Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DFB0A6224C411F0BF472078DAE4EC9C.roa
File: 5DFB0A6224C411F0BF472078DAE4EC9C.roa (raw, json)
Hash identifier: lS7RelfTU8vDEe5/VcGP7tlw5GvF57Drq+nta6uhVfQ=
Subject key identifier: B9:81:17:06:73:AC:49:4D:CF:52:E7:60:B6:A3:5D:23:41:05:41:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015005
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DFB0A6224C411F0BF472078DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 06:37:06 +0000
ROA not before: Tue 29 Apr 2025 06:37:02 +0000
ROA not after: Fri 30 May 2025 06:37:02 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86021 (0x15005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:37:02 2025 GMT
Not After : May 30 06:37:02 2025 GMT
Subject: CN=68107392-069d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:ac:79:9e:7a:9e:08:14:d1:5d:fc:d6:37:
b2:2d:28:21:44:ac:d0:30:b2:71:93:d3:15:ad:c5:
4d:d3:49:cc:ea:4c:28:2e:28:c9:56:63:34:9f:d4:
78:2a:b6:e8:a2:38:af:37:5b:98:cb:24:90:32:75:
a7:ae:66:c5:ff:56:7d:e1:80:91:8f:6a:c6:1f:09:
cd:15:ba:68:18:93:04:34:6e:d1:2a:ed:5f:ce:55:
d5:9f:19:fe:00:c3:f0:5c:65:5c:a2:a2:01:00:7d:
f7:fa:9d:9a:b5:42:77:6b:9b:97:f7:e7:a9:68:08:
0d:f8:9c:42:95:f5:c5:f1:7b:07:ec:88:2c:53:21:
7c:3a:72:b9:c2:bd:8b:90:bf:53:4d:0d:44:48:5e:
84:53:8d:b6:ac:d4:6f:ca:e4:35:86:c8:00:a2:4f:
11:6f:21:0e:cb:07:dd:2e:6d:da:d4:a2:2f:19:64:
af:59:7c:ca:eb:7f:7a:e3:2c:ed:0c:2c:8c:c1:93:
7b:a2:a8:3e:d6:42:c5:8e:fd:25:9b:98:e9:c0:16:
3b:19:9c:9d:e5:29:13:9a:73:24:88:87:23:4d:2f:
62:12:3f:2c:38:c6:5d:61:76:12:b4:8e:c7:4f:c0:
2d:cf:5c:2f:7b:1a:83:1b:a5:e1:80:9b:7f:5e:54:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:17:06:73:AC:49:4D:CF:52:E7:60:B6:A3:5D:23:41:05:41:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DFB0A6224C411F0BF472078DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:07:37:37:7f:b5:ec:f5:95:8d:47:2d:c3:55:4e:24:db:e6:
4e:3d:5b:f8:a6:9f:60:8c:de:d4:12:7e:d2:0a:cf:ca:09:4d:
97:5a:c1:0c:03:52:37:97:b1:f1:79:94:2e:0d:68:56:ee:e5:
00:e7:2f:23:9a:72:b3:47:3f:57:51:48:c5:a4:8b:44:0b:93:
6c:87:a2:d0:ac:9b:38:1b:71:6b:52:c5:82:0c:50:c6:4b:96:
9e:a1:0c:90:49:b5:18:93:28:4b:88:33:87:8b:7f:43:12:d2:
b1:b3:05:95:5b:01:27:ff:15:19:19:17:da:dd:88:4d:e6:e7:
92:8f:b8:3b:04:1e:1a:58:0f:14:39:14:54:42:9e:e6:bd:38:
45:32:c8:e9:c6:cc:67:3a:23:99:6c:42:d4:39:f9:fc:fc:00:
2e:63:16:8c:96:86:44:a1:94:b7:17:55:45:27:90:56:00:6f:
e0:16:39:99:e1:9b:5d:2f:54:8a:41:28:12:5f:5b:bf:d1:87:
f6:b3:a7:98:86:a3:72:78:3d:6d:05:c9:67:b3:89:90:63:30:
29:b0:84:36:44:8f:0c:61:b0:47:be:6e:28:5b:ac:71:3c:c1:
71:62:fc:9b:27:98:b6:ae:6c:cd:aa:39:64:ea:14:5e:68:26:
6d:ef:28:2e
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAVAFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI5MDYzNzAyWhcNMjUwNTMwMDYzNzAyWjAYMRYw
FAYDVQQDEw02ODEwNzM5Mi0wNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2r6seZ56nggU0V381jeyLSghRKzQMLJxk9MVrcVN00nM6kwoLijJVmM0
n9R4KrboojivN1uYyySQMnWnrmbF/1Z94YCRj2rGHwnNFbpoGJMENG7RKu1fzlXV
nxn+AMPwXGVcoqIBAH33+p2atUJ3a5uX9+epaAgN+JxClfXF8XsH7IgsUyF8OnK5
wr2LkL9TTQ1ESF6EU422rNRvyuQ1hsgAok8RbyEOywfdLm3a1KIvGWSvWXzK6396
4yztDCyMwZN7oqg+1kLFjv0lm5jpwBY7GZyd5SkTmnMkiIcjTS9iEj8sOMZdYXYS
tI7HT8Atz1wvexqDG6XhgJt/XlT63wIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFLmB
FwZzrElNz1LnYLajXSNBBUFeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81REZCMEE2MjI0QzQxMUYwQkY0NzIwNzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQDnPWAAwQBnPW8MAwDBAGc9cYD
BAKc9cgwDAMEAJz10QMEAJz10gMEAZz18jANBgkqhkiG9w0BAQsFAAOCAQEAoQc3
N3+17PWVjUctw1VOJNvmTj1b+KafYIze1BJ+0grPyglNl1rBDANSN5ex8XmULg1o
Vu7lAOcvI5pys0c/V1FIxaSLRAuTbIei0KybOBtxa1LFggxQxkuWnqEMkEm1GJMo
S4gzh4t/QxLSsbMFlVsBJ/8VGRkX2t2ITebnko+4OwQeGlgPFDkUVEKe5r04RTLI
6cbMZzojmWxC1Dn5/PwALmMWjJaGRKGUtxdVRSeQVgBv4BY5meGbXS9UikEoEl9b
v9GH9rOnmIajcng9bQXJZ7OJkGMwKbCENkSPDGGwR75uKFuscTzBcWL8myeYtq5s
zao5ZOoUXmgmbe8oLg==
-----END CERTIFICATE-----
Generated at Sun May 11 09:07:32 2025 by rpki-client