Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ACFF5A3ADB11F09386998CDAE4EC9C.roa
File: 14ACFF5A3ADB11F09386998CDAE4EC9C.roa (raw, json)
Hash identifier: 8bMl5OXkP5hW9d+x5TN4cR9THQemOW/VlJ0FDUCWJYc=
Subject key identifier: 2A:32:CD:3F:5B:2A:2E:F6:B8:92:02:43:42:98:BD:ED:46:FC:2F:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0157D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ACFF5A3ADB11F09386998CDAE4EC9C.roa
Signing time: Tue 27 May 2025 09:15:07 +0000
ROA not before: Tue 27 May 2025 09:15:02 +0000
ROA not after: Mon 30 Jun 2025 09:15:02 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88018 (0x157d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 09:15:02 2025 GMT
Not After : Jun 30 09:15:02 2025 GMT
Subject: CN=6835829b-abb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:80:db:54:49:de:89:95:fe:25:b0:ff:e7:
f4:b2:1a:1e:9a:35:d1:2f:5c:10:af:d3:53:ca:76:
f1:41:c3:2e:7f:47:0b:24:02:5f:28:60:65:5a:27:
a8:1b:00:fa:96:1c:d8:20:51:02:9b:ce:77:d6:bc:
13:6b:a8:f2:4a:d3:b4:b1:c8:45:68:4e:a7:d4:3d:
f9:3c:6a:07:0c:08:30:64:44:d2:d6:4a:36:7f:8b:
90:2b:f9:da:7b:89:cd:fb:a2:04:bb:4b:d3:ca:75:
55:03:d2:5b:ff:60:79:c8:10:e3:04:97:e5:17:55:
a0:a9:69:49:15:1d:38:51:0b:fb:d5:37:c7:13:63:
8e:54:50:30:e3:6b:1d:26:ca:66:48:23:a4:8f:42:
e7:51:22:77:18:09:b7:bf:c0:5a:99:f2:e9:71:99:
08:ee:ab:f2:25:39:a6:0c:9f:69:c9:ce:37:b2:fc:
6f:2a:1d:db:8a:e3:cd:80:f2:ea:79:47:7a:6f:7a:
3f:7f:91:a1:d4:4c:4b:57:c2:cc:f5:0f:16:2a:63:
4c:93:a8:1e:a7:2f:2e:0b:0f:86:77:5d:5f:13:60:
e3:af:9a:f0:1b:36:42:43:df:a1:67:48:34:de:61:
65:7f:17:18:0d:8a:52:95:0b:de:81:c3:ed:00:78:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:CD:3F:5B:2A:2E:F6:B8:92:02:43:42:98:BD:ED:46:FC:2F:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ACFF5A3ADB11F09386998CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
90:5d:14:cc:f2:f5:58:8a:ce:91:d4:69:6e:5c:9e:41:39:b0:
12:a6:ba:58:0b:e6:76:2c:56:f9:2b:c2:71:64:b8:3e:f5:21:
a8:20:6e:1e:b8:5e:70:16:72:c9:04:64:fc:1e:93:99:b9:47:
bd:6a:ce:a0:ae:9b:2f:f3:c3:7d:17:d9:dc:c4:e2:d6:6b:a3:
1f:12:07:74:68:f6:15:cd:d2:7f:98:0e:0a:88:78:a2:b8:93:
d8:31:bc:34:ff:06:55:77:1c:5c:8d:0b:02:55:de:27:93:f9:
da:e8:84:53:89:df:8e:8e:40:a7:9e:e0:11:6b:6e:7e:3f:7f:
15:55:98:c8:29:1e:0b:87:10:b4:52:07:c7:9e:1c:53:ab:71:
46:61:35:08:27:14:a0:25:54:bd:f5:36:ec:23:46:e2:46:f8:
87:31:4e:e7:d8:88:2f:82:ae:91:4a:05:0e:b0:66:02:a4:81:
8c:d9:a1:7b:ca:38:0a:d4:18:7c:b4:f0:7d:72:e6:92:7a:fc:
f3:d5:fa:3d:b6:bf:b5:9d:b5:f4:45:82:43:50:55:c4:36:b0:
13:c8:8f:8c:a5:4d:27:16:37:88:7c:d6:d4:6b:a7:70:42:17:
79:38:02:20:10:9c:cb:c3:41:73:03:0d:b0:a3:fe:a1:d8:55:
66:63:27:1c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVfSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI3MDkxNTAyWhcNMjUwNjMwMDkxNTAyWjAYMRYw
FAYDVQQDEw02ODM1ODI5Yi1hYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3dGA21RJ3omV/iWw/+f0shoemjXRL1wQr9NTynbxQcMuf0cLJAJfKGBl
WieoGwD6lhzYIFECm8531rwTa6jyStO0schFaE6n1D35PGoHDAgwZETS1ko2f4uQ
K/nae4nN+6IEu0vTynVVA9Jb/2B5yBDjBJflF1WgqWlJFR04UQv71TfHE2OOVFAw
42sdJspmSCOkj0LnUSJ3GAm3v8BamfLpcZkI7qvyJTmmDJ9pyc43svxvKh3biuPN
gPLqeUd6b3o/f5Gh1ExLV8LM9Q8WKmNMk6gepy8uCw+Gd11fE2Djr5rwGzZCQ9+h
Z0g03mFlfxcYDYpSlQvegcPtAHhVTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCoy
zT9bKi72uJICQ0KYve1G/C8KMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEFDRkY1QTNBREIxMUYwOTM4Njk5OENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQCQXRTM8vVYis6R1GluXJ5BObASprpYC+Z2LFb5K8JxZLg+9SGoIG4euF5w
FnLJBGT8HpOZuUe9as6grpsv88N9F9ncxOLWa6MfEgd0aPYVzdJ/mA4KiHiiuJPY
Mbw0/wZVdxxcjQsCVd4nk/na6IRTid+OjkCnnuARa25+P38VVZjIKR4LhxC0UgfH
nhxTq3FGYTUIJxSgJVS99TbsI0biRviHMU7n2Igvgq6RSgUOsGYCpIGM2aF7yjgK
1Bh8tPB9cuaSevzz1fo9tr+1nbX0RYJDUFXENrATyI+MpU0nFjeIfNbUa6dwQhd5
OAIgEJzLw0FzAw2wo/6h2FVmYycc
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:17 2025 by rpki-client