Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF83A00094511F0B2E6395F762E951A.roa
File: 4BF83A00094511F0B2E6395F762E951A.roa (raw, json)
Hash identifier: Wk7xhnHAoASAdB1vs9mUHKPWaQ+id9Ni5oRjMuZnBHI=
Subject key identifier: BF:E8:5F:AC:FF:06:F3:A3:A2:E5:50:24:9F:27:55:A3:4B:DB:B3:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF83A00094511F0B2E6395F762E951A.roa
Signing time: Tue 25 Mar 2025 06:49:28 +0000
ROA not before: Tue 25 Mar 2025 06:49:24 +0000
ROA not after: Wed 02 Apr 2025 06:49:24 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83935 (0x147df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 06:49:24 2025 GMT
Not After : Apr 2 06:49:24 2025 GMT
Subject: CN=67e251f8-5106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:24:5f:89:d8:dd:45:84:05:c5:b7:84:4d:
74:a8:f2:7f:75:e4:9d:5d:ff:08:90:4b:dc:c5:da:
08:36:76:5f:c1:92:e4:1b:80:14:7f:c7:62:61:08:
4a:78:bc:60:bf:f7:66:84:14:22:3b:c3:a2:38:46:
0d:e2:53:4d:ae:6d:da:29:e9:cc:86:a5:4f:5e:b4:
28:0d:44:4e:2d:40:0f:53:22:9b:4e:e0:7f:d5:0c:
41:38:74:2d:5a:b5:4d:0e:2b:e1:2c:e8:a9:0e:78:
fb:71:5b:a5:ed:ec:e5:aa:e0:28:24:47:87:ec:09:
f1:6f:de:33:ab:0c:35:07:04:05:23:f5:18:e7:82:
97:bd:a5:e4:8f:8b:ee:2a:29:02:cb:a8:69:9b:eb:
5d:84:e7:46:b6:27:a8:2e:77:2d:5d:25:d0:61:d9:
aa:fb:81:98:85:c2:fc:d2:ee:59:40:06:64:40:c9:
5e:86:ac:fc:af:0c:b1:83:e5:cb:85:b2:f1:a5:0e:
f2:1e:b6:35:d4:0a:cd:57:53:93:5d:b7:6d:83:5b:
25:65:ef:85:dc:ac:47:4c:81:e2:b9:d5:20:ed:0d:
18:4f:ed:f6:25:9c:29:b3:17:71:14:3b:9a:22:82:
fd:70:29:bf:5d:2c:7c:a5:2a:ad:07:6e:7c:11:14:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E8:5F:AC:FF:06:F3:A3:A2:E5:50:24:9F:27:55:A3:4B:DB:B3:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF83A00094511F0B2E6395F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
7b:a6:2c:31:ca:83:6e:3d:38:4a:f8:af:af:63:93:11:91:72:
15:9f:e7:94:58:72:3c:d9:83:ab:db:66:f0:b1:46:cb:18:70:
df:92:8f:43:8f:a9:87:1b:61:e7:20:d0:6f:46:72:5e:94:08:
65:87:8a:42:9f:6a:4e:ac:9d:0b:4d:a5:09:60:73:81:b4:4c:
28:00:bf:2b:01:78:f7:d1:f1:1a:2d:0e:cf:b1:30:ec:67:05:
e0:65:be:e6:e1:f5:dd:2b:1c:48:46:cd:1a:6d:14:b8:97:d7:
84:93:2f:21:27:fc:dd:fd:2f:38:82:4b:89:38:0a:e7:4c:51:
de:8f:57:3b:35:f6:33:b3:d6:a3:5c:d9:08:23:87:0f:7c:b6:
63:dc:b4:c1:3d:f1:82:e1:47:25:ad:d2:bb:38:63:cd:73:c0:
9f:2b:46:34:ce:7e:41:1e:a1:b9:f1:23:45:9b:68:09:e0:44:
81:62:6d:01:10:2b:da:5a:72:4a:9e:9a:ed:9b:56:2d:4e:17:
dd:ac:72:24:c0:e8:45:37:0b:0a:f6:5f:e4:05:88:f8:27:34:
08:a2:88:3e:79:d8:3f:3b:68:69:6d:40:71:63:00:51:db:52:
05:3a:20:7d:78:7d:41:53:d6:52:1a:27:3b:01:34:70:56:bc:
72:63:1e:f8
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUffMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI1MDY0OTI0WhcNMjUwNDAyMDY0OTI0WjAYMRYw
FAYDVQQDEw02N2UyNTFmOC01MTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1kgkX4nY3UWEBcW3hE10qPJ/deSdXf8IkEvcxdoINnZfwZLkG4AUf8di
YQhKeLxgv/dmhBQiO8OiOEYN4lNNrm3aKenMhqVPXrQoDUROLUAPUyKbTuB/1QxB
OHQtWrVNDivhLOipDnj7cVul7ezlquAoJEeH7Anxb94zqww1BwQFI/UY54KXvaXk
j4vuKikCy6hpm+tdhOdGtieoLnctXSXQYdmq+4GYhcL80u5ZQAZkQMlehqz8rwyx
g+XLhbLxpQ7yHrY11ArNV1OTXbdtg1slZe+F3KxHTIHiudUg7Q0YT+32JZwpsxdx
FDuaIoL9cCm/XSx8pSqtB258ERR9aQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFL/o
X6z/BvOjouVQJJ8nVaNL27OeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QkY4M0EwMDA5NDUxMUYwQjJFNjM5NUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc7WoDBAGc7XwwDQYJKoZI
hvcNAQELBQADggEBAHumLDHKg249OEr4r69jkxGRchWf55RYcjzZg6vbZvCxRssY
cN+Sj0OPqYcbYecg0G9Gcl6UCGWHikKfak6snQtNpQlgc4G0TCgAvysBePfR8Rot
Ds+xMOxnBeBlvubh9d0rHEhGzRptFLiX14STLyEn/N39LziCS4k4CudMUd6PVzs1
9jOz1qNc2Qgjhw98tmPctME98YLhRyWt0rs4Y81zwJ8rRjTOfkEeobnxI0WbaAng
RIFibQEQK9packqemu2bVi1OF92sciTA6EU3Cwr2X+QFiPgnNAiiiD552D87aGlt
QHFjAFHbUgU6IH14fUFT1lIaJzsBNHBWvHJjHvg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:05:09 2025 by rpki-client