Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310C770C25EB11F087728CA2DAE4EC9C.roa
File: 310C770C25EB11F087728CA2DAE4EC9C.roa (raw, json)
Hash identifier: 1uCx85fDcIo/F/349/GETUORbGjGHxSqeUpD2u9ySkg=
Subject key identifier: 49:F5:91:3B:F9:14:17:77:99:12:E2:D1:5E:A6:D2:C6:DD:25:D2:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310C770C25EB11F087728CA2DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 17:47:32 +0000
ROA not before: Wed 30 Apr 2025 17:47:27 +0000
ROA not after: Fri 14 Apr 2028 17:47:27 +0000
asID: 17561
IP address blocks: 156.237.157.0/24 maxlen: 24
156.237.158.0/24 maxlen: 24
156.237.162.0/24 maxlen: 24
156.237.163.0/24 maxlen: 24
156.237.164.0/24 maxlen: 24
156.237.166.0/24 maxlen: 24
156.237.167.0/24 maxlen: 24
156.237.168.0/24 maxlen: 24
156.237.169.0/24 maxlen: 24
156.237.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86189 (0x150ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 17:47:27 2025 GMT
Not After : Apr 14 17:47:27 2028 GMT
Subject: CN=68126234-6b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:1f:f4:fd:c5:e4:0a:f2:5d:9e:8f:68:3f:
86:6c:29:bf:25:b8:e2:35:f5:c5:1c:93:93:ad:5f:
54:ee:9e:d4:fd:28:61:87:7e:05:71:90:37:e3:b7:
fc:f9:90:86:9d:9c:16:65:9a:31:c6:c0:33:42:b3:
1b:de:a7:e6:1d:da:5c:4c:ba:c4:ee:54:c6:27:ad:
6c:02:f6:f7:67:46:5e:2a:6a:34:a1:ff:1e:9b:20:
ad:d3:4d:6a:93:87:88:03:e5:30:43:1a:9e:f2:4d:
6c:89:c6:bb:97:e3:c2:d3:5b:68:43:e4:0f:a1:a2:
c1:35:50:94:6f:0e:a7:81:90:5a:10:06:0e:15:58:
52:82:53:b0:16:3d:21:1c:03:89:07:e9:c6:b2:ff:
8b:7c:47:2d:79:dc:cd:5c:df:6a:3c:3b:27:47:62:
d8:62:c8:f4:74:b1:e3:83:b5:b6:57:e2:af:16:07:
5b:42:b0:3e:81:70:1b:bf:a1:cc:6e:ee:67:44:57:
17:7e:53:60:41:e8:c9:8b:e7:9a:67:3c:15:ff:c5:
aa:00:7d:15:fd:ca:ad:62:f1:c0:28:61:e7:98:37:
ff:af:59:04:78:a7:e9:8e:38:eb:67:0a:95:36:fd:
a3:0a:21:cf:da:64:57:46:07:d6:79:af:0d:ad:3b:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F5:91:3B:F9:14:17:77:99:12:E2:D1:5E:A6:D2:C6:DD:25:D2:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310C770C25EB11F087728CA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.157.0-156.237.158.255
156.237.162.0-156.237.164.255
156.237.166.0-156.237.170.255
Signature Algorithm: sha256WithRSAEncryption
2f:e4:72:38:13:65:bb:26:86:75:2f:d7:94:0d:c1:4f:42:a3:
55:2e:ee:4b:a7:11:43:78:c5:51:88:66:7d:a2:33:69:f7:d9:
72:e4:23:38:55:c5:9d:d2:74:13:49:3c:3a:1e:2a:70:f9:77:
d0:d3:df:bc:8b:0f:cd:95:a5:4e:08:cf:dc:24:c8:91:66:a8:
8f:b1:32:9c:fc:9f:85:7e:71:24:2e:d6:f4:1c:45:6e:85:21:
ec:ef:ff:2c:3d:ad:bd:08:9b:85:dd:7b:93:58:78:11:0d:0a:
6a:ef:29:24:f9:d1:89:6c:f8:71:12:4b:ec:d9:03:0b:03:26:
31:27:55:e5:40:d1:77:a7:d9:7c:cd:35:1b:fa:c2:a2:e9:30:
6a:1b:e6:3e:53:3a:34:65:b4:96:e0:6d:4e:cf:7f:05:24:0c:
1d:44:c3:0e:3f:fa:9f:00:d6:44:a0:c2:c2:ef:92:3c:3b:83:
72:43:69:14:bb:5d:d0:37:28:8e:52:c5:ca:1a:fb:90:7a:6a:
87:31:3d:33:74:6b:98:06:1f:ef:ba:93:80:51:85:d3:b4:db:
aa:9e:58:53:3a:c0:58:76:59:23:8b:98:d8:6c:d7:f8:ee:d0:
6e:9b:7d:cf:04:87:f1:a5:59:1e:d6:d6:31:d7:83:6f:7b:83:
a2:ed:d7:d7
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAVCtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDMwMTc0NzI3WhcNMjgwNDE0MTc0NzI3WjAYMRYw
FAYDVQQDEw02ODEyNjIzNC02YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvY8f9P3F5AryXZ6PaD+GbCm/JbjiNfXFHJOTrV9U7p7U/Shhh34FcZA3
47f8+ZCGnZwWZZoxxsAzQrMb3qfmHdpcTLrE7lTGJ61sAvb3Z0ZeKmo0of8emyCt
001qk4eIA+UwQxqe8k1sica7l+PC01toQ+QPoaLBNVCUbw6ngZBaEAYOFVhSglOw
Fj0hHAOJB+nGsv+LfEctedzNXN9qPDsnR2LYYsj0dLHjg7W2V+KvFgdbQrA+gXAb
v6HMbu5nRFcXflNgQejJi+eaZzwV/8WqAH0V/cqtYvHAKGHnmDf/r1kEeKfpjjjr
ZwqVNv2jCiHP2mRXRgfWea8NrTtQtQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFEn1
kTv5FBd3mRLi0V6m0sbdJdIQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTBDNzcwQzI1RUIxMUYwODc3MjhDQTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBACc7Z0DBACc7Z4wDAMEAZzt
ogMEAJztpDAMAwQBnO2mAwQAnO2qMA0GCSqGSIb3DQEBCwUAA4IBAQAv5HI4E2W7
JoZ1L9eUDcFPQqNVLu5LpxFDeMVRiGZ9ojNp99ly5CM4VcWd0nQTSTw6Hipw+XfQ
09+8iw/NlaVOCM/cJMiRZqiPsTKc/J+FfnEkLtb0HEVuhSHs7/8sPa29CJuF3XuT
WHgRDQpq7ykk+dGJbPhxEkvs2QMLAyYxJ1XlQNF3p9l8zTUb+sKi6TBqG+Y+Uzo0
ZbSW4G1Oz38FJAwdRMMOP/qfANZEoMLC75I8O4NyQ2kUu13QNyiOUsXKGvuQemqH
MT0zdGuYBh/vupOAUYXTtNuqnlhTOsBYdlkji5jYbNf47tBum33PBIfxpVke1tYx
14Nve4Oi7dfX
-----END CERTIFICATE-----
Generated at Sun May 11 10:38:39 2025 by rpki-client