Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6319222382611F0AA1A26E1DAE4EC9C.roa
File: F6319222382611F0AA1A26E1DAE4EC9C.roa (raw, json)
Hash identifier: m1OBjYJE5KrZw3kgFEsY0BMCvm0eWQdJADQvi2+Kk4M=
Subject key identifier: 29:A3:AD:C5:DD:A0:79:A5:75:2B:0B:EA:A4:B5:13:48:48:18:BC:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015737
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6319222382611F0AA1A26E1DAE4EC9C.roa
Signing time: Fri 23 May 2025 22:40:45 +0000
ROA not before: Fri 23 May 2025 22:40:39 +0000
ROA not after: Wed 17 Jun 2026 22:40:39 +0000
asID: 55020
IP address blocks: 156.241.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87863 (0x15737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 22:40:39 2025 GMT
Not After : Jun 17 22:40:39 2026 GMT
Subject: CN=6830f96d-e518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:bb:cb:8c:6e:f9:66:69:f2:dd:ca:06:bb:
7b:e9:5f:b6:be:b8:35:7f:2a:0f:3b:84:0a:0b:fc:
b0:60:db:44:76:8c:b8:9b:68:d0:b9:32:7a:13:d0:
47:67:af:97:e9:7a:69:4b:ab:e6:0e:43:0a:b4:77:
a6:1f:60:d4:c6:86:92:17:da:18:fb:8f:71:52:c1:
7f:33:b3:e6:dd:0e:22:14:43:2d:24:45:2e:f6:b5:
13:ae:be:78:ea:2a:68:3c:ba:31:c6:4f:5e:7a:5e:
e2:09:5b:d6:c7:80:81:1e:23:04:d6:fd:65:94:a4:
57:4b:41:b8:c6:e3:ce:b3:87:d8:74:06:25:81:5e:
6e:7d:50:ea:d0:5e:c1:ef:94:9c:20:43:18:c5:41:
03:59:cf:9d:59:b6:65:a9:df:f3:99:cd:fd:7e:2b:
e2:3a:31:66:fb:45:5c:8b:76:92:95:e8:21:b6:70:
77:c9:23:bf:6a:98:56:9f:41:34:14:0f:66:7a:9f:
21:11:1a:65:ea:e0:21:31:a2:c5:8d:ee:70:63:20:
3b:0e:14:48:ce:42:cc:d7:f1:2f:e3:e4:d6:1e:38:
f8:3e:c5:71:18:85:bd:8f:6a:74:c9:6f:83:fa:8d:
3a:39:dd:d9:d3:c5:64:22:b7:c5:fd:87:e8:ef:91:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:AD:C5:DD:A0:79:A5:75:2B:0B:EA:A4:B5:13:48:48:18:BC:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6319222382611F0AA1A26E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
47:ae:ea:78:61:26:e0:f0:ed:19:48:7e:f4:52:5d:88:88:25:
d1:29:79:a5:4f:48:12:cc:5f:2c:fd:2b:06:7a:b3:23:ec:e4:
9b:e1:88:4e:61:2a:31:70:47:ea:f8:b3:4f:ac:5d:f4:91:a3:
16:6c:58:37:bf:81:00:12:b9:b0:97:97:36:4d:86:8e:0b:56:
59:c4:76:b3:f0:26:1f:62:ae:4e:e4:55:8b:b2:8c:22:d3:ea:
71:54:0f:ef:3e:91:b7:61:32:a6:fe:98:d7:7c:e3:b4:51:6c:
15:b0:b8:c3:ae:3a:40:f5:e6:ee:09:5b:41:60:8d:11:76:5a:
b4:fe:69:d2:01:af:79:56:62:d3:c3:d2:29:63:f4:6e:7b:2e:
38:2c:c9:7a:0d:15:7b:8f:c4:87:b0:36:c9:e8:52:6d:0c:3e:
1b:1c:af:78:d7:40:ed:33:7c:a5:4c:31:33:ad:0d:2b:bb:51:
9e:9f:3b:bb:be:2a:ea:8d:54:18:cf:7e:ca:af:d5:14:54:18:
df:68:63:a3:04:52:a7:1f:31:d0:70:9c:c9:a6:6c:66:e7:4b:
a0:cb:f3:10:2a:c1:22:65:34:c5:73:d3:a2:fa:ad:f9:c3:25:
8c:dd:2b:1c:22:13:92:91:2a:33:ba:b3:64:5e:20:66:25:98:
96:64:96:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVc3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIzMjI0MDM5WhcNMjYwNjE3MjI0MDM5WjAYMRYw
FAYDVQQDEw02ODMwZjk2ZC1lNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy0y7y4xu+WZp8t3KBrt76V+2vrg1fyoPO4QKC/ywYNtEdoy4m2jQuTJ6
E9BHZ6+X6XppS6vmDkMKtHemH2DUxoaSF9oY+49xUsF/M7Pm3Q4iFEMtJEUu9rUT
rr546ipoPLoxxk9eel7iCVvWx4CBHiME1v1llKRXS0G4xuPOs4fYdAYlgV5ufVDq
0F7B75ScIEMYxUEDWc+dWbZlqd/zmc39fiviOjFm+0Vci3aSleghtnB3ySO/aphW
n0E0FA9mep8hERpl6uAhMaLFje5wYyA7DhRIzkLM1/Ev4+TWHjj4PsVxGIW9j2p0
yW+D+o06Od3Z08VkIrfF/Yfo75EwNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCmj
rcXdoHmldSsL6qS1E0hIGLxUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNjMxOTIyMjM4MjYxMUYwQUExQTI2RTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPGAMA0GCSqGSIb3DQEBCwUA
A4IBAQBHrup4YSbg8O0ZSH70Ul2IiCXRKXmlT0gSzF8s/SsGerMj7OSb4YhOYSox
cEfq+LNPrF30kaMWbFg3v4EAErmwl5c2TYaOC1ZZxHaz8CYfYq5O5FWLsowi0+px
VA/vPpG3YTKm/pjXfOO0UWwVsLjDrjpA9ebuCVtBYI0Rdlq0/mnSAa95VmLTw9Ip
Y/Ruey44LMl6DRV7j8SHsDbJ6FJtDD4bHK9410DtM3ylTDEzrQ0ru1Genzu7virq
jVQYz37Kr9UUVBjfaGOjBFKnHzHQcJzJpmxm50ugy/MQKsEiZTTFc9Oi+q35wyWM
3SscIhOSkSozurNkXiBmJZiWZJYa
-----END CERTIFICATE-----
Generated at Tue Jun 3 09:20:27 2025 by rpki-client