Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80C57D8317011F083A140C0DAE4EC9C.roa
File: A80C57D8317011F083A140C0DAE4EC9C.roa (raw, json)
Hash identifier: bQpiqQP9o9QyGm+6jdJvBIZCFAz1NGrb+nTuaUAtP58=
Subject key identifier: 87:D7:CA:E5:D3:57:E4:74:85:99:51:86:09:38:ED:C3:DF:A2:32:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01549B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80C57D8317011F083A140C0DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:40:38 +0000
ROA not before: Thu 15 May 2025 09:40:33 +0000
ROA not after: Tue 24 Jun 2025 09:40:33 +0000
asID: 142032
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87195 (0x1549b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 09:40:33 2025 GMT
Not After : Jun 24 09:40:33 2025 GMT
Subject: CN=6825b696-975b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:7f:1b:89:e6:11:25:b3:2d:ae:2c:76:87:
9c:33:20:8b:ec:86:62:f0:62:e8:02:be:ed:63:dd:
3a:76:a8:8e:a4:76:ad:7e:8b:53:75:07:cf:9e:a7:
33:7f:02:c3:27:6c:81:bd:e5:b2:a9:0e:49:e8:25:
df:e3:d6:b9:8d:6d:e9:14:ec:98:40:47:d2:1a:49:
71:6d:43:96:e8:11:17:32:28:1c:8d:7d:97:21:f9:
03:f6:d0:e2:5f:0e:69:7f:d9:d3:ea:04:5d:74:d3:
61:1a:c8:9f:b9:09:76:07:2f:6e:10:4b:0a:d1:53:
b6:04:ff:db:d5:b4:d7:8a:9e:1a:ff:c5:0e:a0:6b:
31:c7:cc:97:6f:97:be:25:9e:8b:4a:f7:c1:2f:af:
4b:4e:0f:7d:4e:4e:78:4c:fa:49:9b:55:22:ae:57:
35:a7:ff:29:03:04:15:c4:d0:e6:5b:26:b3:56:cd:
98:e6:00:26:e9:83:9c:ec:94:7b:5b:5b:01:00:56:
e2:df:d3:56:05:27:6d:1c:a6:0c:c5:81:61:da:2a:
08:1e:26:9b:d7:8c:21:ec:3a:06:c0:38:9d:12:ef:
58:f2:e4:c1:79:b7:f4:46:d7:14:27:49:7f:09:39:
9d:c9:95:d0:86:94:ec:db:77:92:1e:3d:17:5e:93:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:CA:E5:D3:57:E4:74:85:99:51:86:09:38:ED:C3:DF:A2:32:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80C57D8317011F083A140C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c8:d7:6b:be:14:2a:71:fe:20:1b:dc:9f:96:07:09:b7:cf:
fb:fe:e6:d6:f7:65:99:db:1c:1a:c4:07:ef:b2:3c:b3:e9:4b:
a2:e1:b3:24:00:f6:c2:a3:e7:7c:15:fc:fe:3a:ba:f2:5f:91:
0d:33:fa:7a:0d:4e:e9:04:03:50:1f:f5:1b:3b:52:d1:bf:2b:
0d:f4:27:0c:08:8a:2b:9e:82:3d:4e:6e:2b:50:8c:18:dc:c4:
0b:c3:f8:f2:3b:a1:c6:5d:d7:c2:2e:48:18:69:66:87:73:0d:
ea:f8:14:71:69:8a:2e:11:85:6b:84:e2:f5:00:93:6a:47:da:
b8:af:b0:fa:cc:6a:ea:2b:ac:2c:13:a4:58:1b:89:1a:f2:2c:
1b:a8:3a:2f:74:e6:25:b7:3d:67:91:b0:10:56:8c:77:0e:25:
44:3c:4a:8d:83:4d:12:1a:83:92:92:17:09:17:49:37:ad:4a:
c9:60:b9:40:f6:e7:fa:0a:58:cf:b4:73:fc:51:81:fb:dc:89:
d6:6d:fa:c9:ac:96:77:0b:d6:4d:d3:71:01:36:c7:b1:98:0d:
59:0c:ea:d6:45:d0:07:f2:4d:f7:a7:19:ae:1c:7d:ec:b6:8d:
d4:5f:a1:8f:f5:df:10:44:d2:44:1d:01:13:3f:f0:6c:62:33:
84:f6:e6:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVSbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE1MDk0MDMzWhcNMjUwNjI0MDk0MDMzWjAYMRYw
FAYDVQQDEw02ODI1YjY5Ni05NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzx1/G4nmESWzLa4sdoecMyCL7IZi8GLoAr7tY906dqiOpHatfotTdQfP
nqczfwLDJ2yBveWyqQ5J6CXf49a5jW3pFOyYQEfSGklxbUOW6BEXMigcjX2XIfkD
9tDiXw5pf9nT6gRddNNhGsifuQl2By9uEEsK0VO2BP/b1bTXip4a/8UOoGsxx8yX
b5e+JZ6LSvfBL69LTg99Tk54TPpJm1Uirlc1p/8pAwQVxNDmWyazVs2Y5gAm6YOc
7JR7W1sBAFbi39NWBSdtHKYMxYFh2ioIHiab14wh7DoGwDidEu9Y8uTBebf0RtcU
J0l/CTmdyZXQhpTs23eSHj0XXpO0iQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIfX
yuXTV+R0hZlRhgk47cPfojJ1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODBDNTdEODMxNzAxMUYwODNBMTQwQzBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO80MA0GCSqGSIb3DQEBCwUA
A4IBAQAiyNdrvhQqcf4gG9yflgcJt8/7/ubW92WZ2xwaxAfvsjyz6Uui4bMkAPbC
o+d8Ffz+OrryX5ENM/p6DU7pBANQH/UbO1LRvysN9CcMCIornoI9Tm4rUIwY3MQL
w/jyO6HGXdfCLkgYaWaHcw3q+BRxaYouEYVrhOL1AJNqR9q4r7D6zGrqK6wsE6RY
G4ka8iwbqDovdOYltz1nkbAQVox3DiVEPEqNg00SGoOSkhcJF0k3rUrJYLlA9uf6
CljPtHP8UYH73InWbfrJrJZ3C9ZN03EBNsexmA1ZDOrWRdAH8k33pxmuHH3sto3U
X6GP9d8QRNJEHQETP/BsYjOE9uZM
-----END CERTIFICATE-----
Generated at Thu Jun 5 02:29:57 2025 by rpki-client