Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD3B55A590511F0944D4FCFDAE4EC9C.roa
File: 1CD3B55A590511F0944D4FCFDAE4EC9C.roa (raw, json)
Hash identifier: PMNdNYVXv39iHab0stEo2TJGah0YJAkrDg++wK3bhAQ=
Subject key identifier: 1E:83:9F:AC:3C:69:0D:71:B3:DD:6E:ED:B5:79:0A:BB:EE:5D:0D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01612E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD3B55A590511F0944D4FCFDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 18:31:35 +0000
ROA not before: Fri 04 Jul 2025 18:31:30 +0000
ROA not after: Fri 17 Jul 2026 18:31:30 +0000
asID: 398823
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90414 (0x1612e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 18:31:30 2025 GMT
Not After : Jul 17 18:31:30 2026 GMT
Subject: CN=68681e06-8d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:fd:4e:b3:79:f0:39:0d:da:6b:f0:32:b3:
a2:42:a5:3b:48:00:4c:14:8e:2c:3e:a0:be:e2:c5:
f4:6e:4d:27:70:04:07:c6:a6:50:69:44:25:16:07:
de:f8:9d:41:d6:d1:74:65:5a:bc:de:cf:53:2c:20:
5d:1d:85:e7:10:a7:26:f4:21:f2:7f:74:15:51:ac:
20:b6:0f:b9:72:85:fc:a5:39:2e:6e:17:3b:fc:4e:
fc:02:88:b8:1f:ee:a5:ad:7f:e8:e2:28:66:59:e2:
48:d0:3c:13:0b:e8:e5:54:53:44:ff:8d:9a:34:f5:
70:91:96:6a:80:b2:32:75:ea:1b:26:35:bd:31:15:
ac:3d:65:3c:3e:fa:40:44:52:e2:53:90:bc:0d:67:
89:f3:e8:91:7f:fc:07:71:0f:80:eb:9e:aa:3b:cc:
ca:7e:2d:83:0b:9d:ef:91:44:ce:79:a5:42:44:78:
5c:5d:68:dc:59:c0:d6:71:10:06:43:01:bc:1c:ad:
6a:ec:3b:75:9a:a9:0c:da:60:c1:a3:e7:c3:0f:26:
2a:09:eb:c0:81:d4:ed:9a:20:d0:8d:29:80:55:8d:
18:24:62:d5:4a:8a:37:97:3a:4b:1e:3d:81:cb:e5:
cc:62:65:19:c8:2f:10:a1:42:c9:3e:ba:17:0c:8b:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:83:9F:AC:3C:69:0D:71:B3:DD:6E:ED:B5:79:0A:BB:EE:5D:0D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD3B55A590511F0944D4FCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
b7:09:11:81:6a:2a:15:ee:0a:1d:d8:52:30:08:e7:d5:36:92:
06:d7:bf:20:4f:54:76:6d:ae:57:2d:f5:13:65:96:4f:75:84:
fd:c5:bf:46:8f:87:dc:1e:64:aa:5c:ea:60:86:f9:7a:59:35:
47:30:8b:32:04:5c:1d:71:4b:04:e8:d2:a7:6e:ab:09:4a:49:
3b:81:81:0e:a6:97:3f:a1:95:67:98:f6:e9:23:c2:66:a8:49:
57:7f:4d:22:ed:25:38:89:a4:4d:46:41:a4:82:2d:bb:15:82:
ce:fc:fa:47:33:da:be:9e:e6:e6:76:12:22:eb:a5:37:e1:31:
fc:37:e2:0a:93:89:de:26:0a:81:c2:8c:79:e5:2b:e4:07:c0:
6f:a7:31:09:6e:c8:f9:ce:9f:04:af:52:59:a1:bd:e4:df:fd:
84:91:e3:73:78:b3:20:d3:58:ac:06:ad:b8:f8:e2:e6:24:f5:
6a:ac:2c:2d:2c:c4:da:77:cd:34:43:2d:18:17:60:08:17:41:
4b:85:bb:6d:f8:96:ff:47:35:4b:a8:2b:5d:24:0a:95:6a:32:
46:3a:4d:75:89:86:4c:58:7a:c7:bf:69:c5:56:61:fb:85:8c:
60:0b:2c:cd:4f:55:94:92:02:6f:61:9d:8d:7b:52:a0:b8:81:
34:74:8a:f5
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAWEuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA0MTgzMTMwWhcNMjYwNzE3MTgzMTMwWjAYMRYw
FAYDVQQDEw02ODY4MWUwNi04ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsAL9TrN58DkN2mvwMrOiQqU7SABMFI4sPqC+4sX0bk0ncAQHxqZQaUQl
Fgfe+J1B1tF0ZVq83s9TLCBdHYXnEKcm9CHyf3QVUawgtg+5coX8pTkubhc7/E78
Aoi4H+6lrX/o4ihmWeJI0DwTC+jlVFNE/42aNPVwkZZqgLIydeobJjW9MRWsPWU8
PvpARFLiU5C8DWeJ8+iRf/wHcQ+A656qO8zKfi2DC53vkUTOeaVCRHhcXWjcWcDW
cRAGQwG8HK1q7Dt1mqkM2mDBo+fDDyYqCevAgdTtmiDQjSmAVY0YJGLVSoo3lzpL
Hj2By+XMYmUZyC8QoULJProXDIt5dQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFB6D
n6w8aQ1xs91u7bV5CrvuXQ09MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQ0QzQjU1QTU5MDUxMUYwOTQ0RDRGQ0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQFnOOgMAwDBASc5bADBAWc5cAD
BAac9UADBAWc/GAwDAMEBJz8kAMEBJz8oDANBgkqhkiG9w0BAQsFAAOCAQEAtwkR
gWoqFe4KHdhSMAjn1TaSBte/IE9Udm2uVy31E2WWT3WE/cW/Ro+H3B5kqlzqYIb5
elk1RzCLMgRcHXFLBOjSp26rCUpJO4GBDqaXP6GVZ5j26SPCZqhJV39NIu0lOImk
TUZBpIItuxWCzvz6RzPavp7m5nYSIuulN+Ex/DfiCpOJ3iYKgcKMeeUr5AfAb6cx
CW7I+c6fBK9SWaG95N/9hJHjc3izINNYrAatuPji5iT1aqwsLSzE2nfNNEMtGBdg
CBdBS4W7bfiW/0c1S6grXSQKlWoyRjpNdYmGTFh6x79pxVZh+4WMYAsszU9VlJIC
b2GdjXtSoLiBNHSK9Q==
-----END CERTIFICATE-----
Generated at Mon Jul 7 04:00:33 2025 by rpki-client