Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD76812F45A11EF951C1D81762E951A.roa
File: 8BD76812F45A11EF951C1D81762E951A.roa (raw, json)
Hash identifier: dRv91OgdQ1HtJZOQpj29xSZFXwzE4PZWJD6z9Arm9hQ=
Subject key identifier: B4:DE:11:13:24:1E:79:99:FB:D0:FF:40:F7:73:34:2F:78:93:C6:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013482
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD76812F45A11EF951C1D81762E951A.roa
Signing time: Wed 26 Feb 2025 15:58:41 +0000
ROA not before: Wed 26 Feb 2025 15:58:18 +0000
ROA not after: Thu 19 Feb 2026 15:58:18 +0000
asID: 984
IP address blocks: 156.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78978 (0x13482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:58:18 2025 GMT
Not After : Feb 19 15:58:18 2026 GMT
Subject: CN=67bf3a31-5f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:8e:47:c6:52:09:52:68:75:7b:a3:2f:b2:
46:02:5e:49:46:7a:d2:69:03:70:94:85:ad:fc:82:
c1:cd:9c:9b:18:0a:e1:ad:8c:b8:06:45:b9:5a:cd:
18:8c:08:16:e0:25:6e:37:57:2a:6a:11:09:5f:54:
91:bd:73:87:38:cb:60:5c:e6:4f:ea:ba:e2:b3:b8:
9d:55:93:c2:f9:07:8f:72:08:86:a2:09:80:2e:ee:
7f:e7:29:2f:f3:28:52:66:a7:a7:7b:ce:44:8a:9d:
77:dd:df:04:71:ab:08:e4:5e:7d:7a:e4:60:e7:d1:
d0:d3:43:b5:72:cd:0c:1a:a0:56:4f:2c:04:ee:4f:
a0:60:2a:61:bf:46:72:58:d0:0e:92:51:f5:b7:8e:
20:a8:4a:d1:11:24:e9:0c:16:a7:a7:d3:50:47:a3:
cd:dd:42:a2:fd:c2:ae:aa:15:33:a7:4f:83:a3:09:
a5:17:cb:96:e8:5d:1e:36:09:53:13:f2:33:d3:96:
44:fb:c5:c3:e3:77:2d:c1:29:e2:55:a4:ec:f9:12:
94:9c:7c:ec:25:d4:b7:ca:5f:fa:9f:48:58:99:78:
49:fc:54:d1:ee:70:36:6d:6b:69:35:08:1e:04:aa:
e3:7c:31:d7:a1:88:c9:81:1e:61:eb:d7:61:84:56:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:11:13:24:1E:79:99:FB:D0:FF:40:F7:73:34:2F:78:93:C6:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD76812F45A11EF951C1D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.223.0/24
Signature Algorithm: sha256WithRSAEncryption
af:35:37:52:d5:fb:4e:64:ac:05:1b:10:19:a9:e9:bc:94:2c:
52:51:34:e5:6f:72:47:62:dd:3e:2b:fe:86:8a:07:da:3d:e4:
e2:ab:e9:b2:71:85:35:c9:36:48:9a:0c:47:aa:b4:e4:70:b5:
27:6e:1a:11:6a:3d:d4:2f:8e:24:b5:eb:99:3e:c2:ac:cd:e2:
40:6b:64:95:0c:59:a8:f7:37:62:c6:bd:65:cc:73:4d:65:7d:
07:88:c0:61:a1:ef:85:fd:9e:7e:a9:a4:ad:86:76:4c:2d:a0:
25:df:65:b9:58:0b:5a:8d:1c:fe:4b:a0:47:3c:90:06:14:57:
66:ce:34:db:c8:98:7a:16:9c:c7:d8:69:ba:00:82:51:fb:bd:
cb:c6:65:a3:89:53:9c:b2:2b:e7:61:86:36:4c:82:63:7e:80:
32:3e:6e:73:a5:e9:08:ae:92:18:74:3d:5d:44:81:ca:22:d8:
44:35:fb:95:3c:a1:30:c8:4d:6f:f9:3b:5b:4f:a6:05:90:e2:
b2:65:04:d2:fb:a1:44:a1:64:90:70:fe:05:fa:88:67:da:74:
9b:7e:c8:af:70:55:e4:ca:34:a9:fa:ef:1c:ab:a4:84:fa:51:
0a:e0:d5:18:de:57:72:ae:7e:12:05:40:37:76:69:b6:67:cb:
9e:c1:43:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATSCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTU1ODE4WhcNMjYwMjE5MTU1ODE4WjAYMRYw
FAYDVQQDEw02N2JmM2EzMS01ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxC2OR8ZSCVJodXujL7JGAl5JRnrSaQNwlIWt/ILBzZybGArhrYy4BkW5
Ws0YjAgW4CVuN1cqahEJX1SRvXOHOMtgXOZP6rris7idVZPC+QePcgiGogmALu5/
5ykv8yhSZqene85Eip133d8EcasI5F59euRg59HQ00O1cs0MGqBWTywE7k+gYCph
v0ZyWNAOklH1t44gqErRESTpDBanp9NQR6PN3UKi/cKuqhUzp0+DowmlF8uW6F0e
NglTE/Iz05ZE+8XD43ctwSniVaTs+RKUnHzsJdS3yl/6n0hYmXhJ/FTR7nA2bWtp
NQgeBKrjfDHXoYjJgR5h69dhhFZZJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLTe
ERMkHnmZ+9D/QPdzNC94k8ZWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QkQ3NjgxMkY0NUExMUVGOTUxQzFEODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOffMA0GCSqGSIb3DQEBCwUA
A4IBAQCvNTdS1ftOZKwFGxAZqem8lCxSUTTlb3JHYt0+K/6GigfaPeTiq+mycYU1
yTZImgxHqrTkcLUnbhoRaj3UL44kteuZPsKszeJAa2SVDFmo9zdixr1lzHNNZX0H
iMBhoe+F/Z5+qaSthnZMLaAl32W5WAtajRz+S6BHPJAGFFdmzjTbyJh6FpzH2Gm6
AIJR+73LxmWjiVOcsivnYYY2TIJjfoAyPm5zpekIrpIYdD1dRIHKIthENfuVPKEw
yE1v+TtbT6YFkOKyZQTS+6FEoWSQcP4F+ohn2nSbfsivcFXkyjSp+u8cq6SE+lEK
4NUY3ldyrn4SBUA3dmm2Z8uewUMs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:35 2025 by rpki-client