Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75249D6A582311F0ABB13C94DAE4EC9C.roa
File: 75249D6A582311F0ABB13C94DAE4EC9C.roa (raw, json)
Hash identifier: J/2P7Mb6h3JQ6vifHrm1u701OKzJkG15JGOkry6dVUk=
Subject key identifier: E4:20:4B:B3:F1:82:DB:03:79:A7:26:61:5B:C0:0D:D3:B9:A5:EB:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75249D6A582311F0ABB13C94DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 15:36:16 +0000
ROA not before: Thu 03 Jul 2025 15:36:12 +0000
ROA not after: Sun 24 Aug 2025 15:36:12 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90282 (0x160aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 15:36:12 2025 GMT
Not After : Aug 24 15:36:12 2025 GMT
Subject: CN=6866a370-1375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:3a:66:dd:8b:01:6c:fc:d9:01:f7:db:53:
e8:42:b8:6b:e6:e3:b6:b4:62:39:e9:dd:44:31:e4:
6a:b8:4b:61:c4:45:26:82:a8:92:c1:1b:4f:ad:60:
c8:e1:e3:38:d1:5f:70:e6:93:52:5b:41:e4:94:31:
95:80:9c:0a:d1:0d:cd:2e:a0:06:0f:e9:8b:c5:b8:
50:dd:6a:e8:6f:22:a6:7f:99:37:14:c1:95:fc:89:
f1:28:42:ac:21:55:50:75:c2:8b:60:14:ad:a0:ce:
96:49:02:e3:c4:f7:b5:1d:f0:a5:46:87:67:b0:80:
51:e4:3a:9d:b2:2e:24:8c:fd:30:84:2b:d3:1b:87:
1a:7a:4e:3b:3d:ad:bf:67:d8:cf:39:27:15:d4:11:
c1:51:67:76:ed:36:52:aa:9e:18:4d:12:d2:f5:d0:
e1:13:4e:d5:5e:a3:bb:df:b6:2a:c3:71:41:9a:19:
7b:93:66:a4:10:9b:c3:9c:8b:6a:30:cd:35:50:dd:
3d:18:dd:23:5e:6f:5e:15:ce:14:f9:92:a0:7f:79:
fb:f4:d7:fb:c4:db:30:b7:27:c3:a6:cd:67:ac:d0:
2a:52:94:08:ae:64:6b:68:50:4f:b6:52:e7:13:16:
2f:3b:d0:81:1c:0f:0d:64:57:70:a6:3b:80:af:c2:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:4B:B3:F1:82:DB:03:79:A7:26:61:5B:C0:0D:D3:B9:A5:EB:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75249D6A582311F0ABB13C94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
1e:2f:b0:3a:72:1a:f1:03:bd:5d:20:37:9f:1e:38:80:04:8e:
5c:9f:1b:85:8c:09:1b:32:32:33:fa:be:e7:2e:a5:67:b8:95:
d7:d7:e4:29:58:5d:70:1e:e7:d8:1f:41:1a:e3:6f:13:ea:7d:
ea:89:05:5a:84:02:c7:24:32:fc:38:2c:c6:23:33:a5:2a:68:
f3:a1:3a:29:9b:b4:fb:15:4e:11:5b:7f:49:4d:20:17:f0:ba:
12:a5:b3:ec:c7:6d:e0:c0:54:d7:49:8e:73:6c:41:5a:06:d7:
19:09:7b:fc:16:0f:54:2c:72:20:4f:b7:5d:17:5e:c1:3e:3e:
30:14:d3:88:3b:27:0f:0e:ff:21:4f:fa:a5:93:23:51:f2:d3:
69:1b:70:61:3b:4d:cd:39:0e:66:de:69:73:da:04:0c:9f:80:
d7:26:3f:b4:52:7d:96:b6:8f:ee:34:69:c6:f5:40:c9:15:7a:
85:59:1d:df:a0:88:db:8c:7e:a8:d8:0b:f4:c1:ff:41:bb:e3:
41:f5:38:a0:bd:40:f9:e6:7f:9e:13:39:78:c2:d3:33:e8:b3:
7e:57:00:65:f1:a3:bb:6b:f1:79:78:ad:1c:15:77:1d:b5:38:
50:1a:36:5c:9f:1e:e9:98:99:ea:0f:34:a0:d6:6b:a4:86:6e:
6c:34:a1:1d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWCqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTUzNjEyWhcNMjUwODI0MTUzNjEyWjAYMRYw
FAYDVQQDEw02ODY2YTM3MC0xMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApDk6Zt2LAWz82QH321PoQrhr5uO2tGI56d1EMeRquEthxEUmgqiSwRtP
rWDI4eM40V9w5pNSW0HklDGVgJwK0Q3NLqAGD+mLxbhQ3WrobyKmf5k3FMGV/Inx
KEKsIVVQdcKLYBStoM6WSQLjxPe1HfClRodnsIBR5Dqdsi4kjP0whCvTG4caek47
Pa2/Z9jPOScV1BHBUWd27TZSqp4YTRLS9dDhE07VXqO737Yqw3FBmhl7k2akEJvD
nItqMM01UN09GN0jXm9eFc4U+ZKgf3n79Nf7xNswtyfDps1nrNAqUpQIrmRraFBP
tlLnExYvO9CBHA8NZFdwpjuAr8LgsQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOQg
S7PxgtsDeacmYVvADdO5peuoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTI0OUQ2QTU4MjMxMUYwQUJCMTNDOTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOc7xgDBAGc7zQwDQYJKoZI
hvcNAQELBQADggEBAB4vsDpyGvEDvV0gN58eOIAEjlyfG4WMCRsyMjP6vucupWe4
ldfX5ClYXXAe59gfQRrjbxPqfeqJBVqEAsckMvw4LMYjM6UqaPOhOimbtPsVThFb
f0lNIBfwuhKls+zHbeDAVNdJjnNsQVoG1xkJe/wWD1QsciBPt10XXsE+PjAU04g7
Jw8O/yFP+qWTI1Hy02kbcGE7Tc05DmbeaXPaBAyfgNcmP7RSfZa2j+40acb1QMkV
eoVZHd+giNuMfqjYC/TB/0G740H1OKC9QPnmf54TOXjC0zPos35XAGXxo7tr8Xl4
rRwVdx21OFAaNlyfHumYmeoPNKDWa6SGbmw0oR0=
-----END CERTIFICATE-----
Generated at Sun Jul 6 02:50:02 2025 by rpki-client