Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CF59F624E011F095CC3DB0DAE4EC9C.roa
File: 57CF59F624E011F095CC3DB0DAE4EC9C.roa (raw, json)
Hash identifier: F22A0eA30F+72kClcVy/UhalF7NDyD9QzbyoIkleHjg=
Subject key identifier: 19:68:9A:F2:BD:6D:CF:55:83:97:83:CB:7F:BF:54:EC:46:47:52:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015043
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CF59F624E011F095CC3DB0DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:57:22 +0000
ROA not before: Tue 29 Apr 2025 09:57:16 +0000
ROA not after: Wed 25 Jun 2025 09:57:16 +0000
asID: 63139
IP address blocks: 156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86083 (0x15043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:57:16 2025 GMT
Not After : Jun 25 09:57:16 2025 GMT
Subject: CN=6810a282-7449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:56:38:14:e7:7e:8d:2e:31:8a:6e:53:16:
79:60:fe:71:ae:dd:6e:44:8c:59:fb:bb:7e:08:ae:
f0:16:b9:dc:b4:70:83:ac:b7:e0:15:d9:d4:78:24:
00:13:74:da:5e:24:f3:35:31:8a:de:a1:90:63:dd:
d8:cf:d8:f6:99:61:85:63:f5:27:7c:9b:61:f7:13:
1f:ee:d0:1b:07:2e:8d:bc:df:12:ae:df:4a:69:de:
cd:61:3e:29:13:40:24:82:1b:b7:b0:cd:0d:42:49:
54:87:82:d5:eb:d3:76:ab:f8:31:e0:59:45:1e:da:
1d:9c:22:bc:66:85:fe:69:74:45:54:8a:e7:90:9d:
df:22:ec:f5:41:14:56:dd:97:ee:46:67:87:4f:ae:
55:00:a1:c0:bc:f4:80:49:53:f5:9e:85:08:99:df:
c2:98:a0:36:97:82:25:c0:10:26:6a:9c:6b:b7:93:
2a:17:6c:ee:22:e3:56:08:12:36:48:0e:b6:69:00:
f4:ca:d4:81:67:4f:b9:98:66:df:8e:34:94:2c:d5:
71:db:05:c2:7d:ce:2c:01:48:d5:73:c3:ca:58:85:
3f:93:b3:99:d4:2e:e1:03:93:e8:6e:74:3c:b4:3f:
46:ed:64:3e:73:34:89:b4:48:d3:04:7c:03:16:ca:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:9A:F2:BD:6D:CF:55:83:97:83:CB:7F:BF:54:EC:46:47:52:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CF59F624E011F095CC3DB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.123.0-156.225.127.255
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d5:85:d2:dd:e7:69:03:e8:52:9c:a3:84:2d:8a:6f:ba:cb:
38:26:7c:63:f4:97:08:5b:cd:95:84:f0:a6:eb:e2:7e:e0:76:
63:38:f6:45:0e:b6:f0:ed:8e:d3:3a:1f:e5:71:6e:17:6e:d5:
e4:6f:5f:27:a7:0a:16:d6:ba:32:2f:af:cc:79:19:fe:a9:67:
3c:39:0c:ea:90:fa:a8:f1:ab:9e:69:68:53:ee:b6:97:fc:d6:
da:60:0b:1e:f3:7b:18:bf:69:d5:29:b3:a6:4a:9f:2a:ed:3c:
57:0b:94:cb:1b:ba:f9:cb:bd:76:64:f1:1f:cb:88:51:42:22:
22:ae:83:b6:a3:a0:c8:89:19:59:6f:33:1e:bd:fd:a8:9e:ca:
f8:43:61:f2:33:22:4e:a4:01:85:0d:db:6e:ed:1a:75:19:f8:
8e:4c:c5:15:41:57:e8:fb:3e:75:6a:72:57:34:22:60:36:4c:
62:79:a8:5d:2e:71:54:d8:32:59:3c:8a:ab:2c:1e:f7:34:36:
bd:7f:70:38:ce:1d:c7:14:0f:44:9d:e0:20:17:4e:56:28:38:
e4:05:d9:6b:2e:d2:96:20:6d:34:7e:1f:b8:88:29:34:bd:6c:
8f:c7:76:be:20:f1:4f:56:39:f0:2b:4a:84:c0:39:0b:db:96:
2c:ed:de:01
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAVBDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI5MDk1NzE2WhcNMjUwNjI1MDk1NzE2WjAYMRYw
FAYDVQQDEw02ODEwYTI4Mi03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZlWOBTnfo0uMYpuUxZ5YP5xrt1uRIxZ+7t+CK7wFrnctHCDrLfgFdnU
eCQAE3TaXiTzNTGK3qGQY93Yz9j2mWGFY/UnfJth9xMf7tAbBy6NvN8Srt9Kad7N
YT4pE0Akghu3sM0NQklUh4LV69N2q/gx4FlFHtodnCK8ZoX+aXRFVIrnkJ3fIuz1
QRRW3ZfuRmeHT65VAKHAvPSASVP1noUImd/CmKA2l4IlwBAmapxrt5MqF2zuIuNW
CBI2SA62aQD0ytSBZ0+5mGbfjjSULNVx2wXCfc4sAUjVc8PKWIU/k7OZ1C7hA5Po
bnQ8tD9G7WQ+czSJtEjTBHwDFsoeFQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFBlo
mvK9bc9Vg5eDy3+/VOxGR1KhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81N0NGNTlGNjI0RTAxMUYwOTVDQzNEQjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACc4XsDBAec4QADBACc4wkD
BACc4w8DBACc5S4wDQYJKoZIhvcNAQELBQADggEBADTVhdLd52kD6FKco4Qtim+6
yzgmfGP0lwhbzZWE8Kbr4n7gdmM49kUOtvDtjtM6H+Vxbhdu1eRvXyenChbWujIv
r8x5Gf6pZzw5DOqQ+qjxq55paFPutpf81tpgCx7zexi/adUps6ZKnyrtPFcLlMsb
uvnLvXZk8R/LiFFCIiKug7ajoMiJGVlvMx69/aieyvhDYfIzIk6kAYUN227tGnUZ
+I5MxRVBV+j7PnVqclc0ImA2TGJ5qF0ucVTYMlk8iqssHvc0Nr1/cDjOHccUD0Sd
4CAXTlYoOOQF2Wsu0pYgbTR+H7iIKTS9bI/Hdr4g8U9WOfArSoTAOQvblizt3gE=
-----END CERTIFICATE-----
Generated at Sun May 11 00:39:54 2025 by rpki-client