Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33255485A9D11F0B427B4B0DAE4EC9C.roa
File: C33255485A9D11F0B427B4B0DAE4EC9C.roa (raw, json)
Hash identifier: YX+uEU15YMNEK1rOMcdPFjEhF2SIVZwusZF83GBmWK4=
Subject key identifier: 3B:01:35:80:6E:F7:36:E3:9A:2B:60:7A:0C:57:45:70:A8:DF:67:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01627D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33255485A9D11F0B427B4B0DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 19:16:48 +0000
ROA not before: Sun 06 Jul 2025 19:16:44 +0000
ROA not after: Fri 17 Jul 2026 19:16:44 +0000
asID: 18013
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.241.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90749 (0x1627d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 19:16:44 2025 GMT
Not After : Jul 17 19:16:44 2026 GMT
Subject: CN=686acba0-b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:8d:94:03:7c:bd:a5:0f:4d:fd:87:1a:58:
8c:ad:40:8f:e6:cb:be:81:23:83:fa:e7:5d:ae:86:
77:0c:ec:22:1c:3e:20:a6:b6:98:a1:f0:d1:78:8d:
4b:5c:36:e5:63:8f:53:c1:be:7d:46:c9:89:78:88:
33:a8:84:45:67:87:a3:7f:3b:18:72:2b:8c:a8:be:
10:d7:8d:dd:77:51:72:2d:d7:3a:c7:de:aa:fb:7d:
eb:18:5d:73:7b:bf:4f:51:bb:84:a8:1e:1a:81:62:
ff:d6:aa:65:87:ce:85:44:f3:7c:7a:92:de:78:fc:
26:dc:5c:b6:62:9d:20:2f:f0:b7:ee:6b:49:73:b1:
04:90:fa:81:df:04:69:d4:da:4f:7d:40:a4:52:32:
95:b3:81:99:f9:cb:19:5e:64:87:0e:c0:61:17:34:
5f:4e:d2:2a:2b:96:c6:14:26:48:e9:d3:e9:fc:14:
fd:b9:45:49:a1:7d:ec:a3:7c:83:2b:51:5a:ff:44:
bc:33:6d:25:4b:79:90:e6:f6:87:57:ee:0f:72:4a:
8a:78:4c:93:29:ef:38:07:a6:66:af:0f:3b:6f:d8:
e4:ef:60:b4:ee:da:c1:00:ee:55:85:23:40:31:ff:
db:ec:4e:dc:25:a4:b0:ca:81:7a:20:79:25:c7:f2:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:35:80:6E:F7:36:E3:9A:2B:60:7A:0C:57:45:70:A8:DF:67:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33255485A9D11F0B427B4B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
56:b4:c4:bf:91:f2:53:4b:49:c8:65:35:11:f4:e3:4f:0f:33:
52:30:d1:ac:55:11:56:0f:f5:ca:97:bb:bf:4a:9b:60:56:1a:
0e:a0:2e:c2:ee:7b:e1:33:a8:e6:95:76:02:db:05:d4:bc:fb:
5f:5c:ce:49:e9:c6:07:a9:35:24:d7:91:29:59:a2:68:f8:00:
b9:9c:87:a1:a2:8b:50:21:82:3e:29:50:9e:f0:44:4c:96:9d:
09:56:dd:f8:a5:36:28:c6:9f:0c:a5:d9:cd:64:b5:d2:7c:3d:
41:87:c8:05:57:0b:b7:90:f3:3a:72:d2:c8:82:ca:7f:b6:90:
77:9f:19:e0:d8:6b:07:41:87:43:a2:d4:79:f5:a0:e5:28:2e:
c3:f2:de:4c:3c:5d:2f:f8:04:7a:3b:55:4f:2e:83:25:63:a6:
64:1c:98:33:84:22:25:80:24:eb:8c:b8:db:67:27:3a:fe:b9:
c0:9d:ea:d7:ce:a5:83:2f:02:9e:b7:ea:24:09:cc:0c:57:ce:
fe:ec:e5:9d:ab:93:6a:1c:d8:57:72:27:69:8e:8d:11:2e:b0:
dc:30:43:13:f4:00:00:9f:35:aa:ab:cf:4d:72:83:c8:1f:b3:
04:03:fc:a8:44:56:8f:68:5b:16:9c:e2:7d:54:49:c4:99:83:
87:2c:82:98
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAWJ9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTkxNjQ0WhcNMjYwNzE3MTkxNjQ0WjAYMRYw
FAYDVQQDEw02ODZhY2JhMC1iOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvYKNlAN8vaUPTf2HGliMrUCP5su+gSOD+uddroZ3DOwiHD4gpraYofDR
eI1LXDblY49Twb59RsmJeIgzqIRFZ4ejfzsYciuMqL4Q143dd1FyLdc6x96q+33r
GF1ze79PUbuEqB4agWL/1qplh86FRPN8epLeePwm3Fy2Yp0gL/C37mtJc7EEkPqB
3wRp1NpPfUCkUjKVs4GZ+csZXmSHDsBhFzRfTtIqK5bGFCZI6dPp/BT9uUVJoX3s
o3yDK1Fa/0S8M20lS3mQ5vaHV+4PckqKeEyTKe84B6Zmrw87b9jk72C07trBAO5V
hSNAMf/b7E7cJaSwyoF6IHklx/Lv8wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDsB
NYBu9zbjmitgegxXRXCo32cXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzMyNTU0ODVBOUQxMUYwQjQyN0I0QjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOc7xgDBAGc7zQDBAac8YAw
DQYJKoZIhvcNAQELBQADggEBAFa0xL+R8lNLSchlNRH0408PM1Iw0axVEVYP9cqX
u79Km2BWGg6gLsLue+EzqOaVdgLbBdS8+19czknpxgepNSTXkSlZomj4ALmch6Gi
i1Ahgj4pUJ7wREyWnQlW3filNijGnwyl2c1ktdJ8PUGHyAVXC7eQ8zpy0siCyn+2
kHefGeDYawdBh0Oi1Hn1oOUoLsPy3kw8XS/4BHo7VU8ugyVjpmQcmDOEIiWAJOuM
uNtnJzr+ucCd6tfOpYMvAp636iQJzAxXzv7s5Z2rk2oc2FdyJ2mOjREusNwwQxP0
AACfNaqrz01yg8gfswQD/KhEVo9oWxac4n1UScSZg4csgpg=
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:50 2025 by rpki-client