Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACA7401E60A011F0844E7FB1DAE4EC9C.roa
File: ACA7401E60A011F0844E7FB1DAE4EC9C.roa (raw, json)
Hash identifier: LlDvkAjT8IKLXKa8W/1AENvKPAfCIx4zUVy5abikFAw=
Subject key identifier: A7:FB:28:2B:5A:07:6B:E5:50:14:0E:47:50:DF:03:E9:B6:AE:FB:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016518
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACA7401E60A011F0844E7FB1DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:52:46 +0000
ROA not before: Mon 14 Jul 2025 10:52:41 +0000
ROA not after: Thu 24 Jul 2025 10:52:41 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91416 (0x16518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:52:41 2025 GMT
Not After : Jul 24 10:52:41 2025 GMT
Subject: CN=6874e17e-6c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:43:44:10:aa:cb:f9:26:d5:dc:53:9c:7e:
f3:63:a5:11:1e:74:97:5b:6f:df:77:d3:6f:f0:57:
a1:fc:2a:a4:c5:15:21:c8:fd:3c:39:41:75:76:70:
5d:a9:a9:2c:0f:d8:90:15:cf:db:3d:4a:fc:3e:e1:
d6:25:d5:99:a6:c1:67:f4:06:29:b9:4f:67:74:1e:
c1:00:24:c1:ea:79:7d:2d:72:e4:4a:2d:84:96:95:
d3:2c:fb:11:b1:9f:2e:45:42:21:98:d7:f3:d4:0b:
1c:00:98:3c:63:04:57:69:75:89:a6:af:71:dd:c2:
2f:dc:81:09:65:e0:e9:26:1e:d7:18:f9:55:a6:d2:
6b:28:11:ee:00:28:5e:c0:40:ce:72:ca:d1:1b:af:
4a:bd:19:1a:ef:b3:f6:99:d1:a9:ee:5c:f1:e6:c7:
5c:82:9a:a5:51:71:c4:11:d7:de:a2:09:6e:4b:10:
87:7f:83:98:c5:78:10:67:fb:b6:9c:85:f3:fa:fc:
4a:9b:f0:c0:49:be:23:be:ad:d4:78:65:53:25:04:
ef:45:8d:d9:f3:1d:09:c4:07:99:c1:38:fb:e1:92:
3b:06:6e:f4:36:f4:74:8e:78:c5:61:d5:28:ad:5e:
dc:70:e1:dd:4a:2a:85:39:ff:fe:54:00:cb:99:9f:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:28:2B:5A:07:6B:E5:50:14:0E:47:50:DF:03:E9:B6:AE:FB:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACA7401E60A011F0844E7FB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
75:30:ea:a2:26:06:02:01:6e:ee:10:f7:c8:3d:c8:9a:9b:af:
b4:bb:7a:9d:c3:15:fe:b7:03:5c:c6:e5:3e:45:a8:70:91:d2:
13:18:43:55:8b:cb:6d:75:b2:bd:bf:8c:6e:5c:02:20:3a:eb:
09:d0:73:e5:2f:4f:23:e7:21:9c:b7:5e:75:82:28:22:4a:95:
6b:7f:4a:4f:77:16:30:e5:4a:36:8e:6b:ad:e1:80:78:d6:5c:
09:4d:2b:f2:19:8a:8f:cf:25:cb:3c:00:4f:1d:fd:4f:4a:53:
32:5b:c2:0f:ab:1b:3a:c0:a5:5d:d1:63:44:76:14:9b:ed:0d:
45:2d:bb:35:40:54:f2:ce:5e:a0:22:8e:77:77:54:3b:bc:8a:
0a:11:69:43:6b:73:f8:13:32:33:59:7c:e6:9c:6c:18:95:a2:
9f:eb:10:7f:a2:44:1f:8a:2b:17:e4:47:ba:9d:71:64:44:51:
22:aa:fd:c2:c7:4f:c3:a6:ab:c7:11:1c:a1:f5:5b:87:07:e1:
08:5b:ea:ed:65:e2:e0:39:fb:49:c3:2e:15:0c:02:cc:70:72:
36:74:ad:e1:47:9c:cd:a9:ea:18:0b:be:5e:f9:c5:97:f7:32:
d6:16:3a:de:b4:10:66:9f:95:23:33:90:3c:14:c2:21:5c:23:
66:4c:83:97
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAWUYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE0MTA1MjQxWhcNMjUwNzI0MTA1MjQxWjAYMRYw
FAYDVQQDEw02ODc0ZTE3ZS02YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXxDRBCqy/km1dxTnH7zY6URHnSXW2/fd9Nv8Feh/CqkxRUhyP08OUF1
dnBdqaksD9iQFc/bPUr8PuHWJdWZpsFn9AYpuU9ndB7BACTB6nl9LXLkSi2ElpXT
LPsRsZ8uRUIhmNfz1AscAJg8YwRXaXWJpq9x3cIv3IEJZeDpJh7XGPlVptJrKBHu
AChewEDOcsrRG69KvRka77P2mdGp7lzx5sdcgpqlUXHEEdfeogluSxCHf4OYxXgQ
Z/u2nIXz+vxKm/DASb4jvq3UeGVTJQTvRY3Z8x0JxAeZwTj74ZI7Bm70NvR0jnjF
YdUorV7ccOHdSiqFOf/+VADLmZ+nRQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFKf7
KCtaB2vlUBQOR1DfA+m2rvtbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQ0E3NDAxRTYwQTAxMUYwODQ0RTdGQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDAwSc8AMEA5zwMDAMAwQBnPIK
AwQEnPIAMAsDAwGc9gMEAZz2EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOC
AQEAdTDqoiYGAgFu7hD3yD3ImpuvtLt6ncMV/rcDXMblPkWocJHSExhDVYvLbXWy
vb+MblwCIDrrCdBz5S9PI+chnLdedYIoIkqVa39KT3cWMOVKNo5rreGAeNZcCU0r
8hmKj88lyzwATx39T0pTMlvCD6sbOsClXdFjRHYUm+0NRS27NUBU8s5eoCKOd3dU
O7yKChFpQ2tz+BMyM1l85pxsGJWin+sQf6JEH4orF+RHup1xZERRIqr9wsdPw6ar
xxEcofVbhwfhCFvq7WXi4Dn7ScMuFQwCzHByNnSt4UeczanqGAu+XvnFl/cy1hY6
3rQQZp+VIzOQPBTCIVwjZkyDlw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:34 2025 by rpki-client