ec:a1:f4:a5:f5:22:6b:4f:46:9b:7d:73:35:
23:14:40:26:cb:1a:00:74:0c:ac:ec:9f:eb:5a:56:
6a:6f:7c:b1:81:5a:af:ea:8b:e4:61:e2:70:ea:d5:
44:85:25:fe:b5:d0:57:69:6b:93:2c:cf:be:ea:2d:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:4F:15:E6:90:32:56:59:F7:5D:CD:FC:20:EE:E2:A7:19:91:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1E32485E4E11F0A38AF98FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.100.0-156.243.107.255
156.243.193.0-156.243.204.255
Signature Algorithm: sha256WithRSAEncryption
11:0e:b1:91:c4:30:a9:b7:43:33:de:e8:0c:42:df:8e:c9:4c:
6c:76:26:6d:68:92:e1:c1:1e:a1:75:16:b5:6c:f1:20:86:33:
7c:d2:f4:28:3c:59:e0:fd:0f:61:fa:79:36:52:ad:10:1a:5f:
bc:6f:21:bc:38:49:ea:00:4e:de:a5:ca:38:e0:6b:fd:8b:9b:
8c:70:12:39:52:13:5f:f3:eb:90:ac:4e:b4:ce:ea:c0:75:77:
21:e7:52:d6:b4:ed:02:0f:c0:7a:fd:1d:f2:de:15:69:69:5b:
57:ab:54:5a:52:b4:27:5a:f9:44:a6:b5:2b:28:66:90:c9:44:
c4:fa:43:21:e9:fb:ac:90:c8:da:30:f5:c6:45:a3:1c:2f:04:
a6:4f:ca:95:7c:7b:08:89:ea:05:44:ba:c4:6e:ff:ec:c9:f5:
9e:fe:b4:29:cf:73:55:96:c7:33:d7:86:e1:2c:90:ab:40:c6:
ef:5d:2f:2d:2a:9d:08:e7:73:05:44:33:6f:0a:00:0e:a4:70:
3e:f2:48:67:59:57:c6:ca:3e:90:b4:8b:24:7a:f2:d5:20:c6:
87:00:7d:97:4e:3c:4e:9d:9c:46:36:28:11:e4:ae:6b:52:32:
8c:ad:60:5f:eb:99:0e:b7:be:37:73:7b:ad:b7:6e:05:a2:f4:
73:0e:80:fd
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAWSWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzExMTE1ODMwWhcNMjUwODE2MTE1ODMwWjAYMRYw
FAYDVQQDEw02ODcwZmM2Yi0wOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBc0B3EZXVWUXF24byWfmOIk1qFbghunYxeYZ9ZdkYaFQM9SWWx3GaDz
rEK7FBPzNNdw8nLIx96Og14Oq+2htdjADgB6q9Upvq6R3LDxdkGzPilrGtZtehEP
J3tnEBk5wpOz8fi//45SkDN5itB9++r4lAYBvsYG3FKWN88TLQaJot40koOKSBPc
NZlLu44XhZ1I00PmheNWEK1N3pSIkcl3cOfZ+BCAkclAyf39u0D26Aa3TnFVzwOW
iwlgUGBMmjVa8eyh9KX1ImtPRpt9czUjFEAmyxoAdAys7J/rWlZqb3yxgVqv6ovk
YeJw6tVEhSX+tdBXaWuTLM++6i1++wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFBJw
TxXmkDJWWfddzfwg7uKnGZEeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RjFFMzI0ODVFNEUxMUYwQTM4QUY5OEZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAKc82QDBAKc82gwDAMEAJzz
wQMEAJzzzDANBgkqhkiG9w0BAQsFAAOCAQEAEQ6xkcQwqbdDM97oDELfjslMbHYm
bWiS4cEeoXUWtWzxIIYzfNL0KDxZ4P0PYfp5NlKtEBpfvG8hvDhJ6gBO3qXKOOBr
/YubjHASOVITX/PrkKxOtM7qwHV3IedS1rTtAg/Aev0d8t4VaWlbV6tUWlK0J1r5
RKa1KyhmkMlExPpDIen7rJDI2jD1xkWjHC8Epk/KlXx7CInqBUS6xG7/7Mn1nv60
Kc9zVZbHM9eG4SyQq0DG710vLSqdCOdzBUQzbwoADqRwPvJIZ1lXxso+kLSLJHry
1SDGhwB9l048Tp2cRjYoEeSua1IyjK1gX+uZDre+N3N7rbduBaL0cw6A/Q==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:10 2025 by rpki-client