Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AEA6BC23C7311F0B0228EEADAE4EC9C.roa
File: 4AEA6BC23C7311F0B0228EEADAE4EC9C.roa (raw, json)
Hash identifier: rYTUZO0kq9O0H306Fgc4vqA7M6+Jfb3syQH7ct/2lA0=
Subject key identifier: 41:8B:07:1D:EA:45:03:8B:50:05:65:95:C2:C9:83:FC:11:DC:2E:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AEA6BC23C7311F0B0228EEADAE4EC9C.roa
Signing time: Thu 29 May 2025 09:57:13 +0000
ROA not before: Thu 29 May 2025 09:57:08 +0000
ROA not after: Sun 31 May 2026 09:57:08 +0000
asID: 212552
IP address blocks: 156.255.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88234 (0x158aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 09:57:08 2025 GMT
Not After : May 31 09:57:08 2026 GMT
Subject: CN=68382f79-a410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:0c:07:0b:62:9e:9d:bf:91:f0:10:05:94:
cb:6e:5b:a8:76:ed:8a:fa:44:e0:c6:d0:78:37:39:
1d:e2:1d:8a:2a:fd:4c:13:11:f5:43:2a:6f:68:ef:
82:20:28:59:6a:15:97:e2:4b:ef:e6:52:c3:c6:f9:
1a:af:ff:90:42:12:e6:29:86:f7:05:63:29:8d:bf:
03:31:cf:96:9a:65:ce:e4:b3:1e:3c:e5:1e:00:71:
a9:89:89:e4:1f:8e:67:17:9b:34:96:95:c2:0a:36:
1e:cd:76:48:80:af:81:48:49:af:fb:1e:98:86:93:
5e:ef:0f:dc:73:c9:ef:54:2d:41:d5:7c:a7:69:69:
cb:1e:1b:01:33:03:82:21:50:44:fa:bb:10:b1:1b:
b6:10:45:80:59:e4:91:3e:2e:e4:92:0d:c7:77:4e:
b9:e1:9f:58:bc:92:e3:2f:ed:8f:59:98:05:2c:a2:
2d:ed:24:67:56:55:92:20:73:fc:1b:b4:c6:29:34:
32:be:ab:06:d9:b5:10:14:e0:17:0b:ba:5d:ce:d4:
39:04:a2:11:7c:cb:97:a3:b4:69:73:4b:fe:72:c7:
fa:56:37:63:8b:49:a8:a3:1c:53:68:31:40:d4:9d:
42:56:b9:e9:3d:d7:06:f3:a8:92:5d:22:74:de:53:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:07:1D:EA:45:03:8B:50:05:65:95:C2:C9:83:FC:11:DC:2E:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AEA6BC23C7311F0B0228EEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.1.0/24
Signature Algorithm: sha256WithRSAEncryption
69:53:07:59:1e:4e:d9:a7:80:ee:3d:9c:2e:36:ac:dc:56:c0:
07:87:7c:5c:56:67:36:4a:36:ea:53:af:2b:e1:d0:3d:4f:82:
7a:37:92:f8:39:24:9c:b9:c4:fc:fc:91:ef:4a:2c:b5:19:71:
ec:6f:f5:32:2c:e6:11:2a:5f:cb:f2:fd:d6:49:93:c9:83:26:
10:d2:80:56:d2:77:be:81:1e:52:ea:1d:2b:44:16:80:e4:4a:
3b:d2:67:f0:c9:8b:ec:e2:6e:f1:0c:9a:0d:b6:8d:ff:8b:d4:
9b:c7:75:cb:74:ef:1b:d8:99:d5:66:46:7a:c3:1c:ef:f5:03:
82:28:b5:97:fb:29:2f:2f:60:0c:d3:33:72:00:99:12:8c:c2:
2d:9c:e2:f3:7b:10:ae:02:00:ce:6b:9f:5f:7b:6c:aa:0d:1d:
cc:dd:b7:d7:bf:fc:57:96:76:76:ed:c6:06:4a:e0:1a:be:6e:
57:4e:0c:62:0a:52:80:31:55:43:9f:d8:e5:7e:0c:16:fe:e5:
bc:a6:6a:43:f8:10:7d:25:43:c5:ec:ec:ca:81:d1:4b:3c:ee:
5c:e3:15:98:f5:32:70:44:96:97:4e:1f:ca:67:a2:0e:09:bc:
ba:25:db:e8:7d:42:54:47:5e:fd:7e:9e:10:32:8e:18:5c:55:
c8:d6:96:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAViqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI5MDk1NzA4WhcNMjYwNTMxMDk1NzA4WjAYMRYw
FAYDVQQDEw02ODM4MmY3OS1hNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy2wMBwtinp2/kfAQBZTLbluodu2K+kTgxtB4Nzkd4h2KKv1MExH1Qypv
aO+CIChZahWX4kvv5lLDxvkar/+QQhLmKYb3BWMpjb8DMc+WmmXO5LMePOUeAHGp
iYnkH45nF5s0lpXCCjYezXZIgK+BSEmv+x6YhpNe7w/cc8nvVC1B1XynaWnLHhsB
MwOCIVBE+rsQsRu2EEWAWeSRPi7kkg3Hd0654Z9YvJLjL+2PWZgFLKIt7SRnVlWS
IHP8G7TGKTQyvqsG2bUQFOAXC7pdztQ5BKIRfMuXo7Rpc0v+csf6Vjdji0mooxxT
aDFA1J1CVrnpPdcG86iSXSJ03lOBQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEGL
Bx3qRQOLUAVllcLJg/wR3C5IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QUVBNkJDMjNDNzMxMUYwQjAyMjhFRUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8BMA0GCSqGSIb3DQEBCwUA
A4IBAQBpUwdZHk7Zp4DuPZwuNqzcVsAHh3xcVmc2SjbqU68r4dA9T4J6N5L4OSSc
ucT8/JHvSiy1GXHsb/UyLOYRKl/L8v3WSZPJgyYQ0oBW0ne+gR5S6h0rRBaA5Eo7
0mfwyYvs4m7xDJoNto3/i9Sbx3XLdO8b2JnVZkZ6wxzv9QOCKLWX+ykvL2AM0zNy
AJkSjMItnOLzexCuAgDOa59fe2yqDR3M3bfXv/xXlnZ27cYGSuAavm5XTgxiClKA
MVVDn9jlfgwW/uW8pmpD+BB9JUPF7OzKgdFLPO5c4xWY9TJwRJaXTh/KZ6IOCby6
JdvofUJUR179fp4QMo4YXFXI1pYr
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:53 2025 by rpki-client