Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1E67042333611F0A19C3B99DAE4EC9C.roa
File: A1E67042333611F0A19C3B99DAE4EC9C.roa (raw, json)
Hash identifier: V4GMRvzq6l5iMjZbHLtCPuD4hbxlUn9/+czhT/asJDc=
Subject key identifier: 48:11:1C:1E:61:80:05:E1:62:72:79:0B:33:AC:69:97:5D:7E:66:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01559F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1E67042333611F0A19C3B99DAE4EC9C.roa
Signing time: Sat 17 May 2025 15:50:19 +0000
ROA not before: Sat 17 May 2025 15:50:14 +0000
ROA not after: Tue 16 Jun 2026 15:50:14 +0000
asID: 984
IP address blocks: 156.242.68.0/24 maxlen: 24
156.242.69.0/24 maxlen: 24
156.242.70.0/24 maxlen: 24
156.242.71.0/24 maxlen: 24
156.242.72.0/24 maxlen: 24
156.242.73.0/24 maxlen: 24
156.242.74.0/24 maxlen: 24
156.242.75.0/24 maxlen: 24
156.242.76.0/24 maxlen: 24
156.242.77.0/24 maxlen: 24
156.242.78.0/24 maxlen: 24
156.242.79.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.83.0/24 maxlen: 24
156.242.85.0/24 maxlen: 24
156.242.86.0/24 maxlen: 24
156.242.87.0/24 maxlen: 24
156.242.88.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87455 (0x1559f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 15:50:14 2025 GMT
Not After : Jun 16 15:50:14 2026 GMT
Subject: CN=6828b03b-bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:97:1d:23:83:a1:79:10:bd:7c:ef:4d:2b:
22:5e:f1:50:d5:0d:99:77:f7:95:b4:08:4f:a7:52:
a4:d8:a6:5a:f4:db:5f:62:73:e6:16:6d:49:66:65:
c7:93:79:19:3e:73:f6:6f:c3:b6:69:cc:5a:1b:e4:
a0:09:c7:43:62:a4:c0:a4:d3:5a:01:81:c2:7d:f9:
97:d5:55:b1:76:0c:65:ac:2e:a2:ba:b2:77:74:41:
57:df:95:1a:f1:39:8a:a9:d9:82:60:0d:3e:73:ef:
ea:cf:7f:83:1a:f8:21:dc:a9:15:71:d3:ae:ab:43:
52:53:eb:ff:95:4a:47:35:db:9e:a4:be:18:4d:38:
15:23:ae:8a:47:2b:ff:89:e9:01:f6:5e:8e:4f:fa:
82:09:df:a3:44:22:d1:bf:ae:dc:9e:40:cb:f0:98:
d7:78:53:42:4a:31:46:b6:5c:7e:97:1d:d0:5c:0f:
96:80:be:b5:6a:e8:e5:a7:03:a6:53:d4:4a:ab:e8:
6e:2e:e6:11:77:4b:92:e8:86:96:aa:45:00:4c:e2:
ff:8b:57:b3:a1:e7:8b:14:0a:b7:25:82:7f:f6:2c:
d3:75:df:ed:41:ef:a8:e7:2f:bf:5a:e1:9a:c7:3e:
ff:e6:e7:05:bd:62:b0:f0:12:e3:40:56:e9:db:8b:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:1C:1E:61:80:05:E1:62:72:79:0B:33:AC:69:97:5D:7E:66:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1E67042333611F0A19C3B99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.68.0-156.242.80.255
156.242.83.0/24
156.242.85.0-156.242.90.255
Signature Algorithm: sha256WithRSAEncryption
50:bc:ae:a1:2f:7f:3b:be:6a:e6:00:dd:e5:9f:51:40:6a:a3:
fc:07:54:aa:5a:db:10:0d:af:99:f5:fd:12:53:9c:7e:57:77:
3a:94:a2:e9:e7:2d:7d:5d:c4:22:c7:06:e5:56:66:c1:de:2e:
30:74:06:3a:c6:1f:2b:d8:6a:86:35:a5:96:d1:81:ce:28:cb:
6e:7c:8e:1a:f7:3c:a0:cb:e1:b4:f7:ac:13:62:46:70:c7:07:
c9:f6:f4:3a:a0:e6:92:48:5d:ad:9c:00:a5:f8:df:5d:aa:27:
e6:86:ec:87:46:f9:c3:76:e5:25:cb:82:d2:f8:3e:dc:df:39:
4b:15:c7:a3:3d:92:26:0f:b2:71:93:18:66:17:3c:a5:70:2c:
7c:92:64:38:eb:a6:c3:21:62:27:0a:67:89:79:2f:6e:95:b0:
46:1a:6f:59:9e:76:b3:14:88:6d:f7:0a:8b:b1:3a:75:9f:33:
44:58:a0:fa:0b:1e:1b:b1:53:06:75:39:0d:88:30:d0:ff:e3:
c6:cd:eb:62:49:c8:fe:6d:dd:22:3f:05:c0:c5:db:20:3d:0b:
73:2e:93:04:59:91:9d:54:14:14:2c:15:f5:33:25:22:b2:5e:
49:dc:ad:c4:a5:67:92:09:c9:14:40:cf:9f:e4:74:75:08:db:
7b:10:d6:09
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAVWfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE3MTU1MDE0WhcNMjYwNjE2MTU1MDE0WjAYMRYw
FAYDVQQDEw02ODI4YjAzYi1iZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3SOXHSODoXkQvXzvTSsiXvFQ1Q2Zd/eVtAhPp1Kk2KZa9NtfYnPmFm1J
ZmXHk3kZPnP2b8O2acxaG+SgCcdDYqTApNNaAYHCffmX1VWxdgxlrC6iurJ3dEFX
35Ua8TmKqdmCYA0+c+/qz3+DGvgh3KkVcdOuq0NSU+v/lUpHNduepL4YTTgVI66K
Ryv/iekB9l6OT/qCCd+jRCLRv67cnkDL8JjXeFNCSjFGtlx+lx3QXA+WgL61aujl
pwOmU9RKq+huLuYRd0uS6IaWqkUATOL/i1ezoeeLFAq3JYJ/9izTdd/tQe+o5y+/
WuGaxz7/5ucFvWKw8BLjQFbp24sZJQIDAQABo4ICvjCCArowHQYDVR0OBBYEFEgR
HB5hgAXhYnJ5CzOsaZddfmb0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUU2NzA0MjMzMzYxMUYwQTE5QzNCOTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAKc8kQDBACc8lADBACc8lMw
DAMEAJzyVQMEAJzyWjANBgkqhkiG9w0BAQsFAAOCAQEAULyuoS9/O75q5gDd5Z9R
QGqj/AdUqlrbEA2vmfX9ElOcfld3OpSi6ectfV3EIscG5VZmwd4uMHQGOsYfK9hq
hjWlltGBzijLbnyOGvc8oMvhtPesE2JGcMcHyfb0OqDmkkhdrZwApfjfXaon5obs
h0b5w3blJcuC0vg+3N85SxXHoz2SJg+ycZMYZhc8pXAsfJJkOOumwyFiJwpniXkv
bpWwRhpvWZ52sxSIbfcKi7E6dZ8zRFig+gseG7FTBnU5DYgw0P/jxs3rYknI/m3d
Ij8FwMXbID0Lcy6TBFmRnVQUFCwV9TMlIrJeSdytxKVnkgnJFEDPn+R0dQjbexDW
CQ==
-----END CERTIFICATE-----
Generated at Tue Jun 3 09:04:48 2025 by rpki-client