Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08240F0037E111F0AF3FB3A3DAE4EC9C.roa
File: 08240F0037E111F0AF3FB3A3DAE4EC9C.roa (raw, json)
Hash identifier: H4wLxdEfV/lvZj0vhBgCRUxshBeUB0HIVRlS6rQvA5o=
Subject key identifier: 9B:09:20:7B:BF:3E:35:72:82:FC:F2:94:58:B4:F2:B5:1D:79:2D:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08240F0037E111F0AF3FB3A3DAE4EC9C.roa
Signing time: Fri 23 May 2025 14:20:10 +0000
ROA not before: Fri 23 May 2025 14:20:05 +0000
ROA not after: Sun 29 Jun 2025 14:20:05 +0000
asID: 5068
IP address blocks: 156.245.192.0/24 maxlen: 24
156.245.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 12:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87789 (0x156ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 14:20:05 2025 GMT
Not After : Jun 29 14:20:05 2025 GMT
Subject: CN=68308419-05a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:a0:90:51:6a:7d:9a:15:55:35:38:ec:8b:
87:f2:d6:32:94:cd:5d:7d:1e:49:9d:3b:63:c9:b1:
07:f3:13:e0:b2:bf:23:0e:4d:ab:c3:cd:c4:46:2c:
7c:5a:23:ee:73:7d:56:1c:61:59:11:17:2b:5b:54:
f9:78:5a:3f:6d:e8:2c:07:b3:6e:e7:5e:74:37:a6:
44:da:22:c4:ad:04:05:55:03:86:65:6b:56:f9:e0:
15:5e:a4:15:3c:4c:03:af:85:45:99:08:9d:ba:58:
9b:17:3f:15:f2:a0:3b:06:6e:fd:04:3f:1a:d7:20:
f5:4a:33:86:f6:27:88:05:e5:64:c8:52:49:36:1d:
15:54:4a:50:20:72:ab:af:35:79:74:8f:9c:38:f3:
93:a4:dd:48:20:49:af:6d:63:29:c8:8f:29:1c:bd:
64:4c:42:cc:9b:45:b5:84:0c:77:5b:d9:8a:c2:91:
4c:d0:74:06:c9:a8:c7:fe:85:28:fe:e8:98:cc:c8:
c5:00:8f:01:af:ee:29:ab:89:f5:92:b3:a8:36:91:
0f:8c:16:d7:dd:44:69:ac:a2:51:e5:e4:e9:7b:ed:
a3:9a:d7:3a:0b:25:5c:dd:71:41:4a:c6:16:c2:fb:
c8:fc:70:ff:85:f6:9d:2d:81:a6:e9:3d:1f:7f:d5:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:20:7B:BF:3E:35:72:82:FC:F2:94:58:B4:F2:B5:1D:79:2D:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08240F0037E111F0AF3FB3A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.192.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:38:1b:8f:d8:3d:dc:d6:44:c7:2e:84:b2:cd:14:fc:6e:39:
58:3d:aa:f5:f3:06:31:37:71:28:cb:01:1b:10:15:c4:fa:c2:
21:79:ca:a0:ac:3d:47:33:c4:39:1e:1e:0e:9e:9b:7b:45:71:
a1:2b:c4:a0:79:a1:25:7d:b7:4a:9b:0c:64:17:37:94:9f:96:
1d:70:b6:b2:6b:1b:29:53:17:e9:a7:e2:9b:6d:92:33:12:eb:
6b:5f:37:62:d1:2b:81:ce:b3:0c:cc:0a:41:b6:91:94:27:ba:
8a:84:c2:a7:35:66:c8:6d:fa:7f:ce:3e:81:02:73:65:85:17:
51:7e:e6:81:4e:d3:da:84:9c:71:db:9c:63:52:dc:b2:07:97:
a8:22:42:7b:74:eb:81:e3:d8:53:c7:f7:fd:06:ca:45:b3:22:
41:4a:f4:8b:73:ea:92:96:04:d6:8d:09:b5:ee:b6:44:54:68:
43:c1:1b:53:c9:2f:82:1f:3e:ab:0c:9a:dd:28:ff:21:fb:b2:
8f:54:61:84:b5:00:15:17:ec:62:35:13:7b:29:bc:78:74:09:
07:a6:d8:ea:29:52:91:09:5f:bb:70:80:61:85:d4:80:ce:8c:
57:e4:0b:40:51:b9:1c:ed:c0:d9:bc:2c:bc:15:00:03:53:5a:
25:5a:db:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVbtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIzMTQyMDA1WhcNMjUwNjI5MTQyMDA1WjAYMRYw
FAYDVQQDEw02ODMwODQxOS0wNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxNKgkFFqfZoVVTU47IuH8tYylM1dfR5JnTtjybEH8xPgsr8jDk2rw83E
Rix8WiPuc31WHGFZERcrW1T5eFo/begsB7Nu5150N6ZE2iLErQQFVQOGZWtW+eAV
XqQVPEwDr4VFmQidulibFz8V8qA7Bm79BD8a1yD1SjOG9ieIBeVkyFJJNh0VVEpQ
IHKrrzV5dI+cOPOTpN1IIEmvbWMpyI8pHL1kTELMm0W1hAx3W9mKwpFM0HQGyajH
/oUo/uiYzMjFAI8Br+4pq4n1krOoNpEPjBbX3URprKJR5eTpe+2jmtc6CyVc3XFB
SsYWwvvI/HD/hfadLYGm6T0ff9VI/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJsJ
IHu/PjVygvzylFi08rUdeS1vMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODI0MEYwMDM3RTExMUYwQUYzRkIzQTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPXAMA0GCSqGSIb3DQEBCwUA
A4IBAQCmOBuP2D3c1kTHLoSyzRT8bjlYPar18wYxN3EoywEbEBXE+sIhecqgrD1H
M8Q5Hh4Onpt7RXGhK8SgeaElfbdKmwxkFzeUn5YdcLayaxspUxfpp+KbbZIzEutr
Xzdi0SuBzrMMzApBtpGUJ7qKhMKnNWbIbfp/zj6BAnNlhRdRfuaBTtPahJxx25xj
UtyyB5eoIkJ7dOuB49hTx/f9BspFsyJBSvSLc+qSlgTWjQm17rZEVGhDwRtTyS+C
Hz6rDJrdKP8h+7KPVGGEtQAVF+xiNRN7Kbx4dAkHptjqKVKRCV+7cIBhhdSAzoxX
5AtAUbkc7cDZvCy8FQADU1olWtsv
-----END CERTIFICATE-----
Generated at Thu Jun 5 02:03:33 2025 by rpki-client