Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26E25378260E11F0BE84AC88DAE4EC9C.roa
File: 26E25378260E11F0BE84AC88DAE4EC9C.roa (raw, json)
Hash identifier: vIYKnSlpIxvWEiwg5qX5SYb8r3CiF8w7l52iW/qlU9A=
Subject key identifier: 12:C0:CA:74:50:B6:0D:06:61:AE:54:CC:A7:E3:57:F3:58:C5:7E:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26E25378260E11F0BE84AC88DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 21:57:48 +0000
ROA not before: Wed 30 Apr 2025 21:57:42 +0000
ROA not after: Fri 28 Apr 2028 21:57:42 +0000
asID: 17561
IP address blocks: 156.232.162.0/24 maxlen: 24
156.232.163.0/24 maxlen: 24
156.232.164.0/24 maxlen: 24
156.232.165.0/24 maxlen: 24
156.232.166.0/24 maxlen: 24
156.232.167.0/24 maxlen: 24
156.232.168.0/24 maxlen: 24
156.232.169.0/24 maxlen: 24
156.232.170.0/24 maxlen: 24
156.232.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86261 (0x150f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 21:57:42 2025 GMT
Not After : Apr 28 21:57:42 2028 GMT
Subject: CN=68129cdb-c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:d0:06:ff:9e:5e:ec:6c:12:d6:fa:58:f1:
ce:2b:c6:08:94:55:9b:94:26:41:11:55:27:a2:b8:
70:9a:44:7a:3a:14:86:10:50:95:b6:15:a5:35:2e:
ce:85:86:0d:c7:ed:6e:67:25:83:92:8c:15:68:6d:
44:67:3e:02:ea:35:db:d8:3a:f0:0e:7c:b3:91:57:
93:95:33:63:85:04:0d:1f:1e:2f:b9:04:e9:74:9d:
e1:a5:94:38:f8:ea:d5:6a:10:76:4c:76:0b:64:f4:
a4:90:54:8d:45:a5:c3:98:0d:77:e6:4b:ad:12:f8:
2d:07:33:bc:d8:5a:ab:10:37:67:1f:8c:e7:ee:64:
ec:41:4e:5e:e9:49:75:ef:95:06:a1:17:48:74:c6:
da:2b:15:ee:29:39:e1:c2:46:57:4a:3b:e2:24:47:
81:42:ed:3a:a9:e1:63:23:f6:72:c1:9b:22:8b:b4:
9a:63:62:4b:64:e5:8b:b9:d9:50:db:26:5f:95:69:
3f:66:27:0f:16:ae:b4:2e:b3:84:fe:70:28:fa:51:
a0:d7:6f:0d:2c:6f:dc:61:82:27:ba:b7:96:82:9d:
3f:46:4b:91:4f:79:1f:5b:b7:2f:93:f8:23:74:37:
e2:b2:64:02:1c:28:23:21:9d:54:e8:74:54:2e:13:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:CA:74:50:B6:0D:06:61:AE:54:CC:A7:E3:57:F3:58:C5:7E:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26E25378260E11F0BE84AC88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.162.0-156.232.171.255
Signature Algorithm: sha256WithRSAEncryption
95:95:d5:ba:b0:45:a6:6a:f5:df:f7:cc:15:2e:c2:93:3b:be:
c7:ff:0c:49:80:28:b0:4c:19:dd:01:46:c5:e8:b9:65:c0:c5:
46:89:ac:cd:85:31:85:9d:25:bc:1e:9d:f6:47:d1:88:b4:c4:
51:30:e6:ef:fd:2f:dc:50:66:f4:7b:29:6b:62:20:4b:8a:42:
8c:0c:84:03:e0:1a:b9:95:51:c1:19:15:ac:c8:39:6e:61:6e:
a4:1f:d3:f5:c9:aa:bd:cb:3c:4a:e5:32:79:37:4d:6f:90:32:
a9:41:58:ea:cb:f2:99:bd:c8:32:71:94:71:11:bd:bd:87:24:
a4:15:3d:4f:2a:8d:40:1b:22:f4:bd:dd:54:46:c9:4b:19:85:
a5:67:cd:e0:c9:05:18:1a:d7:01:4b:52:8f:b1:5d:9e:14:cd:
2e:f5:d7:f0:45:26:fe:10:1f:51:96:4f:92:3b:70:e8:b2:9c:
7c:2b:cd:35:7c:b8:64:e0:b7:e2:66:2b:18:8e:32:7b:1d:0a:
b5:38:27:58:ad:5c:ef:38:a7:b2:c8:40:7a:2e:9a:4f:69:60:
92:34:c1:25:59:a5:fd:87:b5:8b:b9:2c:51:92:5c:5f:e2:a3:
a1:4b:ca:d0:10:88:de:eb:cc:c9:94:c9:30:13:61:dd:99:29:
cb:be:91:2e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVD1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDMwMjE1NzQyWhcNMjgwNDI4MjE1NzQyWjAYMRYw
FAYDVQQDEw02ODEyOWNkYi1jOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqijQBv+eXuxsEtb6WPHOK8YIlFWblCZBEVUnorhwmkR6OhSGEFCVthWl
NS7OhYYNx+1uZyWDkowVaG1EZz4C6jXb2DrwDnyzkVeTlTNjhQQNHx4vuQTpdJ3h
pZQ4+OrVahB2THYLZPSkkFSNRaXDmA135kutEvgtBzO82FqrEDdnH4zn7mTsQU5e
6Ul175UGoRdIdMbaKxXuKTnhwkZXSjviJEeBQu06qeFjI/ZywZsii7SaY2JLZOWL
udlQ2yZflWk/ZicPFq60LrOE/nAo+lGg128NLG/cYYInureWgp0/RkuRT3kfW7cv
k/gjdDfismQCHCgjIZ1U6HRULhNJ+QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBLA
ynRQtg0GYa5UzKfjV/NYxX6YMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNkUyNTM3ODI2MEUxMUYwQkU4NEFDODhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc6KIDBAKc6KgwDQYJKoZI
hvcNAQELBQADggEBAJWV1bqwRaZq9d/3zBUuwpM7vsf/DEmAKLBMGd0BRsXouWXA
xUaJrM2FMYWdJbwenfZH0Yi0xFEw5u/9L9xQZvR7KWtiIEuKQowMhAPgGrmVUcEZ
FazIOW5hbqQf0/XJqr3LPErlMnk3TW+QMqlBWOrL8pm9yDJxlHERvb2HJKQVPU8q
jUAbIvS93VRGyUsZhaVnzeDJBRga1wFLUo+xXZ4UzS711/BFJv4QH1GWT5I7cOiy
nHwrzTV8uGTgt+JmKxiOMnsdCrU4J1itXO84p7LIQHoumk9pYJI0wSVZpf2HtYu5
LFGSXF/io6FLytAQiN7rzMmUyTATYd2ZKcu+kS4=
-----END CERTIFICATE-----
Generated at Tue May 13 14:17:34 2025 by rpki-client