Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917CF4765E4F11F0B40B3898DAE4EC9C.roa
File: 917CF4765E4F11F0B40B3898DAE4EC9C.roa (raw, json)
Hash identifier: Cwvs/DZeDURu0PsSYQZRmtDDDgBmPJrKckCIDwTb4tM=
Subject key identifier: 14:76:FA:D0:B6:28:9A:85:4B:A5:28:4A:0B:CB:11:BD:73:05:C6:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01649A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917CF4765E4F11F0B40B3898DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 12:07:09 +0000
ROA not before: Fri 11 Jul 2025 12:07:04 +0000
ROA not after: Sun 17 Aug 2025 12:07:04 +0000
asID: 22773
IP address blocks: 156.239.144.0/22 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
156.243.205.0/24 maxlen: 24
156.243.206.0/24 maxlen: 24
156.243.207.0/24 maxlen: 24
156.243.218.0/24 maxlen: 24
156.248.1.0/24 maxlen: 24
156.248.2.0/24 maxlen: 24
156.248.3.0/24 maxlen: 24
156.248.22.0/24 maxlen: 24
156.248.24.0/24 maxlen: 24
156.248.25.0/24 maxlen: 24
156.248.26.0/24 maxlen: 24
156.248.27.0/24 maxlen: 24
156.248.28.0/24 maxlen: 24
156.248.29.0/24 maxlen: 24
156.248.30.0/23 maxlen: 24
156.248.64.0/21 maxlen: 24
156.249.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91290 (0x1649a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 12:07:04 2025 GMT
Not After : Aug 17 12:07:04 2025 GMT
Subject: CN=6870fe6d-6b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ad:e6:47:69:d8:dd:95:6b:27:1d:54:2c:
43:34:99:63:9f:cc:0e:e9:b7:84:9f:98:41:d0:ff:
93:4b:d9:08:cc:0c:13:e4:8e:e2:9d:76:c1:3c:99:
fb:76:23:d1:72:8b:d2:cc:00:7f:bc:21:2a:f2:cc:
51:0c:6b:f7:99:e4:16:9b:2e:0c:6a:bc:29:98:f8:
77:14:75:30:95:84:9a:63:ba:a8:7d:85:50:97:a3:
1d:24:7c:3c:ed:12:bf:dd:21:92:d6:d6:10:58:74:
74:2b:2c:01:62:fb:5f:59:de:39:a2:29:d5:e2:81:
e6:bd:fb:c0:63:f8:65:c9:87:82:e5:96:f1:4b:50:
9d:97:83:cb:ec:f6:35:3c:53:bc:d8:ef:e2:46:70:
b3:62:0e:80:d9:ba:7a:1e:56:1a:c3:27:8f:9d:24:
ee:54:17:de:23:45:64:da:29:98:e0:df:df:60:b7:
4a:04:22:e5:e8:19:f1:48:d7:f8:e8:0c:1a:67:60:
37:5b:f2:f0:1a:4d:ba:3d:5c:b1:02:e6:75:6c:59:
21:69:d5:c0:e3:7e:cc:fc:63:34:fc:c9:d2:a1:f9:
f3:4e:09:59:13:c9:9b:66:c2:af:cd:53:6c:47:19:
14:05:7e:0a:af:70:0a:3e:7c:1a:22:4d:aa:ef:25:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:FA:D0:B6:28:9A:85:4B:A5:28:4A:0B:CB:11:BD:73:05:C6:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917CF4765E4F11F0B40B3898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.144.0/22
