Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF46B2837D111F0AFEE7DBEDAE4EC9C.roa
File: 4FF46B2837D111F0AFEE7DBEDAE4EC9C.roa (raw, json)
Hash identifier: VqG/QQJ47rVIpBmSPOj4xwZjqQNC2BEX7VAvMT8Ht+w=
Subject key identifier: F1:0B:D9:CF:2B:C2:59:63:D5:FC:1D:71:9F:88:A0:A2:A1:EE:73:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF46B2837D111F0AFEE7DBEDAE4EC9C.roa
Signing time: Fri 23 May 2025 12:27:38 +0000
ROA not before: Fri 23 May 2025 12:27:33 +0000
ROA not after: Thu 26 Jun 2025 12:27:33 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87767 (0x156d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 12:27:33 2025 GMT
Not After : Jun 26 12:27:33 2025 GMT
Subject: CN=683069ba-57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:51:b1:b2:3c:f2:2e:9c:0e:af:24:9f:5e:
98:8f:74:1d:c2:0c:7c:da:43:7a:1c:aa:ec:ae:30:
c3:2d:e9:c2:35:6c:de:57:8f:90:c8:e9:d1:56:f9:
85:ee:24:9b:95:14:df:d4:c2:1e:03:92:28:a3:50:
0c:8a:0c:c3:eb:ac:69:03:d8:8a:01:08:c5:bc:37:
77:25:85:cc:61:b4:fd:74:e5:17:9a:c2:4e:42:4a:
86:12:bd:45:8f:77:c2:a9:d6:39:94:06:4e:00:85:
a0:c3:8f:6a:d5:f9:bd:3d:54:fb:ad:b3:3d:59:30:
07:d6:c2:5f:93:4c:e4:38:d1:33:1b:f6:4a:1a:0c:
ae:1c:9a:78:5b:8c:00:a6:a3:43:e6:ac:29:4e:55:
15:32:38:4b:52:72:2e:d4:24:ea:f2:d6:cb:e6:a9:
3a:fc:0a:12:77:0b:cc:9b:06:90:13:62:97:f4:b4:
58:ad:3e:12:e8:e9:56:26:16:0d:34:7e:e4:a7:41:
f9:93:80:11:1b:71:83:1e:62:07:84:86:f1:fc:25:
29:3f:dd:7d:c7:f5:a8:ac:05:1b:67:d0:2e:4e:04:
c4:5f:bf:11:85:3e:6f:e1:25:dc:cf:ad:8c:6f:e3:
79:55:1d:d2:db:03:df:7c:53:cc:6c:c4:54:8d:20:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:D9:CF:2B:C2:59:63:D5:FC:1D:71:9F:88:A0:A2:A1:EE:73:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF46B2837D111F0AFEE7DBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2b:b3:ef:3e:d3:93:20:f3:4b:66:09:cf:c9:ab:dd:31:62:
7e:33:80:69:cb:cc:37:7c:44:0e:75:fb:78:e1:9b:b7:21:eb:
32:9c:d5:e3:ab:30:68:f0:59:35:e7:ec:b6:da:4e:94:6e:29:
43:3b:7d:1e:52:81:07:9c:f2:40:a0:16:9b:5e:b6:0a:71:e4:
a3:8f:b0:66:25:25:74:d3:65:a2:9e:dd:6a:f5:4a:c8:2e:cd:
53:27:d4:0e:a7:e2:5e:d5:d1:ee:f7:34:39:32:fe:d9:01:4b:
9a:31:0c:13:f8:d7:66:a7:c7:d3:58:b8:f8:f4:3b:85:73:f6:
f2:ad:14:51:32:02:6c:ca:57:e7:49:88:b2:97:f4:09:4a:d8:
24:21:90:da:c2:7a:dc:7d:3f:df:ff:19:ca:27:cc:97:64:39:
34:2d:33:b3:b0:25:06:f9:fd:b6:ec:9e:77:b4:43:83:eb:a8:
8d:60:f0:fb:29:12:4c:12:ec:89:92:7b:b7:c8:1a:36:af:1e:
ac:cb:4d:5e:06:5a:71:0b:cb:a1:b0:e3:40:dc:a4:95:09:b4:
84:01:31:53:ec:a1:61:73:fb:05:54:e9:d1:0b:12:88:ae:47:
4a:33:16:a9:b6:cd:6b:76:45:c6:5c:7f:44:24:b3:ae:10:98:
06:72:60:b3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVbXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIzMTIyNzMzWhcNMjUwNjI2MTIyNzMzWjAYMRYw
FAYDVQQDEw02ODMwNjliYS01N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1oFRsbI88i6cDq8kn16Yj3Qdwgx82kN6HKrsrjDDLenCNWzeV4+QyOnR
VvmF7iSblRTf1MIeA5Ioo1AMigzD66xpA9iKAQjFvDd3JYXMYbT9dOUXmsJOQkqG
Er1Fj3fCqdY5lAZOAIWgw49q1fm9PVT7rbM9WTAH1sJfk0zkONEzG/ZKGgyuHJp4
W4wApqND5qwpTlUVMjhLUnIu1CTq8tbL5qk6/AoSdwvMmwaQE2KX9LRYrT4S6OlW
JhYNNH7kp0H5k4ARG3GDHmIHhIbx/CUpP919x/WorAUbZ9AuTgTEX78RhT5v4SXc
z62Mb+N5VR3S2wPffFPMbMRUjSC0HQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPEL
2c8rwllj1fwdcZ+IoKKh7nPgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RkY0NkIyODM3RDExMUYwQUZFRTdEQkVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwAMA0GCSqGSIb3DQEBCwUA
A4IBAQCdK7PvPtOTIPNLZgnPyavdMWJ+M4Bpy8w3fEQOdft44Zu3IesynNXjqzBo
8Fk15+y22k6UbilDO30eUoEHnPJAoBabXrYKceSjj7BmJSV002Wint1q9UrILs1T
J9QOp+Je1dHu9zQ5Mv7ZAUuaMQwT+Ndmp8fTWLj49DuFc/byrRRRMgJsylfnSYiy
l/QJStgkIZDawnrcfT/f/xnKJ8yXZDk0LTOzsCUG+f227J53tEOD66iNYPD7KRJM
EuyJknu3yBo2rx6sy01eBlpxC8uhsONA3KSVCbSEATFT7KFhc/sFVOnRCxKIrkdK
Mxapts1rdkXGXH9EJLOuEJgGcmCz
-----END CERTIFICATE-----
Generated at Thu Jun 5 01:56:41 2025 by rpki-client