Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921903C0316811F0BDD90C8CDAE4EC9C.roa
File: 921903C0316811F0BDD90C8CDAE4EC9C.roa (raw, json)
Hash identifier: MldRAg2RURK8BFFjGKlVXSWhEGXP+opuS2Bj/Tcixto=
Subject key identifier: 07:FC:85:1E:AB:4F:DF:EC:73:74:65:03:4F:F8:26:E2:EE:2C:DA:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015499
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921903C0316811F0BDD90C8CDAE4EC9C.roa
Signing time: Thu 15 May 2025 08:42:45 +0000
ROA not before: Thu 15 May 2025 08:42:40 +0000
ROA not after: Tue 24 Jun 2025 08:42:40 +0000
asID: 400619
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87193 (0x15499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 08:42:40 2025 GMT
Not After : Jun 24 08:42:40 2025 GMT
Subject: CN=6825a905-d602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:20:30:10:ec:f3:54:32:d2:9c:3e:7d:67:
e7:cc:ec:e7:70:b2:1a:d2:97:58:41:06:cc:80:2e:
39:a9:b2:cb:02:ae:1e:dc:cb:33:9e:a6:97:7f:60:
41:fe:44:2c:bb:4e:c5:73:66:75:84:8c:12:8e:d3:
50:11:d4:c3:51:57:b4:02:21:e0:ca:a8:af:4d:4b:
3e:7a:a9:7f:94:87:06:f3:74:22:f8:b0:7f:ce:11:
e2:2b:79:e0:dd:8d:e6:12:21:12:a4:f9:db:98:b9:
60:13:74:1e:b0:fe:05:03:e9:2e:ba:ec:fa:e3:9d:
27:d5:d0:39:db:93:9f:58:f9:ef:6b:08:7c:2d:07:
e3:99:ec:e0:51:b1:6b:6f:31:31:b7:67:49:9f:f3:
17:3b:06:10:e6:6a:f2:61:46:5d:37:23:e2:88:34:
2a:41:84:40:a7:33:12:39:16:6e:2c:20:ce:98:78:
48:89:b8:2e:76:c1:d5:22:b6:b9:37:a0:1e:e0:88:
38:0c:99:f3:fb:e3:5d:80:08:31:19:86:a3:8a:e1:
1b:a5:5e:49:f9:3f:f0:d7:fd:7d:e9:67:9a:3b:c2:
23:99:ea:8b:b9:b8:23:66:50:ff:f6:f1:f0:ec:c6:
90:79:95:fd:55:ac:69:52:b0:e2:be:7a:26:55:54:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:85:1E:AB:4F:DF:EC:73:74:65:03:4F:F8:26:E2:EE:2C:DA:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921903C0316811F0BDD90C8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
8d:d4:d4:99:b3:d1:7b:bf:2a:f2:8f:9a:8c:64:4e:8f:92:8b:
ba:b6:43:30:12:a5:bd:3a:c8:ad:88:46:eb:bc:04:aa:1f:42:
ec:d6:5f:48:76:b2:01:db:63:d0:2d:1d:80:36:fc:56:b2:05:
c3:1d:02:c6:48:03:6f:d8:79:c3:7b:e1:7b:e9:cf:74:19:ff:
33:ae:ab:6c:76:71:3a:39:fa:6a:aa:db:c0:a7:2b:b1:1a:1b:
36:d8:2e:e9:88:16:f2:a3:1e:16:9f:a7:d2:94:83:5e:c8:cc:
79:2f:eb:6a:c8:52:58:9b:fd:3d:9a:73:1d:89:6b:10:ac:cc:
5c:0e:c2:ca:52:ec:a8:57:2f:f5:03:cb:08:c0:83:5f:04:83:
76:ad:55:28:6f:95:13:22:db:70:c7:d0:57:33:02:2a:ea:d5:
2a:05:5b:e6:0e:6a:55:3b:4e:e0:a8:d9:8e:22:db:1e:6d:5d:
56:d6:26:b9:b1:9c:33:97:73:41:f8:c7:5e:cd:66:fa:60:c2:
6a:21:68:3c:74:83:d6:85:65:cd:e8:36:88:43:73:76:6f:a9:
96:03:fa:44:4f:ae:8c:74:e2:b6:1e:6b:25:18:2d:e2:15:79:
70:9e:08:a5:a1:91:47:08:5c:3b:2a:65:14:63:48:f5:da:ba:
a8:3a:ac:92
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVSZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE1MDg0MjQwWhcNMjUwNjI0MDg0MjQwWjAYMRYw
FAYDVQQDEw02ODI1YTkwNS1kNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA94QgMBDs81Qy0pw+fWfnzOzncLIa0pdYQQbMgC45qbLLAq4e3MsznqaX
f2BB/kQsu07Fc2Z1hIwSjtNQEdTDUVe0AiHgyqivTUs+eql/lIcG83Qi+LB/zhHi
K3ng3Y3mEiESpPnbmLlgE3QesP4FA+kuuuz6450n1dA525OfWPnvawh8LQfjmezg
UbFrbzExt2dJn/MXOwYQ5mryYUZdNyPiiDQqQYRApzMSORZuLCDOmHhIibgudsHV
Ira5N6Ae4Ig4DJnz++NdgAgxGYajiuEbpV5J+T/w1/196WeaO8IjmeqLubgjZlD/
9vHw7MaQeZX9VaxpUrDivnomVVSdXwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAf8
hR6rT9/sc3RlA0/4JuLuLNowMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjE5MDNDMDMxNjgxMUYwQkREOTBDOENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOc7xgDBAGc7zQwDQYJKoZI
hvcNAQELBQADggEBAI3U1Jmz0Xu/KvKPmoxkTo+Si7q2QzASpb06yK2IRuu8BKof
QuzWX0h2sgHbY9AtHYA2/FayBcMdAsZIA2/YecN74Xvpz3QZ/zOuq2x2cTo5+mqq
28CnK7EaGzbYLumIFvKjHhafp9KUg17IzHkv62rIUlib/T2acx2JaxCszFwOwspS
7KhXL/UDywjAg18Eg3atVShvlRMi23DH0FczAirq1SoFW+YOalU7TuCo2Y4i2x5t
XVbWJrmxnDOXc0H4x17NZvpgwmohaDx0g9aFZc3oNohDc3ZvqZYD+kRProx04rYe
ayUYLeIVeXCeCKWhkUcIXDsqZRRjSPXauqg6rJI=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:30:56 2025 by rpki-client