Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/116524B43C7311F0AE1B88E8DAE4EC9C.roa
File: 116524B43C7311F0AE1B88E8DAE4EC9C.roa (raw, json)
Hash identifier: v4ru1+sXPTZurbBNzNwMqFOZDAVZCuOocf3EiU35KAU=
Subject key identifier: 0E:4B:B8:47:CD:D7:CD:16:95:F6:41:7F:C5:1D:06:A8:40:DB:21:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/116524B43C7311F0AE1B88E8DAE4EC9C.roa
Signing time: Thu 29 May 2025 09:55:36 +0000
ROA not before: Thu 29 May 2025 09:55:31 +0000
ROA not after: Thu 14 May 2026 09:55:31 +0000
asID: 215071
IP address blocks: 156.226.5.0/24 maxlen: 24
156.227.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88232 (0x158a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 09:55:31 2025 GMT
Not After : May 14 09:55:31 2026 GMT
Subject: CN=68382f18-8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:aa:f8:75:12:bf:a8:83:ef:5a:bd:08:8b:
89:a8:8c:e3:6c:4d:d2:3f:77:03:f1:7e:de:76:6c:
17:7e:61:39:51:5a:9b:83:11:e5:d2:3b:1f:59:c3:
32:03:32:a6:62:b4:f8:aa:c2:2b:a5:48:12:4c:c9:
24:ba:7a:1e:90:e4:a1:1a:8a:45:75:bc:e6:4e:58:
cd:5c:1d:8d:ae:d1:df:75:8a:7f:85:d8:30:d9:2a:
a5:95:32:27:44:d5:c8:a3:ab:b4:d3:4e:58:ac:b0:
0c:35:ff:fd:e4:0f:7f:e8:ee:23:c0:c1:ee:6b:bf:
5d:c0:02:bd:9c:03:2d:63:a0:2b:ad:2f:30:a3:49:
59:4b:46:75:55:60:8f:9a:64:11:70:61:ff:83:16:
11:21:c6:7c:c5:d4:77:fd:e5:c9:cd:89:2e:bc:5c:
40:ea:fa:1f:0d:82:f2:d0:7b:e2:ee:73:44:62:76:
a8:d2:65:05:26:3f:45:37:6d:70:6b:69:bf:22:f5:
ed:cd:83:51:a6:0b:ec:90:0e:c7:66:2b:1e:74:9e:
f5:d2:20:ff:60:3e:02:f3:c9:78:8f:e9:2c:5d:e0:
9b:ea:b7:5f:be:78:bf:10:5b:ff:a5:f0:4d:a9:e1:
2b:36:23:ee:a1:29:b4:b4:00:7a:27:4e:0d:dd:9d:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:B8:47:CD:D7:CD:16:95:F6:41:7F:C5:1D:06:A8:40:DB:21:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/116524B43C7311F0AE1B88E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.5.0/24
156.227.5.0/24
Signature Algorithm: sha256WithRSAEncryption
93:27:2e:4a:52:6b:3e:6e:91:14:ef:f1:25:7f:03:f7:37:76:
ca:e3:3b:73:9b:8b:c2:8b:fc:9d:91:24:24:2e:33:ff:ab:68:
03:11:5a:1a:e7:e3:b1:1a:6b:2b:55:95:82:50:9b:a5:07:67:
7e:85:7c:df:5e:8d:43:01:61:69:96:e0:d4:94:ff:9e:8a:f6:
c8:46:36:b2:2f:49:4c:73:ed:76:56:51:1f:ae:29:d0:c1:16:
01:b7:ab:54:1e:c3:14:01:42:83:e0:7d:f7:35:27:d1:af:2a:
5f:0b:cc:1f:ea:27:c7:ff:76:f0:34:1e:85:b3:55:cf:cb:36:
b1:c9:22:1a:2d:e3:e1:24:b3:70:ca:32:d7:61:50:0b:b1:62:
94:79:3d:cf:72:c5:ae:93:12:30:1b:04:e9:11:c8:c6:63:ae:
d0:27:ae:fa:b5:04:18:18:b3:fe:56:40:90:dd:46:49:b0:91:
cd:db:34:31:7f:b7:73:61:b0:49:66:22:04:74:77:56:53:7e:
b1:e2:ca:97:dc:dd:af:61:6b:2c:01:fc:3e:68:59:b5:13:2e:
96:39:9e:db:55:e9:d5:cf:3e:3c:41:10:09:05:f7:50:80:f9:
95:d0:21:bf:61:40:90:4d:2c:cc:d8:c3:7a:5d:5f:2f:f3:83:
48:2e:a7:31
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVioMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI5MDk1NTMxWhcNMjYwNTE0MDk1NTMxWjAYMRYw
FAYDVQQDEw02ODM4MmYxOC04YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy7aq+HUSv6iD71q9CIuJqIzjbE3SP3cD8X7edmwXfmE5UVqbgxHl0jsf
WcMyAzKmYrT4qsIrpUgSTMkkunoekOShGopFdbzmTljNXB2NrtHfdYp/hdgw2Sql
lTInRNXIo6u0005YrLAMNf/95A9/6O4jwMHua79dwAK9nAMtY6ArrS8wo0lZS0Z1
VWCPmmQRcGH/gxYRIcZ8xdR3/eXJzYkuvFxA6vofDYLy0Hvi7nNEYnao0mUFJj9F
N21wa2m/IvXtzYNRpgvskA7HZisedJ710iD/YD4C88l4j+ksXeCb6rdfvni/EFv/
pfBNqeErNiPuoSm0tAB6J04N3Z15IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5L
uEfN180WlfZBf8UdBqhA2yFyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMTY1MjRCNDNDNzMxMUYwQUUxQjg4RThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOIFAwQAnOMFMA0GCSqGSIb3
DQEBCwUAA4IBAQCTJy5KUms+bpEU7/ElfwP3N3bK4ztzm4vCi/ydkSQkLjP/q2gD
EVoa5+OxGmsrVZWCUJulB2d+hXzfXo1DAWFpluDUlP+eivbIRjayL0lMc+12VlEf
rinQwRYBt6tUHsMUAUKD4H33NSfRrypfC8wf6ifH/3bwNB6Fs1XPyzaxySIaLePh
JLNwyjLXYVALsWKUeT3PcsWukxIwGwTpEcjGY67QJ676tQQYGLP+VkCQ3UZJsJHN
2zQxf7dzYbBJZiIEdHdWU36x4sqX3N2vYWssAfw+aFm1Ey6WOZ7bVenVzz48QRAJ
BfdQgPmV0CG/YUCQTSzM2MN6XV8v84NILqcx
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:18 2025 by rpki-client