156.243.115.0/24
156.243.192.0/24
156.243.205.0-156.243.207.255
156.243.218.0/24
156.248.1.0-156.248.3.255
156.248.22.0/24
156.248.24.0/21
156.248.64.0/21
156.249.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ef:aa:e8:c5:b2:a9:1b:3a:26:7e:94:80:71:73:36:a8:0a:
2b:fe:57:65:0b:3e:17:98:b8:a9:3e:bb:c4:d3:c9:bb:95:99:
e6:d0:1d:31:ca:61:07:29:ce:43:b1:72:74:79:12:47:de:ef:
a5:51:90:f6:9b:57:91:7d:f5:c1:0d:fc:26:ae:e9:a4:b3:80:
cf:45:c3:c8:22:a7:ce:da:02:76:ce:ce:e8:2e:6e:9f:73:48:
ce:3b:4e:43:2b:c3:2c:4b:91:e1:68:72:69:10:8d:5c:49:d0:
9d:53:31:a9:d3:0e:91:f0:f1:6a:ba:6a:49:9b:2a:50:60:98:
b6:1b:49:2a:10:2f:51:55:ab:36:65:52:9f:54:a9:88:63:5e:
0d:96:46:87:b4:25:ea:75:bd:fb:66:d9:af:d2:8c:d1:ed:2a:
15:3c:37:fc:6c:3c:35:14:01:13:4c:cf:d9:07:77:42:e4:1d:
bf:6e:e7:e0:f4:e6:03:8e:b2:35:91:26:86:a2:ea:08:ce:06:
46:a8:3f:dd:76:c3:07:47:a4:e3:c1:00:a6:bb:76:b9:96:6a:
84:94:e3:06:16:e3:ab:d3:c8:39:95:b7:3d:42:3d:02:9e:31:
8d:a2:f1:ed:89:eb:95:01:d3:88:26:de:8f:ac:5b:72:03:ba:
ee:4d:ab:bb
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIDAWSaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzExMTIwNzA0WhcNMjUwODE3MTIwNzA0WjAYMRYw
FAYDVQQDEw02ODcwZmU2ZC02YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0wGt5kdp2N2VaycdVCxDNJljn8wO6beEn5hB0P+TS9kIzAwT5I7inXbB
PJn7diPRcovSzAB/vCEq8sxRDGv3meQWmy4MarwpmPh3FHUwlYSaY7qofYVQl6Md
JHw87RK/3SGS1tYQWHR0KywBYvtfWd45oinV4oHmvfvAY/hlyYeC5ZbxS1Cdl4PL
7PY1PFO82O/iRnCzYg6A2bp6HlYawyePnSTuVBfeI0Vk2imY4N/fYLdKBCLl6Bnx
SNf46AwaZ2A3W/LwGk26PVyxAuZ1bFkhadXA437M/GM0/MnSofnzTglZE8mbZsKv
zVNsRxkUBX4Kr3AKPnwaIk2q7yW1hwIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFBR2
+tC2KJqFS6UoSgvLEb1zBcYTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MTdDRjQ3NjVFNEYxMUYwQjQwQjM4OThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCnO+QAwQAnPNzAwQAnPPAMAwD
BACc880DBASc88ADBACc89owDAMEAJz4AQMEApz4AAMEAJz4FgMEA5z4GAMEA5z4
QAMEAJz5eDANBgkqhkiG9w0BAQsFAAOCAQEAhu+q6MWyqRs6Jn6UgHFzNqgKK/5X
ZQs+F5i4qT67xNPJu5WZ5tAdMcphBynOQ7FydHkSR97vpVGQ9ptXkX31wQ38Jq7p
pLOAz0XDyCKnztoCds7O6C5un3NIzjtOQyvDLEuR4WhyaRCNXEnQnVMxqdMOkfDx
arpqSZsqUGCYthtJKhAvUVWrNmVSn1SpiGNeDZZGh7Ql6nW9+2bZr9KM0e0qFTw3
/Gw8NRQBE0zP2Qd3QuQdv27n4PTmA46yNZEmhqLqCM4GRqg/3XbDB0ek48EAprt2
uZZqhJTjBhbjq9PIOZW3PUI9Ap4xjaLx7YnrlQHTiCbej6xbcgO67k2ruw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:32 2025 by rpki-client