Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A292A1A2CC511F090E74C83DAE4EC9C.roa
File: 9A292A1A2CC511F090E74C83DAE4EC9C.roa (raw, json)
Hash identifier: E7nQavfPZPGgncv9FnWPzij7MDHGUwPrPuqptgaiNYg=
Subject key identifier: 0E:F6:FA:1F:9A:96:4F:B0:DA:3B:B3:44:B3:FD:D4:D6:AD:5A:7A:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01531D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A292A1A2CC511F090E74C83DAE4EC9C.roa
Signing time: Fri 09 May 2025 11:06:06 +0000
ROA not before: Fri 09 May 2025 11:06:01 +0000
ROA not after: Sun 09 Nov 2025 11:06:01 +0000
asID: 17561
IP address blocks: 156.228.5.0/24 maxlen: 24
156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
156.228.28.0/22 maxlen: 24
156.228.32.0/20 maxlen: 24
156.228.56.0/22 maxlen: 24
156.228.60.0/23 maxlen: 24
156.228.64.0/21 maxlen: 24
156.228.72.0/22 maxlen: 24
156.228.132.0/22 maxlen: 24
156.228.136.0/23 maxlen: 24
156.228.196.0/22 maxlen: 24
156.228.200.0/23 maxlen: 24
156.228.204.0/22 maxlen: 24
156.228.212.0/22 maxlen: 24
156.228.216.0/21 maxlen: 24
156.228.224.0/21 maxlen: 24
156.228.234.0/23 maxlen: 24
156.228.236.0/22 maxlen: 24
156.228.240.0/21 maxlen: 24
156.228.248.0/23 maxlen: 24
156.228.252.0/22 maxlen: 24
156.230.17.0/24 maxlen: 24
156.246.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86813 (0x1531d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 11:06:01 2025 GMT
Not After : Nov 9 11:06:01 2025 GMT
Subject: CN=681de19e-4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:0b:06:be:c6:19:bf:4c:36:5a:f2:14:2b:
16:f6:b3:a0:66:af:9e:bc:55:29:e7:a9:1e:47:aa:
5c:ee:63:10:bb:6f:61:98:e8:d9:f4:93:cd:38:47:
41:73:54:22:fd:df:39:f5:68:15:10:07:e5:5e:6c:
6b:84:ba:d0:ab:10:01:e2:8f:de:69:0f:2c:22:a1:
3d:61:3b:50:3d:f3:50:60:51:3d:97:ce:ee:d6:0d:
23:f1:88:89:34:d6:ab:cf:5d:77:b1:34:7a:04:b7:
af:dd:2b:0a:66:23:b7:cb:b2:94:ac:84:fc:67:8d:
af:2c:99:c2:0a:2c:4b:bd:ef:f9:1e:be:e0:ee:64:
c9:91:93:88:06:9f:cf:ba:14:45:1c:b1:f1:5e:a4:
be:bd:85:04:fe:d7:40:1c:91:6a:fd:2c:4e:ae:58:
17:c8:c9:4a:52:d3:9a:ec:23:d2:b4:0c:1c:d2:66:
d7:cd:57:f7:d3:41:c5:8f:0d:45:74:af:f6:bf:ab:
b9:4e:c7:f3:57:d3:9a:96:2d:9a:66:a2:0d:67:36:
c2:f9:01:0a:fc:3e:6e:f1:b5:f9:55:bf:80:d8:b2:
80:68:6e:01:2d:44:37:9b:55:ec:9e:43:24:33:ce:
f2:58:de:c0:f7:78:fb:dc:49:b6:ae:fb:aa:ed:3a:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:FA:1F:9A:96:4F:B0:DA:3B:B3:44:B3:FD:D4:D6:AD:5A:7A:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A292A1A2CC511F090E74C83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.228.7.0/24
