Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98579B48356E11F091598EF3DAE4EC9C.roa
File: 98579B48356E11F091598EF3DAE4EC9C.roa (raw, json)
Hash identifier: 4lN//VU89M9LzIjSSp5O+Y+H1Yk8MxpNW2cT36AwS40=
Subject key identifier: 4F:09:94:22:03:27:D9:19:8D:65:BE:E9:F7:5A:FF:76:D7:90:C1:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015646
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98579B48356E11F091598EF3DAE4EC9C.roa
Signing time: Tue 20 May 2025 11:35:57 +0000
ROA not before: Tue 20 May 2025 11:35:50 +0000
ROA not after: Fri 27 Jun 2025 11:35:50 +0000
asID: 48031
IP address blocks: 156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87622 (0x15646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:35:50 2025 GMT
Not After : Jun 27 11:35:50 2025 GMT
Subject: CN=682c691d-b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:45:a0:26:52:32:34:f7:5f:27:4b:8e:6d:
74:80:99:52:e4:5a:a0:46:9f:2b:e8:d2:42:82:72:
09:0b:b4:81:dd:d3:bf:90:d2:e4:6e:ad:e1:d5:82:
e4:ab:1e:2a:58:fe:8e:fe:ec:15:ac:c4:6c:77:42:
02:c1:a1:24:c7:5a:60:5a:0f:97:b0:de:5b:2f:0a:
79:9a:6b:0c:5f:bd:e1:9a:64:0b:9e:6a:e3:93:bb:
54:5f:3c:a0:16:08:ab:b4:20:a9:32:75:b6:e7:69:
f2:82:50:93:20:6a:e7:5c:e4:5e:e7:f2:5f:ce:98:
3d:4f:ec:a2:d5:ef:5f:9a:9b:81:6b:45:48:60:ef:
8f:60:6b:03:f2:bc:22:81:09:da:be:07:e0:1c:e9:
83:c9:f9:56:36:db:72:24:ab:0b:77:f1:75:aa:64:
05:06:c7:3c:22:72:ca:1c:e3:6d:f4:ef:67:5d:cb:
ba:11:74:5c:5c:c3:bb:79:2d:06:67:03:d3:c7:13:
c2:86:eb:37:b1:f9:84:30:f3:af:c2:a5:0a:d5:9b:
30:21:a0:6e:7a:62:4e:c5:9a:83:e9:1b:37:76:ca:
c8:d8:2e:ef:33:91:3c:7f:5e:0b:dc:c6:26:9d:bc:
02:61:87:b9:4a:f4:14:1b:b4:b5:57:d8:59:43:e7:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:94:22:03:27:D9:19:8D:65:BE:E9:F7:5A:FF:76:D7:90:C1:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98579B48356E11F091598EF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.140.0/23
Signature Algorithm: sha256WithRSAEncryption
08:9c:ad:a9:57:b2:a0:bd:70:bd:e7:f4:6d:11:89:ea:ca:d0:
cf:78:81:d2:2f:aa:63:e3:72:ee:e8:ae:d2:41:b4:c9:b9:b0:
5e:6d:23:c8:2a:6d:2b:9f:00:10:d3:d3:bd:46:b9:e2:1b:39:
0e:ca:d1:70:10:c0:95:07:34:a7:ff:15:af:69:76:0d:a3:1f:
7a:6f:76:97:6f:74:ca:01:72:5d:7d:53:d0:dd:fa:a8:fa:c1:
42:0b:df:8a:82:21:d5:5f:48:58:a2:d4:73:13:f4:b8:89:71:
14:ff:5d:ea:43:0f:fa:52:5d:e3:2d:32:f6:f3:f5:27:90:e8:
8c:c6:57:96:ee:7e:70:af:ab:39:fe:2a:82:42:0b:46:73:1b:
da:b9:48:93:4d:e0:3a:57:71:53:59:f4:b0:8b:a5:1f:6e:1b:
7e:8b:fa:b2:ed:54:52:b3:ac:f7:15:54:17:01:88:a1:f3:20:
40:e3:43:eb:84:44:ba:e4:d4:bf:c3:8b:6f:ae:e4:a1:5c:dc:
62:9f:44:23:8b:cb:45:38:76:31:cc:2c:0d:ef:70:24:ff:ea:
f7:79:7c:db:63:00:fb:db:30:b2:7e:8a:d4:1a:05:aa:7a:3f:
30:f7:99:41:8d:70:11:f7:a2:21:80:0b:ae:29:d8:15:79:e5:
d5:89:b1:d6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVZGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIwMTEzNTUwWhcNMjUwNjI3MTEzNTUwWjAYMRYw
FAYDVQQDEw02ODJjNjkxZC1iODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1dRFoCZSMjT3XydLjm10gJlS5FqgRp8r6NJCgnIJC7SB3dO/kNLkbq3h
1YLkqx4qWP6O/uwVrMRsd0ICwaEkx1pgWg+XsN5bLwp5mmsMX73hmmQLnmrjk7tU
XzygFgirtCCpMnW252nyglCTIGrnXORe5/Jfzpg9T+yi1e9fmpuBa0VIYO+PYGsD
8rwigQnavgfgHOmDyflWNttyJKsLd/F1qmQFBsc8InLKHONt9O9nXcu6EXRcXMO7
eS0GZwPTxxPChus3sfmEMPOvwqUK1ZswIaBuemJOxZqD6Rs3dsrI2C7vM5E8f14L
3MYmnbwCYYe5SvQUG7S1V9hZQ+cOAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE8J
lCIDJ9kZjWW+6fda/3bXkMHVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85ODU3OUI0ODM1NkUxMUYwOTE1OThFRjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPaMMA0GCSqGSIb3DQEBCwUA
A4IBAQAInK2pV7KgvXC95/RtEYnqytDPeIHSL6pj43Lu6K7SQbTJubBebSPIKm0r
nwAQ09O9RrniGzkOytFwEMCVBzSn/xWvaXYNox96b3aXb3TKAXJdfVPQ3fqo+sFC
C9+KgiHVX0hYotRzE/S4iXEU/13qQw/6Ul3jLTL28/UnkOiMxleW7n5wr6s5/iqC
QgtGcxvauUiTTeA6V3FTWfSwi6Ufbht+i/qy7VRSs6z3FVQXAYih8yBA40PrhES6
5NS/w4tvruShXNxin0Qji8tFOHYxzCwN73Ak/+r3eXzbYwD72zCyforUGgWqej8w
95lBjXAR96IhgAuuKdgVeeXVibHW
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:49:23 2025 by rpki-client