Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF4ACCE30AC11F0B61CA7A0DAE4EC9C.roa
File: CAF4ACCE30AC11F0B61CA7A0DAE4EC9C.roa (raw, json)
Hash identifier: 7aRur/Jd74H6fqq3SDfKR2MSspdzkdBejlPdbixzFHw=
Subject key identifier: 29:E8:54:C9:B5:B2:A2:86:C5:6D:8F:D6:22:C4:FC:4D:F2:B6:DF:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015446
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF4ACCE30AC11F0B61CA7A0DAE4EC9C.roa
Signing time: Wed 14 May 2025 10:18:35 +0000
ROA not before: Wed 14 May 2025 10:18:30 +0000
ROA not after: Wed 25 Jun 2025 10:18:30 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87110 (0x15446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 10:18:30 2025 GMT
Not After : Jun 25 10:18:30 2025 GMT
Subject: CN=68246dfb-8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:cb:32:51:ee:02:46:27:91:ae:d6:f1:27:
7f:3f:91:cc:e4:6d:52:e5:7c:24:d9:b3:e8:47:ec:
82:73:ac:a7:5a:ed:33:b4:94:69:b1:fa:63:0d:d3:
d6:63:7c:30:ca:0f:a9:98:11:52:c5:a6:06:6d:1b:
70:76:2a:49:6c:04:eb:ed:7d:cb:74:12:09:a1:50:
b2:6f:62:1a:67:19:a1:3a:0b:12:39:cf:d5:72:4c:
d8:0e:dc:31:77:1e:bd:c5:27:ee:56:fa:12:c0:d1:
11:77:2b:6c:3e:e1:62:de:f3:15:a1:74:3f:13:cb:
54:82:25:32:1f:45:7d:78:68:0c:d3:77:97:d7:da:
c6:2c:ff:aa:08:71:a2:c8:fb:75:6f:19:81:12:74:
ed:b9:32:1b:78:51:4c:25:a8:9a:7b:37:3e:5c:de:
67:a1:f2:7f:98:bc:aa:37:a5:b4:4e:3d:e9:d7:1c:
ca:6f:92:b1:f1:47:bd:20:a3:68:b4:58:e1:fc:8f:
ec:a3:dd:d6:b4:8e:60:15:ed:4e:9d:b9:97:91:bb:
81:e9:0c:6e:ca:08:f0:0f:70:b0:ca:21:99:60:82:
41:7b:6e:13:55:2f:fc:fd:db:1f:82:ed:b5:83:14:
ca:4a:52:68:23:b7:e1:1f:5a:ff:d7:e6:6e:be:b7:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:54:C9:B5:B2:A2:86:C5:6D:8F:D6:22:C4:FC:4D:F2:B6:DF:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF4ACCE30AC11F0B61CA7A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
23:82:5c:da:f0:90:35:68:49:9f:9e:84:ef:18:35:08:3a:2b:
9c:3a:76:29:ca:26:28:7e:ae:99:80:7c:88:2a:53:6d:e9:88:
15:25:d1:cc:2e:fe:13:93:6c:f3:42:59:43:87:e5:9a:7f:5a:
55:a3:d3:c4:ff:54:eb:92:74:e5:65:9a:11:07:3a:f1:5c:93:
da:96:bf:b4:4c:bb:7f:0c:a3:60:9b:14:91:5e:2e:0f:93:68:
c5:78:67:03:5c:52:11:f9:15:a1:34:67:bf:09:5f:e6:39:fc:
e8:93:82:56:4d:f1:8f:4b:53:c0:ae:cc:ab:66:bd:b4:a4:2a:
fc:8a:43:a1:3f:ef:27:db:d6:dd:5f:0f:db:54:81:3f:88:20:
cf:a8:bd:28:e6:ab:bf:9c:27:4b:cf:68:6f:ea:35:18:4b:9f:
ac:9f:cc:fe:2e:f2:ee:29:30:1d:96:53:74:0b:1d:e3:f2:c5:
3f:f2:61:22:b4:06:73:78:8f:36:cc:1e:96:76:1f:23:03:e4:
d9:70:3f:70:84:76:80:6f:68:da:f5:9b:d9:2b:bf:e2:57:ce:
c6:98:77:9c:94:e3:ae:ed:6f:5d:4a:a8:94:2f:cc:11:a0:eb:
e4:aa:d0:37:b3:58:1b:06:41:9d:7b:d6:36:61:40:da:81:e1:
36:d0:89:b7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVRGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE0MTAxODMwWhcNMjUwNjI1MTAxODMwWjAYMRYw
FAYDVQQDEw02ODI0NmRmYi04YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuqzLMlHuAkYnka7W8Sd/P5HM5G1S5Xwk2bPoR+yCc6ynWu0ztJRpsfpj
DdPWY3wwyg+pmBFSxaYGbRtwdipJbATr7X3LdBIJoVCyb2IaZxmhOgsSOc/VckzY
Dtwxdx69xSfuVvoSwNERdytsPuFi3vMVoXQ/E8tUgiUyH0V9eGgM03eX19rGLP+q
CHGiyPt1bxmBEnTtuTIbeFFMJaiaezc+XN5nofJ/mLyqN6W0Tj3p1xzKb5Kx8Ue9
IKNotFjh/I/so93WtI5gFe1OnbmXkbuB6QxuygjwD3CwyiGZYIJBe24TVS/8/dsf
gu21gxTKSlJoI7fhH1r/1+ZuvrfOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCno
VMm1sqKGxW2P1iLE/E3ytt9mMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQUY0QUNDRTMwQUMxMUYwQjYxQ0E3QTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOeLAwQDnPZYMA0GCSqGSIb3
DQEBCwUAA4IBAQAjglza8JA1aEmfnoTvGDUIOiucOnYpyiYofq6ZgHyIKlNt6YgV
JdHMLv4Tk2zzQllDh+Waf1pVo9PE/1TrknTlZZoRBzrxXJPalr+0TLt/DKNgmxSR
Xi4Pk2jFeGcDXFIR+RWhNGe/CV/mOfzok4JWTfGPS1PArsyrZr20pCr8ikOhP+8n
29bdXw/bVIE/iCDPqL0o5qu/nCdLz2hv6jUYS5+sn8z+LvLuKTAdllN0Cx3j8sU/
8mEitAZzeI82zB6Wdh8jA+TZcD9whHaAb2ja9ZvZK7/iV87GmHeclOOu7W9dSqiU
L8wRoOvkqtA3s1gbBkGde9Y2YUDageE20Im3
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:15 2025 by rpki-client