Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309D10604E9511F097D7BDF3DAE4EC9C.roa
File: 309D10604E9511F097D7BDF3DAE4EC9C.roa (raw, json)
Hash identifier: 4vp+g60ec7x6X3nHHBbtLep7W+cHwLLyJmJgNks8+Qw=
Subject key identifier: 25:ED:BE:EA:F7:7C:04:DB:C8:0C:BF:9D:4F:5D:D9:67:C7:F2:48:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309D10604E9511F097D7BDF3DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 11:45:12 +0000
ROA not before: Sat 21 Jun 2025 11:45:05 +0000
ROA not after: Mon 28 Jul 2025 11:45:05 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89532 (0x15dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 11:45:05 2025 GMT
Not After : Jul 28 11:45:05 2025 GMT
Subject: CN=68569b48-5338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:c3:b4:9c:d3:b9:f5:dc:99:b4:57:a6:36:
26:ec:95:70:cc:de:45:5a:fa:2b:00:63:ba:08:04:
cd:3e:74:63:2a:73:d4:d5:e2:c9:6f:4f:9d:d5:d6:
a6:57:cc:b7:80:ce:d6:64:2e:f4:2c:52:71:e2:12:
6d:c1:a6:55:23:70:06:90:2f:f5:d0:9e:f5:63:ad:
b7:ef:09:2b:79:db:01:1f:2e:7c:c7:aa:3a:2c:8c:
52:30:17:50:bd:34:86:41:e2:08:4c:99:36:24:43:
64:fd:d5:88:b3:f3:4d:93:41:ee:d6:19:61:48:51:
76:f7:99:d4:24:a8:cd:2f:35:26:12:e9:6c:89:3d:
09:6b:17:95:28:95:36:39:8e:16:9c:98:3d:de:ec:
e8:76:0c:a8:eb:c7:9e:b3:b7:0d:c4:56:18:52:b5:
6e:45:a4:58:c6:dd:ec:68:c6:26:a0:81:ec:ab:df:
b3:ea:2e:91:b7:d2:2b:31:c9:d9:b2:9e:24:73:2c:
8d:d4:68:84:f7:94:33:eb:04:b3:73:4b:df:b2:3f:
9b:19:5f:2f:6b:6a:4b:a9:58:b3:c1:24:21:79:89:
61:95:72:4a:51:2f:a5:e9:99:32:6b:5b:99:e7:19:
04:18:cf:63:d4:cc:65:13:4c:79:66:be:94:8f:b7:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:ED:BE:EA:F7:7C:04:DB:C8:0C:BF:9D:4F:5D:D9:67:C7:F2:48:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309D10604E9511F097D7BDF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a7:d7:86:08:12:34:b9:84:5a:f5:7e:14:e3:97:09:d3:37:
d6:42:b3:d4:4b:9b:ba:24:bd:42:73:4b:7f:b2:ea:67:c4:38:
83:95:5a:36:a7:74:60:43:75:48:30:1a:35:12:2c:ae:43:23:
cf:aa:1d:49:93:78:5b:18:88:eb:5d:b8:84:13:79:db:7f:a9:
a7:87:ce:5c:0f:2c:cf:82:5a:c0:d3:1c:00:45:2b:07:c4:bd:
e8:59:a4:66:bd:9c:b8:10:45:fd:44:40:66:44:3a:9a:0a:c4:
21:e0:a2:54:81:3e:28:5d:ff:ed:3c:e0:38:63:d6:18:56:12:
fc:b0:a3:9f:46:e2:be:a0:ea:71:dc:2e:5a:2a:52:55:15:b6:
5f:df:15:5b:dd:9b:e0:34:21:33:02:02:e2:d5:1f:1e:60:a7:
b8:c6:c0:05:cd:61:42:16:7e:71:e9:b1:d8:2d:d1:87:68:2e:
13:c5:1d:3e:ce:74:d9:e0:3f:ea:4c:cd:68:b6:bc:20:e2:6f:
6b:b0:96:f8:be:3e:b7:48:1c:19:f9:19:9c:4c:61:77:de:5f:
95:93:50:a1:2f:1b:52:53:b9:8d:1f:dd:e5:b2:0a:0c:ad:39:
c9:10:db:35:f5:a0:e7:eb:dd:7b:e9:a5:10:46:91:9c:df:0d:
76:a9:16:8a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV28MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIxMTE0NTA1WhcNMjUwNzI4MTE0NTA1WjAYMRYw
FAYDVQQDEw02ODU2OWI0OC01MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAob3DtJzTufXcmbRXpjYm7JVwzN5FWvorAGO6CATNPnRjKnPU1eLJb0+d
1damV8y3gM7WZC70LFJx4hJtwaZVI3AGkC/10J71Y6237wkredsBHy58x6o6LIxS
MBdQvTSGQeIITJk2JENk/dWIs/NNk0Hu1hlhSFF295nUJKjNLzUmEulsiT0JaxeV
KJU2OY4WnJg93uzodgyo68ees7cNxFYYUrVuRaRYxt3saMYmoIHsq9+z6i6Rt9Ir
McnZsp4kcyyN1GiE95Qz6wSzc0vfsj+bGV8va2pLqVizwSQheYlhlXJKUS+l6Zky
a1uZ5xkEGM9j1MxlE0x5Zr6Uj7c1YQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCXt
vur3fATbyAy/nU9d2WfH8kiiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMDlEMTA2MDRFOTUxMUYwOTdEN0JERjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEPMA0GCSqGSIb3DQEBCwUA
A4IBAQBtp9eGCBI0uYRa9X4U45cJ0zfWQrPUS5u6JL1Cc0t/supnxDiDlVo2p3Rg
Q3VIMBo1EiyuQyPPqh1Jk3hbGIjrXbiEE3nbf6mnh85cDyzPglrA0xwARSsHxL3o
WaRmvZy4EEX9REBmRDqaCsQh4KJUgT4oXf/tPOA4Y9YYVhL8sKOfRuK+oOpx3C5a
KlJVFbZf3xVb3ZvgNCEzAgLi1R8eYKe4xsAFzWFCFn5x6bHYLdGHaC4TxR0+znTZ
4D/qTM1otrwg4m9rsJb4vj63SBwZ+RmcTGF33l+Vk1ChLxtSU7mNH93lsgoMrTnJ
ENs19aDn69176aUQRpGc3w12qRaK
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:59 2025 by rpki-client