Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B0ADCED58B11EF950D4E45762E951A.roa
File: 03B0ADCED58B11EF950D4E45762E951A.roa (raw, json)
Hash identifier: sXBlDmioHjZRIBcjP1ozSQRKZ1VwRPqbgJ9RswuJT5k=
Subject key identifier: 0C:29:6F:04:66:84:1B:18:BC:66:74:B4:EE:09:C4:B4:AE:EC:C0:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B0ADCED58B11EF950D4E45762E951A.roa
Signing time: Sat 18 Jan 2025 10:57:31 +0000
ROA not before: Sat 18 Jan 2025 10:57:27 +0000
ROA not after: Thu 22 Jan 2026 10:57:27 +0000
asID: 63199
IP address blocks: 156.225.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68497 (0x10b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 10:57:27 2025 GMT
Not After : Jan 22 10:57:27 2026 GMT
Subject: CN=678b891b-2d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:27:26:15:57:8c:3b:01:2c:16:e3:5f:da:
b6:99:02:c0:47:52:be:ad:5d:47:ef:a0:ac:8e:ef:
8c:5c:cc:d6:20:48:7d:bb:d4:7b:21:0c:56:9c:66:
b8:be:d3:3d:fc:c5:22:98:e0:c3:68:4f:60:3d:58:
b0:aa:ab:8d:c5:58:2d:df:3c:07:b3:af:d6:91:a0:
79:5f:f4:b2:93:36:89:7b:65:64:4a:0d:04:4c:35:
0d:56:e5:d0:37:01:b6:44:e9:b9:7c:81:b3:da:ac:
3e:a8:a5:00:9f:ad:86:44:c7:95:cc:c7:9b:4d:93:
28:63:a5:dc:ba:09:5e:13:cf:10:b7:87:5f:a3:e4:
b4:d8:3c:c2:82:96:15:06:ec:e8:81:0e:78:49:6a:
07:ce:7c:a8:19:6d:d1:25:93:ee:a6:c3:a3:b4:74:
a1:fd:c2:d5:35:60:c4:e5:21:3a:7d:ce:24:8f:49:
7a:e5:12:b5:35:b5:4f:c5:14:aa:a4:57:10:81:28:
34:02:ce:a4:09:1d:f6:1f:c4:a8:b8:92:b7:e2:4d:
8f:b3:e7:53:41:e2:18:8c:f4:55:a1:f5:6b:61:83:
1a:f0:53:d9:1e:ab:a0:49:cf:f2:63:ff:ab:7a:a1:
b6:c3:05:82:a6:21:87:79:53:cc:e7:54:a4:af:db:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:6F:04:66:84:1B:18:BC:66:74:B4:EE:09:C4:B4:AE:EC:C0:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B0ADCED58B11EF950D4E45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:be:90:d0:e3:2b:03:6f:21:44:68:99:88:fc:f6:0a:56:5e:
7f:ff:57:7e:43:6d:3a:ff:7b:57:6a:36:b8:9a:a8:2f:ed:2d:
d0:ec:ec:77:db:4f:87:f8:71:e9:cb:34:98:e6:d3:1f:fa:ed:
7f:0b:d0:0b:c6:af:36:6c:39:93:70:80:d3:f0:82:3e:83:53:
ca:de:da:98:77:43:81:f1:3d:e6:00:4f:94:a2:e5:17:66:5f:
fc:19:a6:4e:9f:74:6f:78:d2:0d:c9:4a:cb:69:7a:91:7e:79:
90:c7:6e:bd:c0:72:27:fb:38:20:17:36:2f:56:81:36:42:e9:
ad:61:58:4c:97:88:e0:f7:b8:8e:5d:a7:b0:c4:a2:a8:c1:71:
c0:0e:0a:d5:e6:99:d1:58:50:d8:2c:63:1e:a2:d3:82:a4:89:
ca:77:7a:7e:79:24:83:3b:29:d9:70:3a:b0:c0:77:c5:ef:64:
d1:4e:1a:b5:82:46:db:89:82:fa:a9:05:58:88:28:4b:e3:8b:
66:e7:ad:ec:f5:96:fe:8a:29:66:94:98:c6:9f:1f:6b:1d:b6:
52:9f:f0:bc:9f:ce:9a:88:10:6f:37:7a:d9:4b:91:4d:60:7e:
78:14:96:22:c7:23:96:6f:5b:52:e1:08:ad:a7:f0:e9:38:ba:
7c:a1:e4:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQuRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MTA1NzI3WhcNMjYwMTIyMTA1NzI3WjAYMRYw
FAYDVQQDEw02NzhiODkxYi0yZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Q0nJhVXjDsBLBbjX9q2mQLAR1K+rV1H76Csju+MXMzWIEh9u9R7IQxW
nGa4vtM9/MUimODDaE9gPViwqquNxVgt3zwHs6/WkaB5X/SykzaJe2VkSg0ETDUN
VuXQNwG2ROm5fIGz2qw+qKUAn62GRMeVzMebTZMoY6XcugleE88Qt4dfo+S02DzC
gpYVBuzogQ54SWoHznyoGW3RJZPupsOjtHSh/cLVNWDE5SE6fc4kj0l65RK1NbVP
xRSqpFcQgSg0As6kCR32H8SouJK34k2Ps+dTQeIYjPRVofVrYYMa8FPZHqugSc/y
Y/+reqG2wwWCpiGHeVPM51Skr9vV9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAwp
bwRmhBsYvGZ0tO4JxLSu7MDoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wM0IwQURDRUQ1OEIxMUVGOTUwRDRFNDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOFKMA0GCSqGSIb3DQEBCwUA
A4IBAQAuvpDQ4ysDbyFEaJmI/PYKVl5//1d+Q206/3tXaja4mqgv7S3Q7Ox320+H
+HHpyzSY5tMf+u1/C9ALxq82bDmTcIDT8II+g1PK3tqYd0OB8T3mAE+UouUXZl/8
GaZOn3RveNINyUrLaXqRfnmQx269wHIn+zggFzYvVoE2QumtYVhMl4jg97iOXaew
xKKowXHADgrV5pnRWFDYLGMeotOCpInKd3p+eSSDOynZcDqwwHfF72TRThq1gkbb
iYL6qQVYiChL44tm563s9Zb+iilmlJjGnx9rHbZSn/C8n86aiBBvN3rZS5FNYH54
FJYixyOWb1tS4Qitp/DpOLp8oeTp
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client