156.228.9.0/24
156.228.28.0-156.228.47.255
156.228.56.0-156.228.61.255
156.228.64.0-156.228.75.255
156.228.132.0-156.228.137.255
156.228.196.0-156.228.201.255
156.228.204.0/22
156.228.212.0-156.228.231.255
156.228.234.0-156.228.249.255
156.228.252.0/22
156.230.17.0/24
156.246.28.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ea:0c:c3:4d:77:0f:4b:22:c7:90:84:32:ad:bf:6b:e5:6a:
d8:80:f6:40:7c:09:34:f6:9c:6d:94:51:9e:ea:93:fe:cb:cb:
d6:fa:b0:ff:6a:c2:ad:cc:7f:cf:2f:08:0a:59:8a:be:a6:16:
00:97:4b:8b:c0:2d:29:60:57:db:25:71:f4:9d:13:1f:ea:dd:
8c:96:bc:d5:09:ab:33:2e:b8:18:3b:00:72:ab:aa:75:f9:be:
80:e8:4e:59:6a:b6:71:00:c9:52:41:18:d0:be:66:91:ff:50:
c2:a8:fc:7a:75:05:d4:a2:b5:34:49:f2:5a:e6:8c:f5:4a:f9:
6d:d6:10:a2:b4:1f:cc:47:e2:45:8b:62:91:6b:57:93:0d:8d:
a6:11:0a:09:44:af:80:31:0c:f7:9c:c9:22:e7:bd:03:2b:a6:
63:98:75:d9:dc:9d:8a:e3:9f:7d:2b:60:3f:b4:ee:f6:92:96:
fd:e1:bd:6e:e5:7e:12:7b:45:41:b0:26:2b:e6:bb:46:0d:80:
21:d9:08:84:14:d4:0c:ed:0d:49:02:1d:48:07:e7:a8:25:2d:
7d:06:17:68:55:37:59:2a:e9:0e:3d:f8:7c:3f:51:ed:4d:1f:
4c:15:e6:bd:88:48:9b:cf:bc:43:01:88:d1:1c:aa:2d:d0:30:
c7:f5:28:d9
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIDAVMdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA5MTEwNjAxWhcNMjUxMTA5MTEwNjAxWjAYMRYw
FAYDVQQDEw02ODFkZTE5ZS00YjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApvELBr7GGb9MNlryFCsW9rOgZq+evFUp56keR6pc7mMQu29hmOjZ9JPN
OEdBc1Qi/d859WgVEAflXmxrhLrQqxAB4o/eaQ8sIqE9YTtQPfNQYFE9l87u1g0j
8YiJNNarz113sTR6BLev3SsKZiO3y7KUrIT8Z42vLJnCCixLve/5Hr7g7mTJkZOI
Bp/PuhRFHLHxXqS+vYUE/tdAHJFq/SxOrlgXyMlKUtOa7CPStAwc0mbXzVf300HF
jw1FdK/2v6u5TsfzV9Oali2aZqINZzbC+QEK/D5u8bX5Vb+A2LKAaG4BLUQ3m1Xs
nkMkM87yWN7A93j73Em2rvuq7Tra4wIDAQABo4IDLTCCAykwHQYDVR0OBBYEFA72
+h+alk+w2juzRLP91NatWnr2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTI5MkExQTJDQzUxMUYwOTBFNzRDODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBACc5AUDBACc5AcDBACc
5AkwDAMEApzkHAMEBJzkIDAMAwQDnOQ4AwQBnOQ8MAwDBAac5EADBAKc5EgwDAME
ApzkhAMEAZzkiDAMAwQCnOTEAwQBnOTIAwQCnOTMMAwDBAKc5NQDBAOc5OAwDAME
AZzk6gMEAZzk+AMEApzk/AMEAJzmEQMEAJz2HDANBgkqhkiG9w0BAQsFAAOCAQEA
COoMw013D0six5CEMq2/a+Vq2ID2QHwJNPacbZRRnuqT/svL1vqw/2rCrcx/zy8I
ClmKvqYWAJdLi8AtKWBX2yVx9J0TH+rdjJa81QmrMy64GDsAcquqdfm+gOhOWWq2
cQDJUkEY0L5mkf9Qwqj8enUF1KK1NEnyWuaM9Ur5bdYQorQfzEfiRYtikWtXkw2N
phEKCUSvgDEM95zJIue9AyumY5h12dydiuOffStgP7Tu9pKW/eG9buV+EntFQbAm
K+a7Rg2AIdkIhBTUDO0NSQIdSAfnqCUtfQYXaFU3WSrpDj34fD9R7U0fTBXmvYhI
m8+8QwGI0RyqLdAwx/Uo2Q==
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:28:51 2025 by rpki-client