Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA6FC77638A511F0A38130A7DAE4EC9C.roa
File: FA6FC77638A511F0A38130A7DAE4EC9C.roa (raw, json)
Hash identifier: 6bXpJY/InobWJD6qyRaFJ4srU5NbvykCgbi2U+SKrls=
Subject key identifier: 31:48:7D:0A:BF:C0:1C:DD:FA:7E:51:E7:B4:D8:08:AB:15:63:EC:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01575E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA6FC77638A511F0A38130A7DAE4EC9C.roa
Signing time: Sat 24 May 2025 13:49:58 +0000
ROA not before: Sat 24 May 2025 13:49:53 +0000
ROA not after: Sun 29 Jun 2025 13:49:53 +0000
asID: 214143
IP address blocks: 156.228.5.0/24 maxlen: 24
156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
156.231.13.0/24 maxlen: 24
156.231.176.0/21 maxlen: 24
156.249.198.0/23 maxlen: 24
156.249.210.0/23 maxlen: 24
156.252.27.0/24 maxlen: 24
156.252.28.0/24 maxlen: 24
156.254.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87902 (0x1575e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:49:53 2025 GMT
Not After : Jun 29 13:49:53 2025 GMT
Subject: CN=6831ce85-350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0f:3d:07:ee:08:ba:f1:49:0c:38:ee:b3:4c:
20:70:04:65:8d:9c:a5:e1:f6:2a:ed:49:c0:25:bf:
35:dd:69:ab:ba:b8:ac:e8:68:51:03:93:48:db:40:
8b:b6:27:b7:c1:4c:18:ee:7b:e2:e0:f1:5b:63:7e:
1d:1f:27:e3:5d:9a:e8:8e:40:b2:aa:aa:c3:b7:4f:
a2:cb:88:2c:6e:5a:ff:5e:1c:2a:da:6e:39:12:59:
3d:83:b2:2f:c0:07:2c:6c:23:2d:71:db:40:b0:3a:
2c:4f:4f:63:98:ab:af:27:36:51:2f:23:05:15:58:
f4:8f:64:43:a1:63:80:77:42:da:10:12:08:eb:1a:
43:57:a6:ab:30:26:73:2d:1f:00:2b:e7:f7:69:55:
02:67:a8:0c:c4:fb:d9:2d:dd:aa:19:48:33:56:23:
dc:c1:e9:96:a4:95:8c:c7:d2:b0:d6:7e:1f:e1:60:
ae:fb:f3:9b:22:e7:e6:2d:66:bf:ee:77:93:39:be:
49:09:36:cd:5b:86:49:07:5f:22:87:1a:b0:81:18:
1a:17:6b:5a:48:a7:6d:ac:2d:b0:b6:1e:62:03:ff:
9c:d8:0c:ab:dd:93:2e:6a:3f:f1:c8:07:69:22:53:
95:5c:a3:c6:88:f3:4a:ea:ab:ec:0d:73:d4:5b:63:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:7D:0A:BF:C0:1C:DD:FA:7E:51:E7:B4:D8:08:AB:15:63:EC:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA6FC77638A511F0A38130A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.228.7.0/24
156.228.9.0/24
156.231.13.0/24
156.231.176.0/21
156.249.198.0/23
156.249.210.0/23
156.252.27.0-156.252.28.255
156.254.112.0/23
Signature Algorithm: sha256WithRSAEncryption
79:a2:a2:13:0b:3c:11:07:0a:9f:ea:1f:81:63:e7:8d:55:a9:
09:9d:d8:b2:50:92:24:aa:03:ed:f5:e7:67:ac:fc:ff:ba:d6:
7a:32:96:f5:a1:89:ff:88:ac:ae:1a:6e:d3:97:df:f4:ce:bd:
1c:6c:3a:3f:90:db:96:3f:ce:01:8e:71:f3:34:7f:6d:b0:ee:
22:15:6b:84:5d:bd:7f:88:db:49:4e:0b:81:c8:ed:66:48:f9:
49:24:c9:ab:f3:3d:c5:ec:2b:0f:bf:8c:79:f9:8a:5c:fe:70:
7a:86:d7:1a:0b:76:30:a2:d1:ac:50:4d:e2:93:0c:50:cd:9a:
f7:4e:b7:08:95:cd:e6:92:1d:db:28:e3:4a:6d:4b:9e:ab:f1:
84:58:26:c0:07:ea:d4:bb:8a:08:9a:a1:be:a8:58:e6:53:61:
fc:a9:43:70:76:95:c3:a6:3e:cd:9a:b2:62:dc:8f:d4:45:4d:
eb:4b:44:56:1e:2b:83:b5:70:e5:11:79:09:a5:f5:f3:ff:e0:
0b:e9:6a:65:81:29:ab:b0:fb:0c:69:eb:88:c9:6e:71:52:6d:
cb:ec:4b:62:10:43:dd:18:b5:4c:bf:a5:08:60:dd:70:1f:bf:
4c:f5:67:d4:3b:27:7b:97:b3:95:c6:35:bf:b1:51:ab:a4:64:
ae:f5:9b:2b
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAVdeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI0MTM0OTUzWhcNMjUwNjI5MTM0OTUzWjAYMRYw
FAYDVQQDEw02ODMxY2U4NS0zNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/A89B+4IuvFJDDjus0wgcARljZyl4fYq7UnAJb813Wmruris6GhRA5NI
20CLtie3wUwY7nvi4PFbY34dHyfjXZrojkCyqqrDt0+iy4gsblr/Xhwq2m45Elk9
g7IvwAcsbCMtcdtAsDosT09jmKuvJzZRLyMFFVj0j2RDoWOAd0LaEBII6xpDV6ar
MCZzLR8AK+f3aVUCZ6gMxPvZLd2qGUgzViPcwemWpJWMx9Kw1n4f4WCu+/ObIufm
LWa/7neTOb5JCTbNW4ZJB18ihxqwgRgaF2taSKdtrC2wth5iA/+c2Ayr3ZMuaj/x
yAdpIlOVXKPGiPNK6qvsDXPUW2NwbQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFDFI
fQq/wBzd+n5R57TYCKsVY+zyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTZGQzc3NjM4QTUxMUYwQTM4MTMwQTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAnOQFAwQAnOQHAwQAnOQJAwQA
nOcNAwQDnOewAwQBnPnGAwQBnPnSMAwDBACc/BsDBACc/BwDBAGc/nAwDQYJKoZI
hvcNAQELBQADggEBAHmiohMLPBEHCp/qH4Fj541VqQmd2LJQkiSqA+3152es/P+6
1noylvWhif+IrK4abtOX3/TOvRxsOj+Q25Y/zgGOcfM0f22w7iIVa4RdvX+I20lO
C4HI7WZI+UkkyavzPcXsKw+/jHn5ilz+cHqG1xoLdjCi0axQTeKTDFDNmvdOtwiV
zeaSHdso40ptS56r8YRYJsAH6tS7igiaob6oWOZTYfypQ3B2lcOmPs2asmLcj9RF
TetLRFYeK4O1cOUReQml9fP/4AvpamWBKauw+wxp64jJbnFSbcvsS2IQQ90YtUy/
pQhg3XAfv0z1Z9Q7J3uXs5XGNb+xUaukZK71mys=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:48:18 2025 by rpki-client