Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C813A356611F0BEBF70BFDAE4EC9C.roa
File: 6C2C813A356611F0BEBF70BFDAE4EC9C.roa (raw, json)
Hash identifier: ITGuvlpNL6NGyWPAfvTCN5EKc98gJOzur+RK6ZBFLs8=
Subject key identifier: 8D:4E:42:EC:95:D9:88:50:CE:1E:5F:9F:B7:E0:45:12:35:B5:E1:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01562E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C813A356611F0BEBF70BFDAE4EC9C.roa
Signing time: Tue 20 May 2025 10:37:27 +0000
ROA not before: Tue 20 May 2025 10:37:22 +0000
ROA not after: Fri 27 Jun 2025 10:37:22 +0000
asID: 44559
IP address blocks: 156.246.196.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87598 (0x1562e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:37:22 2025 GMT
Not After : Jun 27 10:37:22 2025 GMT
Subject: CN=682c5b67-b809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:15:97:55:79:fb:76:68:ac:65:26:b9:d7:
45:1f:57:dd:a5:45:66:ac:c5:11:fa:22:7e:b1:e5:
5f:d5:2e:5c:a5:82:58:1a:17:70:4f:bc:c6:7f:34:
53:91:e7:b6:9d:5f:d3:eb:6a:25:d1:5a:84:e8:4a:
fc:6c:b2:2f:f5:84:d4:35:84:24:b8:39:46:c5:19:
a8:e8:62:14:81:af:f8:fe:59:fc:f7:f1:b2:6d:e4:
5d:a8:8c:16:36:9c:86:32:e8:6d:51:04:cf:c0:56:
0a:05:25:62:46:e2:4c:17:43:12:77:6f:c2:8a:bd:
1a:17:dc:dd:a6:d1:65:de:61:3a:ad:b2:e8:c4:93:
da:b3:6a:51:90:69:23:3c:7b:93:61:b7:67:50:e2:
43:20:47:a4:90:4c:d5:e7:09:4a:48:c6:63:6a:f2:
09:2b:dd:cd:97:93:4d:f1:de:3c:eb:ad:22:60:b1:
0e:0c:7f:bd:6e:32:92:17:df:8c:ee:f9:d5:6e:d3:
90:1b:6e:97:40:c7:cc:f0:07:f1:9c:8c:e3:2f:78:
43:03:04:71:31:fe:60:2d:64:b6:b9:85:3e:34:ac:
40:b6:3a:26:0f:99:e3:e4:a2:e1:86:d1:13:32:99:
05:57:d4:71:b5:a5:7d:62:16:35:ca:9a:41:3b:4c:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:42:EC:95:D9:88:50:CE:1E:5F:9F:B7:E0:45:12:35:B5:E1:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C813A356611F0BEBF70BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.196.0/24
156.246.198.0-156.246.205.255
156.246.243.0-156.246.251.255
156.246.253.0-156.246.254.255
Signature Algorithm: sha256WithRSAEncryption
78:f5:cc:28:f4:c7:ea:9e:9c:e5:5d:5a:71:4e:b4:6b:7e:96:
de:6d:44:6f:fc:1b:84:cc:b5:2e:fa:44:f0:12:2e:e8:29:b2:
a1:53:5c:df:7b:a0:d2:e7:f5:4f:c1:0e:b4:c6:6d:80:99:99:
93:48:ba:0e:72:1d:d5:99:01:7d:f1:9b:a2:39:06:cc:1c:f6:
f5:a4:ba:71:e5:37:cd:95:12:31:72:d7:18:ae:c7:22:de:20:
f2:31:95:42:52:6b:96:a4:cd:70:4c:0d:3a:98:57:64:9e:37:
52:3f:a1:3d:e6:04:ee:fa:70:b8:8d:f3:8a:71:cd:d4:e2:8d:
ba:6c:ea:ec:a7:dd:5c:a4:fd:d8:3a:86:e9:81:b7:94:55:10:
d1:32:c3:9c:c2:d1:ef:3a:61:8f:0c:a1:ee:b2:aa:79:a6:9a:
5a:3d:11:69:77:79:04:63:75:44:d3:7b:37:1e:4a:aa:78:41:
88:d7:37:82:54:cf:d7:a3:78:a5:eb:8d:9d:fc:1a:1d:08:d6:
8a:3c:ac:0c:1c:09:86:5e:ae:61:ee:2e:70:9d:a2:e7:2b:f0:
ab:d2:44:01:a0:fd:b2:95:64:54:85:07:53:53:34:27:ea:27:
2a:8c:bf:16:4a:45:1b:b9:67:16:c3:9d:80:b2:18:f2:a2:a9:
e0:35:3d:92
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAVYuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIwMTAzNzIyWhcNMjUwNjI3MTAzNzIyWjAYMRYw
FAYDVQQDEw02ODJjNWI2Ny1iODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2eUVl1V5+3ZorGUmuddFH1fdpUVmrMUR+iJ+seVf1S5cpYJYGhdwT7zG
fzRTkee2nV/T62ol0VqE6Er8bLIv9YTUNYQkuDlGxRmo6GIUga/4/ln89/GybeRd
qIwWNpyGMuhtUQTPwFYKBSViRuJMF0MSd2/Cir0aF9zdptFl3mE6rbLoxJPas2pR
kGkjPHuTYbdnUOJDIEekkEzV5wlKSMZjavIJK93Nl5NN8d48660iYLEODH+9bjKS
F9+M7vnVbtOQG26XQMfM8AfxnIzjL3hDAwRxMf5gLWS2uYU+NKxAtjomD5nj5KLh
htETMpkFV9RxtaV9YhY1yppBO0wbvQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFI1O
QuyV2YhQzh5fn7fgRRI1teErMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QzJDODEzQTM1NjYxMUYwQkVCRjcwQkZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAnPbEMAwDBAGc9sYDBAGc9sww
DAMEAJz28wMEApz2+DAMAwQAnPb9AwQAnPb+MA0GCSqGSIb3DQEBCwUAA4IBAQB4
9cwo9MfqnpzlXVpxTrRrfpbebURv/BuEzLUu+kTwEi7oKbKhU1zfe6DS5/VPwQ60
xm2AmZmTSLoOch3VmQF98ZuiOQbMHPb1pLpx5TfNlRIxctcYrsci3iDyMZVCUmuW
pM1wTA06mFdknjdSP6E95gTu+nC4jfOKcc3U4o26bOrsp91cpP3YOobpgbeUVRDR
MsOcwtHvOmGPDKHusqp5pppaPRFpd3kEY3VE03s3HkqqeEGI1zeCVM/Xo3il642d
/BodCNaKPKwMHAmGXq5h7i5wnaLnK/Cr0kQBoP2ylWRUhQdTUzQn6icqjL8WSkUb
uWcWw52AshjyoqngNT2S
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:52:22 2025 by rpki-client