Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6885EB43AFC11F0B864B0E1DAE4EC9C.roa
File: D6885EB43AFC11F0B864B0E1DAE4EC9C.roa (raw, json)
Hash identifier: PdaaCkeZyxB6KZoQGTl5F61+rb8J5I4YIsRQqbI65kA=
Subject key identifier: 0D:34:4B:FF:E7:01:35:21:5F:F7:F1:E9:DD:28:0A:28:7C:61:CC:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0157FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6885EB43AFC11F0B864B0E1DAE4EC9C.roa
Signing time: Tue 27 May 2025 13:16:46 +0000
ROA not before: Tue 27 May 2025 13:16:41 +0000
ROA not after: Wed 27 May 2026 13:16:41 +0000
asID: 395793
IP address blocks: 156.255.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88061 (0x157fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 13:16:41 2025 GMT
Not After : May 27 13:16:41 2026 GMT
Subject: CN=6835bb3e-2f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:c0:ea:0a:96:c1:41:a8:47:1c:84:ca:55:
b2:ad:a4:4c:3a:d4:78:bb:c3:08:8b:4e:a1:81:8e:
26:aa:ef:f6:be:5b:9c:51:25:95:6d:8c:85:81:b6:
ab:af:3d:ff:cf:c9:e4:dd:29:8e:d9:11:91:3e:b2:
ad:c1:ed:a6:64:fd:cf:4c:fb:a7:80:b4:7e:e8:67:
2d:8c:c1:9a:59:1b:36:a4:4a:36:22:55:9a:4c:41:
78:ca:04:93:3a:4c:2b:eb:d3:e8:cf:62:e8:64:a2:
57:ae:dc:8c:df:80:5b:9d:28:75:77:d3:ca:9e:91:
fa:6b:c1:2c:a7:8f:58:2e:91:a8:b2:df:ae:fa:71:
8d:53:69:34:72:1d:9f:a0:3c:06:fd:24:06:d9:f6:
e0:ed:2a:20:cb:65:6a:61:0d:fb:3f:98:30:7b:99:
6e:c3:af:f6:4d:9d:2e:c9:21:13:17:91:d8:dc:49:
71:a8:8c:4d:8b:5f:45:00:41:28:d4:51:c1:06:31:
23:1f:e8:ff:5c:76:fa:2d:c3:84:5b:08:8c:07:97:
33:5c:e9:72:8b:3b:ba:c8:cd:92:6f:06:4e:80:84:
a7:15:2d:7e:ce:9a:ff:9f:67:f6:78:35:f7:01:39:
37:0d:e6:d6:0b:09:17:09:c7:26:c3:de:f1:76:3f:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:4B:FF:E7:01:35:21:5F:F7:F1:E9:DD:28:0A:28:7C:61:CC:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6885EB43AFC11F0B864B0E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.85.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c0:19:b5:15:34:dc:5c:3b:cf:b6:e7:84:2d:41:f9:b5:e5:
65:82:5c:5a:8d:ff:b9:eb:84:9f:95:3e:72:2e:e8:75:87:e0:
03:0b:36:68:f2:ea:2d:d3:4a:a2:19:09:33:47:52:c2:b1:f1:
f3:d4:d3:12:2a:e5:2f:e5:71:c5:3d:8b:08:da:3f:08:e6:3f:
96:66:2b:49:0c:9e:14:9d:c0:98:5f:68:f7:c4:37:f7:94:9d:
14:8a:b5:7f:a8:30:80:12:e0:2a:43:2c:73:69:2e:74:2d:23:
95:82:bd:ff:18:1a:83:4d:a6:9b:94:78:76:40:b1:56:90:f1:
0f:fa:ee:3c:95:b4:13:28:dd:c5:da:f5:77:dd:a6:bc:1b:12:
40:f9:cb:24:dd:ef:f5:c8:6d:bf:66:9d:79:09:e9:05:b2:ac:
4e:7d:1a:8d:58:a5:be:fe:f8:0e:35:b1:dd:90:f0:46:f4:5d:
80:23:27:a3:06:50:46:43:f6:f6:d1:53:bd:6a:5a:39:7a:70:
6b:8a:c1:cf:88:f7:ae:68:85:6c:22:27:80:a7:55:7b:bf:89:
73:e0:ae:a9:ba:ca:80:40:1b:43:67:63:20:ed:99:47:3f:95:
76:83:7d:75:47:7c:fb:fd:13:31:5e:9c:91:74:45:8b:40:2d:
eb:ce:34:bf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVf9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI3MTMxNjQxWhcNMjYwNTI3MTMxNjQxWjAYMRYw
FAYDVQQDEw02ODM1YmIzZS0yZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoDnA6gqWwUGoRxyEylWyraRMOtR4u8MIi06hgY4mqu/2vlucUSWVbYyF
gbarrz3/z8nk3SmO2RGRPrKtwe2mZP3PTPungLR+6GctjMGaWRs2pEo2IlWaTEF4
ygSTOkwr69Poz2LoZKJXrtyM34BbnSh1d9PKnpH6a8Esp49YLpGost+u+nGNU2k0
ch2foDwG/SQG2fbg7Sogy2VqYQ37P5gwe5luw6/2TZ0uySETF5HY3ElxqIxNi19F
AEEo1FHBBjEjH+j/XHb6LcOEWwiMB5czXOlyizu6yM2SbwZOgISnFS1+zpr/n2f2
eDX3ATk3DebWCwkXCccmw97xdj9ohwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA00
S//nATUhX/fx6d0oCih8YcytMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjg4NUVCNDNBRkMxMUYwQjg2NEIwRTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9VMA0GCSqGSIb3DQEBCwUA
A4IBAQCWwBm1FTTcXDvPtueELUH5teVlglxajf+564SflT5yLuh1h+ADCzZo8uot
00qiGQkzR1LCsfHz1NMSKuUv5XHFPYsI2j8I5j+WZitJDJ4UncCYX2j3xDf3lJ0U
irV/qDCAEuAqQyxzaS50LSOVgr3/GBqDTaablHh2QLFWkPEP+u48lbQTKN3F2vV3
3aa8GxJA+csk3e/1yG2/Zp15CekFsqxOfRqNWKW+/vgONbHdkPBG9F2AIyejBlBG
Q/b20VO9alo5enBrisHPiPeuaIVsIieAp1V7v4lz4K6pusqAQBtDZ2Mg7ZlHP5V2
g311R3z7/RMxXpyRdEWLQC3rzjS/
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:44:09 2025 by rpki-client