Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB403884B6D11F0959969D6DAE4EC9C.roa
File: 1AB403884B6D11F0959969D6DAE4EC9C.roa (raw, json)
Hash identifier: iGAhT5wL2A2lW71IXPBuFm4KjJHdEyZ7RtuKlW4lq8g=
Subject key identifier: 56:25:44:BF:F0:DE:D4:E4:90:2B:62:39:40:80:F4:4B:5F:BA:08:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB403884B6D11F0959969D6DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 11:20:42 +0000
ROA not before: Tue 17 Jun 2025 11:20:34 +0000
ROA not after: Thu 24 Jul 2025 11:20:34 +0000
asID: 142032
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89244 (0x15c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 11:20:34 2025 GMT
Not After : Jul 24 11:20:34 2025 GMT
Subject: CN=68514f8a-f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:ad:19:d3:05:cf:eb:9b:3d:05:fc:c4:0f:
93:88:cb:b8:40:98:38:7e:39:d2:8a:23:f5:71:5b:
c4:ab:b9:14:b0:cb:66:cf:2f:2a:f2:a6:88:ba:96:
32:ee:67:f2:64:cf:09:94:6f:00:8f:ab:08:ce:87:
66:69:6b:88:57:90:81:9e:b4:46:67:d1:6f:d7:de:
e4:8b:7c:f3:52:cd:ce:a5:8b:d5:5d:c3:46:26:1c:
3d:9d:2e:c4:c7:4e:63:18:a8:00:cf:7c:5e:19:a6:
03:45:6f:70:40:2c:c5:88:82:98:27:43:18:f3:80:
e3:bd:37:55:2c:64:5c:7d:51:e1:ff:0d:74:f0:f5:
bd:d0:ab:bd:fa:93:9b:c6:54:5b:a5:6d:48:88:51:
e0:ef:7e:bb:bc:6a:d8:a3:e7:4d:f5:64:3f:11:5c:
e5:ee:9d:0c:ea:63:86:f8:fc:ab:0d:22:76:6d:2c:
fb:d8:17:17:e1:8d:29:8e:c1:3f:91:d8:49:15:e7:
58:d3:94:eb:9e:e5:e4:67:c3:32:3c:ba:2f:07:13:
c6:50:39:5b:d6:0e:bc:1a:ef:9d:6c:47:b8:b8:86:
26:41:14:ae:e0:63:c3:ab:b4:26:a9:58:44:0b:c2:
c8:a1:13:11:ee:c4:34:5c:bc:df:ac:f2:3c:38:67:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:44:BF:F0:DE:D4:E4:90:2B:62:39:40:80:F4:4B:5F:BA:08:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB403884B6D11F0959969D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
91:30:fb:b3:4f:9b:16:2b:f0:b4:8c:11:a8:46:f4:b4:d1:41:
ee:5e:17:2a:9d:23:52:a1:15:93:f9:4f:3f:69:21:2a:07:ed:
e3:5b:3e:c7:0e:ec:c4:bd:42:82:9e:ad:aa:84:ba:37:b8:2f:
fa:56:c3:ef:1e:9d:e6:5b:47:4a:4e:4f:6b:0f:18:42:a3:6e:
d8:a2:84:d7:6d:44:85:4a:6f:6f:7d:84:a5:5d:e6:91:56:35:
3f:31:9c:3c:12:81:d1:2b:8d:c7:26:07:93:bd:31:cf:79:6c:
c5:4c:16:7c:8d:10:b4:a7:fd:89:d8:d9:ac:1e:b7:dc:65:76:
b5:a8:a4:98:cb:f5:45:1f:55:6e:c8:0d:3b:b9:15:0d:a4:8c:
26:87:aa:83:23:f5:79:bd:aa:d5:79:91:45:9e:40:4e:41:82:
6a:4b:fd:28:03:08:9f:b7:bd:4b:1e:18:b6:cd:a2:d0:f3:22:
f9:a2:8d:07:60:2f:60:c7:95:6e:0d:44:e0:33:dc:78:62:97:
f0:72:27:a8:b8:0b:1e:d0:3b:98:9f:c6:40:c4:a5:bd:fc:58:
41:51:4d:e1:45:3f:e4:f6:74:b4:91:4f:09:7a:ba:22:04:e4:
f5:cf:9f:a8:28:db:33:1c:e7:6e:11:f8:80:a6:f3:19:93:94:
55:0e:79:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVycMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE3MTEyMDM0WhcNMjUwNzI0MTEyMDM0WjAYMRYw
FAYDVQQDEw02ODUxNGY4YS1mNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKetGdMFz+ubPQX8xA+TiMu4QJg4fjnSiiP1cVvEq7kUsMtmzy8q8qaI
upYy7mfyZM8JlG8Aj6sIzodmaWuIV5CBnrRGZ9Fv197ki3zzUs3OpYvVXcNGJhw9
nS7Ex05jGKgAz3xeGaYDRW9wQCzFiIKYJ0MY84DjvTdVLGRcfVHh/w108PW90Ku9
+pObxlRbpW1IiFHg7367vGrYo+dN9WQ/EVzl7p0M6mOG+PyrDSJ2bSz72BcX4Y0p
jsE/kdhJFedY05TrnuXkZ8MyPLovBxPGUDlb1g68Gu+dbEe4uIYmQRSu4GPDq7Qm
qVhEC8LIoRMR7sQ0XLzfrPI8OGecwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFYl
RL/w3tTkkCtiOUCA9Etfugj4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQUI0MDM4ODRCNkQxMUYwOTU5OTY5RDZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO80MA0GCSqGSIb3DQEBCwUA
A4IBAQCRMPuzT5sWK/C0jBGoRvS00UHuXhcqnSNSoRWT+U8/aSEqB+3jWz7HDuzE
vUKCnq2qhLo3uC/6VsPvHp3mW0dKTk9rDxhCo27YooTXbUSFSm9vfYSlXeaRVjU/
MZw8EoHRK43HJgeTvTHPeWzFTBZ8jRC0p/2J2NmsHrfcZXa1qKSYy/VFH1VuyA07
uRUNpIwmh6qDI/V5varVeZFFnkBOQYJqS/0oAwift71LHhi2zaLQ8yL5oo0HYC9g
x5VuDUTgM9x4YpfwcieouAse0DuYn8ZAxKW9/FhBUU3hRT/k9nS0kU8JeroiBOT1
z5+oKNszHOduEfiApvMZk5RVDnkM
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:09:54 2025 by rpki-client