Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84CBD0A2F4F111EFA25BCD98762E951A.roa
File: 84CBD0A2F4F111EFA25BCD98762E951A.roa (raw, json)
Hash identifier: Hs39rVlJaRYLiDVHeyLtA/xS72Jqk57Y8RIMCIuw1gM=
Subject key identifier: 62:63:CE:14:96:F5:2A:0A:31:BF:C8:89:05:33:37:87:F0:5B:8D:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84CBD0A2F4F111EFA25BCD98762E951A.roa
Signing time: Thu 27 Feb 2025 09:59:22 +0000
ROA not before: Thu 27 Feb 2025 09:59:18 +0000
ROA not after: Thu 19 Feb 2026 09:59:18 +0000
asID: 984
IP address blocks: 156.236.44.0/24 maxlen: 24
156.236.45.0/24 maxlen: 24
156.236.46.0/24 maxlen: 24
156.236.47.0/24 maxlen: 24
156.236.48.0/24 maxlen: 24
156.236.49.0/24 maxlen: 24
156.236.50.0/24 maxlen: 24
156.236.51.0/24 maxlen: 24
156.236.52.0/24 maxlen: 24
156.236.53.0/24 maxlen: 24
156.236.54.0/24 maxlen: 24
156.236.55.0/24 maxlen: 24
156.236.56.0/24 maxlen: 24
156.236.57.0/24 maxlen: 24
156.236.58.0/24 maxlen: 24
156.236.59.0/24 maxlen: 24
156.236.60.0/24 maxlen: 24
156.236.61.0/24 maxlen: 24
156.236.62.0/24 maxlen: 24
156.236.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80350 (0x139de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 09:59:18 2025 GMT
Not After : Feb 19 09:59:18 2026 GMT
Subject: CN=67c0377a-3781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:25:e5:e7:bb:e0:cf:0a:a6:d6:ff:5c:5d:
9d:52:12:96:ea:d0:33:77:c8:f7:5b:74:dd:54:89:
90:65:f2:7c:ee:e9:b1:4f:1a:f6:0b:4d:1f:14:51:
0b:92:7f:b5:82:0f:94:ca:09:fc:bb:7a:18:c9:e1:
72:f5:e7:64:0b:e5:39:98:ca:53:11:48:cf:60:26:
aa:19:a2:e9:87:a6:3c:1a:03:88:6a:a0:da:59:51:
8a:c1:cc:2a:c8:c1:5e:13:5a:45:69:ef:2b:88:cc:
67:3e:37:f2:bb:c3:7a:30:32:3e:6d:0e:53:8f:f1:
51:76:23:d8:1c:31:a1:cf:41:84:45:93:54:10:f0:
b4:f5:46:f3:39:0a:40:c3:c8:c2:fd:5d:51:f0:34:
16:27:f7:1d:3b:70:37:77:b7:8f:4e:c2:bc:a7:9c:
76:ee:9a:59:59:7a:8f:c3:b8:d4:05:45:e0:3e:4b:
d8:06:01:e2:2c:c6:e6:e5:4e:5c:99:8b:c4:20:8b:
eb:ab:25:99:ab:2d:78:90:26:e6:f5:91:9a:57:59:
71:8a:42:e4:9c:31:d2:f3:96:a7:1d:5e:86:a8:93:
52:b5:2f:f5:7f:19:fc:8d:bf:d4:b0:cb:85:14:2d:
04:1a:50:33:ee:75:5c:6c:a8:cd:14:d1:ab:8f:04:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:CE:14:96:F5:2A:0A:31:BF:C8:89:05:33:37:87:F0:5B:8D:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84CBD0A2F4F111EFA25BCD98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.44.0-156.236.63.255
Signature Algorithm: sha256WithRSAEncryption
78:44:01:43:a5:a3:30:d3:3c:f5:f7:a5:f5:0c:da:09:2f:c0:
74:a5:47:6e:72:69:af:44:33:0f:ef:4e:38:79:89:2c:97:fd:
7c:ce:41:90:be:a4:b3:01:7b:af:24:b2:99:bd:0e:8c:62:3f:
23:12:c5:2a:2d:43:5c:c3:a5:a2:0e:0e:a9:34:e0:e4:dd:1f:
78:f5:84:21:fd:de:72:a4:86:c6:8a:26:16:6e:50:fb:41:6a:
50:1a:a3:f3:8f:49:82:c3:49:06:93:38:4c:1b:05:be:a5:f8:
6f:c0:bb:18:c0:bb:5a:fc:0d:e5:a3:f7:f6:d2:d5:0c:97:7d:
59:dd:39:7e:c6:ff:5c:80:94:33:67:36:4c:40:20:20:20:90:
c6:a7:70:45:11:b9:d9:c8:1a:0f:e1:14:e1:bc:1c:45:71:74:
05:e8:98:2c:87:a7:7d:c9:b4:75:a3:98:c1:62:20:31:cb:6d:
69:1e:21:4b:5e:f1:f6:ca:5b:58:b0:cd:8f:25:c8:7d:48:42:
ba:b3:e5:ce:36:72:68:db:b1:26:85:7c:5b:e8:8b:fe:3b:cd:
98:0a:a8:b6:13:09:6d:a3:3c:6f:15:32:9f:be:be:5c:67:f7:
0d:d7:3d:0f:9c:ed:ad:25:44:38:68:c8:bb:a7:83:90:8c:39:
a5:d3:b7:06
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDATneMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDk1OTE4WhcNMjYwMjE5MDk1OTE4WjAYMRYw
FAYDVQQDEw02N2MwMzc3YS0zNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAztYl5ee74M8Kptb/XF2dUhKW6tAzd8j3W3TdVImQZfJ87umxTxr2C00f
FFELkn+1gg+Uygn8u3oYyeFy9edkC+U5mMpTEUjPYCaqGaLph6Y8GgOIaqDaWVGK
wcwqyMFeE1pFae8riMxnPjfyu8N6MDI+bQ5Tj/FRdiPYHDGhz0GERZNUEPC09Ubz
OQpAw8jC/V1R8DQWJ/cdO3A3d7ePTsK8p5x27ppZWXqPw7jUBUXgPkvYBgHiLMbm
5U5cmYvEIIvrqyWZqy14kCbm9ZGaV1lxikLknDHS85anHV6GqJNStS/1fxn8jb/U
sMuFFC0EGlAz7nVcbKjNFNGrjwTf1QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGJj
zhSW9SoKMb/IiQUzN4fwW41LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NENCRDBBMkY0RjExMUVGQTI1QkNEOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc7CwDBAac7AAwDQYJKoZI
hvcNAQELBQADggEBAHhEAUOlozDTPPX3pfUM2gkvwHSlR25yaa9EMw/vTjh5iSyX
/XzOQZC+pLMBe68kspm9DoxiPyMSxSotQ1zDpaIODqk04OTdH3j1hCH93nKkhsaK
JhZuUPtBalAao/OPSYLDSQaTOEwbBb6l+G/AuxjAu1r8DeWj9/bS1QyXfVndOX7G
/1yAlDNnNkxAICAgkMancEURudnIGg/hFOG8HEVxdAXomCyHp33JtHWjmMFiIDHL
bWkeIUte8fbKW1iwzY8lyH1IQrqz5c42cmjbsSaFfFvoi/47zZgKqLYTCW2jPG8V
Mp++vlxn9w3XPQ+c7a0lRDhoyLung5CMOaXTtwY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:21 2025 by rpki-client