Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69722414FE4C11EFBB725D82762E951A.roa
File: 69722414FE4C11EFBB725D82762E951A.roa (raw, json)
Hash identifier: wJESLYVmQNfFn+uCntjnbLcAtPy9SRjncCzcIT2NIKY=
Subject key identifier: EE:16:06:92:5C:F4:75:82:79:ED:CD:E1:BC:B2:71:F1:0A:EB:06:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69722414FE4C11EFBB725D82762E951A.roa
Signing time: Tue 11 Mar 2025 07:42:41 +0000
ROA not before: Tue 11 Mar 2025 07:42:37 +0000
ROA not after: Wed 09 Apr 2025 07:42:37 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83159 (0x144d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:42:37 2025 GMT
Not After : Apr 9 07:42:37 2025 GMT
Subject: CN=67cfe971-69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:b6:ea:70:84:4c:ad:d4:14:29:23:75:60:
53:21:67:51:f7:9b:e1:fa:84:9a:16:dd:85:69:19:
b2:cf:c7:fb:2c:f7:a0:32:6a:86:65:64:0d:3b:55:
74:71:93:93:73:e2:e1:ef:8b:b3:2d:7e:3b:42:68:
cb:a0:4b:e7:41:b0:eb:d1:33:26:28:ec:b7:06:d3:
df:ad:be:c1:0c:71:40:e4:57:5d:79:fb:79:cc:7b:
ef:15:04:8f:85:c5:83:1e:92:c3:7b:6e:fe:9f:24:
90:9f:a0:67:a7:03:81:19:b7:a8:52:c2:16:56:67:
e1:b3:47:57:42:8c:1a:f9:ef:bb:0a:11:05:c9:41:
9f:be:50:96:ee:63:cc:30:3d:4b:85:bd:60:a6:31:
1b:80:08:60:48:5c:d7:2e:1a:65:2f:27:46:9f:95:
15:b9:00:dd:8a:9d:42:96:d1:bc:26:23:4a:4e:20:
82:87:51:6b:67:94:7c:93:2b:6b:9f:8a:b8:65:3e:
df:d8:cd:3b:ba:60:4a:1d:e9:fc:1d:a9:af:98:a5:
84:ce:4d:a0:b1:1e:70:41:03:a7:8c:7a:26:cb:00:
8f:d4:5e:d2:7a:a7:e3:c4:3c:0a:6b:9d:2e:08:1b:
dd:f0:54:d2:c3:cb:d5:d4:0c:c5:b8:57:7b:a9:38:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:06:92:5C:F4:75:82:79:ED:CD:E1:BC:B2:71:F1:0A:EB:06:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69722414FE4C11EFBB725D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1e:de:87:64:03:a4:69:2d:c3:2e:c6:bf:c4:5e:e0:f2:a8:
4f:87:6f:32:89:12:55:91:73:a8:9c:8c:67:6c:77:7d:8f:ca:
03:9c:46:eb:dd:34:45:69:59:fb:b6:ef:2f:c5:62:1d:0a:7b:
46:34:f9:ca:76:ad:e8:ab:bb:d3:25:46:c0:cb:b4:01:66:54:
40:cd:9b:e7:e2:28:95:de:82:c7:b3:01:18:6f:7d:93:cc:ec:
d1:83:29:58:c9:a6:e4:8d:5b:8d:cc:48:18:3c:f9:5f:59:5f:
cc:89:cf:b4:bf:76:76:bb:13:1d:8d:0b:f7:ea:07:8c:57:13:
d7:2e:f0:98:2d:30:5e:43:ea:8b:b6:c5:8d:1b:0c:2c:e5:50:
de:8f:bc:57:89:08:74:e9:26:b8:00:85:1c:4e:08:5a:f3:5c:
f7:af:2a:81:c9:c6:ac:2e:e7:dd:a4:d5:d3:d4:12:31:84:fa:
65:ab:32:38:5f:76:d1:82:5c:d3:7a:b8:e9:f0:56:a5:d4:96:
a4:7f:68:ed:42:52:38:23:13:aa:3e:cd:60:49:26:7f:cc:3a:
82:60:c1:2f:6d:da:f8:53:83:b0:0c:09:2c:9f:c1:08:5f:de:
a9:76:bc:c8:b0:06:43:39:3d:27:d8:4b:08:18:a3:82:94:3e:
23:12:e8:3a
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAUTXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDc0MjM3WhcNMjUwNDA5MDc0MjM3WjAYMRYw
FAYDVQQDEw02N2NmZTk3MS02OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Nq26nCETK3UFCkjdWBTIWdR95vh+oSaFt2FaRmyz8f7LPegMmqGZWQN
O1V0cZOTc+Lh74uzLX47QmjLoEvnQbDr0TMmKOy3BtPfrb7BDHFA5Fddeft5zHvv
FQSPhcWDHpLDe27+nySQn6BnpwOBGbeoUsIWVmfhs0dXQowa+e+7ChEFyUGfvlCW
7mPMMD1Lhb1gpjEbgAhgSFzXLhplLydGn5UVuQDdip1CltG8JiNKTiCCh1FrZ5R8
kytrn4q4ZT7f2M07umBKHen8HamvmKWEzk2gsR5wQQOnjHomywCP1F7SeqfjxDwK
a50uCBvd8FTSw8vV1AzFuFd7qTg8eQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFO4W
BpJc9HWCee3N4byycfEK6wZBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82OTcyMjQxNEZFNEMxMUVGQkI3MjVEODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDAwSc8AMEA5zwMDAMAwQBnPIK
AwQEnPIAMAsDAwGc9gMEAZz2EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOC
AQEAFh7eh2QDpGktwy7Gv8Re4PKoT4dvMokSVZFzqJyMZ2x3fY/KA5xG6900RWlZ
+7bvL8ViHQp7RjT5ynat6Ku70yVGwMu0AWZUQM2b5+Iold6Cx7MBGG99k8zs0YMp
WMmm5I1bjcxIGDz5X1lfzInPtL92drsTHY0L9+oHjFcT1y7wmC0wXkPqi7bFjRsM
LOVQ3o+8V4kIdOkmuACFHE4IWvNc968qgcnGrC7n3aTV09QSMYT6ZasyOF920YJc
03q46fBWpdSWpH9o7UJSOCMTqj7NYEkmf8w6gmDBL23a+FODsAwJLJ/BCF/eqXa8
yLAGQzk9J9hLCBijgpQ+IxLoOg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:57 2025 by rpki-client