Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9271900106E11F09C442989762E951A.roa
File: A9271900106E11F09C442989762E951A.roa (raw, json)
Hash identifier: 9hPhiN+eFkLPgt9sWRijv7tWpqcQJTTu0g7jf+DNsE0=
Subject key identifier: 19:BB:BA:7F:93:A1:7F:89:05:BC:F8:A4:7B:6D:D8:BE:96:C6:28:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9271900106E11F09C442989762E951A.roa
Signing time: Thu 03 Apr 2025 09:33:12 +0000
ROA not before: Thu 03 Apr 2025 09:33:08 +0000
ROA not after: Sat 12 Apr 2025 09:33:08 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84384 (0x149a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 09:33:08 2025 GMT
Not After : Apr 12 09:33:08 2025 GMT
Subject: CN=67ee55d8-9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:46:e9:73:aa:e8:cd:92:b5:44:d5:85:c4:
ac:df:a8:67:6c:78:ca:13:e2:28:c8:bc:ef:ce:d0:
e9:dd:42:7b:cb:36:84:9d:1b:df:2e:10:29:24:64:
24:21:4c:d0:34:67:03:43:fa:9e:8c:f0:56:db:de:
d0:fb:23:c9:17:41:88:fa:8b:44:9c:58:cd:14:2d:
09:bd:19:ed:87:65:5f:51:2f:60:5c:6e:47:cc:0d:
60:ef:87:f7:43:6f:94:94:96:41:fb:9d:6e:57:74:
4f:0d:27:d2:e5:b8:9b:6e:d8:e5:1c:a1:71:ae:e1:
08:82:78:7f:a4:09:53:7e:23:78:34:f1:9d:a3:92:
f6:1e:0e:a2:85:a7:7c:11:79:da:c1:35:dc:cf:ff:
8c:d0:c6:f9:99:cf:84:d6:df:b7:27:03:2b:38:d9:
e1:d6:19:6f:03:66:09:86:17:21:55:53:5c:53:cd:
36:18:1e:1a:b2:86:d5:66:42:f8:4d:a7:57:18:f5:
9f:84:0a:5b:3a:ca:5a:d8:4a:ba:9a:9d:28:3f:71:
f9:01:9a:e5:5f:d6:40:b2:f5:f7:2c:1f:fe:59:65:
a9:ac:58:20:a6:b8:37:18:21:a4:4e:b9:3f:de:8b:
a8:5b:60:44:eb:bc:1c:31:ff:95:ff:36:0c:9a:4e:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:BA:7F:93:A1:7F:89:05:BC:F8:A4:7B:6D:D8:BE:96:C6:28:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9271900106E11F09C442989762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:0a:56:d1:08:46:5e:49:1f:d7:79:d4:cc:3f:98:45:8e:ec:
0c:1b:fc:0d:90:68:cd:df:b8:72:20:6b:00:6a:62:32:eb:1a:
fb:ee:7d:2d:9c:df:f2:96:c7:03:e7:b1:d7:86:87:6a:f1:fe:
bd:ae:6d:d7:d0:3e:3e:34:13:fd:fb:c8:81:25:d7:59:ad:05:
5b:de:88:74:2c:71:5a:87:8a:51:38:fe:5c:5b:08:ee:71:fb:
19:47:d4:04:e3:d8:ab:c2:43:54:b9:2e:64:1f:88:36:d6:9a:
ea:c3:22:9f:64:9d:ed:d5:7c:7f:d7:52:b5:c4:7a:ed:73:70:
e7:a8:b6:64:a1:d5:08:4e:5f:04:f7:39:6b:91:ec:51:b9:3b:
2c:27:3a:d0:16:ea:11:92:3f:05:09:fb:5c:e7:ae:d1:b4:ae:
3e:76:bb:4d:c2:89:de:a2:81:ea:12:9b:86:b5:fe:26:28:03:
bc:11:34:d0:c1:fa:a2:16:a6:76:41:0e:ca:09:c0:83:50:5f:
0c:a5:50:38:1b:ba:a7:07:1f:bb:10:bc:dd:1a:b2:53:b2:26:
e5:59:59:e2:99:c2:85:ec:32:9c:09:ef:dd:d9:9e:43:ff:f7:
2a:5a:c2:b1:18:1c:79:69:bb:9f:ad:61:e8:77:41:db:63:f1:
61:e8:80:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUmgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAzMDkzMzA4WhcNMjUwNDEyMDkzMzA4WjAYMRYw
FAYDVQQDEw02N2VlNTVkOC05YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt6RG6XOq6M2StUTVhcSs36hnbHjKE+IoyLzvztDp3UJ7yzaEnRvfLhAp
JGQkIUzQNGcDQ/qejPBW297Q+yPJF0GI+otEnFjNFC0JvRnth2VfUS9gXG5HzA1g
74f3Q2+UlJZB+51uV3RPDSfS5bibbtjlHKFxruEIgnh/pAlTfiN4NPGdo5L2Hg6i
had8EXnawTXcz/+M0Mb5mc+E1t+3JwMrONnh1hlvA2YJhhchVVNcU802GB4asobV
ZkL4TadXGPWfhApbOspa2Eq6mp0oP3H5AZrlX9ZAsvX3LB/+WWWprFggprg3GCGk
Trk/3ouoW2BE67wcMf+V/zYMmk56TwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBm7
un+ToX+JBbz4pHtt2L6WxihTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOTI3MTkwMDEwNkUxMUYwOUM0NDI5ODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLc9AMA0GCSqGSIb3DQEBCwUA
A4IBAQBeClbRCEZeSR/XedTMP5hFjuwMG/wNkGjN37hyIGsAamIy6xr77n0tnN/y
lscD57HXhodq8f69rm3X0D4+NBP9+8iBJddZrQVb3oh0LHFah4pROP5cWwjucfsZ
R9QE49irwkNUuS5kH4g21prqwyKfZJ3t1Xx/11K1xHrtc3DnqLZkodUITl8E9zlr
kexRuTssJzrQFuoRkj8FCftc567RtK4+drtNwoneooHqEpuGtf4mKAO8ETTQwfqi
FqZ2QQ7KCcCDUF8MpVA4G7qnBx+7ELzdGrJTsiblWVnimcKF7DKcCe/d2Z5D//cq
WsKxGBx5abufrWHod0HbY/Fh6ICB
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:45 2025 by rpki-client