Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1600F0243D11F0977EE4E4DAE4EC9C.roa
File: 6E1600F0243D11F0977EE4E4DAE4EC9C.roa (raw, json)
Hash identifier: CrZDz5r34wESDTCouX95hAln5iXElh4geCDbJs6QDm8=
Subject key identifier: 2B:25:B5:94:E2:34:9F:A8:D3:06:8E:35:5B:BA:C9:E6:CD:7C:4F:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1600F0243D11F0977EE4E4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:31:11 +0000
ROA not before: Mon 28 Apr 2025 14:31:07 +0000
ROA not after: Sun 26 Apr 2026 14:31:07 +0000
asID: 984
IP address blocks: 156.226.9.0/24 maxlen: 24
156.226.10.0/24 maxlen: 24
156.226.12.0/24 maxlen: 24
156.226.13.0/24 maxlen: 24
156.226.14.0/24 maxlen: 24
156.226.15.0/24 maxlen: 24
156.229.57.0/24 maxlen: 24
156.229.59.0/24 maxlen: 24
156.229.60.0/24 maxlen: 24
156.229.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85874 (0x14f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:31:07 2025 GMT
Not After : Apr 26 14:31:07 2026 GMT
Subject: CN=680f912f-3c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:c3:eb:33:8f:ac:04:8f:6c:33:28:f3:b8:
f7:d0:be:f0:b9:d5:b1:06:6c:10:ae:47:f3:03:aa:
ce:63:8a:a6:25:74:94:69:75:4e:a1:f7:8b:74:c9:
48:67:91:7a:c8:4f:fc:c8:84:0e:28:a9:94:86:25:
6e:e5:d5:d0:d0:44:fa:fd:0d:6d:ec:63:96:12:9c:
49:37:08:37:c8:91:90:27:ad:51:73:19:92:f8:92:
7f:9c:3e:40:14:6c:d3:76:e2:58:e0:e9:7e:9b:8d:
c7:ee:ca:7f:50:02:4f:be:a4:2b:68:db:49:1e:88:
82:4e:80:6b:5c:90:3f:c3:05:02:39:01:7b:93:d4:
d7:00:c1:28:1c:bd:48:10:e0:03:32:c4:65:8b:f0:
0a:42:10:c4:ea:11:9d:4c:3f:3f:7c:c0:91:d4:37:
4a:e2:54:3b:7a:42:db:61:a4:13:90:ea:1a:a2:90:
d0:b4:8e:96:a3:0e:9b:b1:94:c4:51:fe:a2:3b:27:
4e:b6:ed:00:47:bf:15:ec:0e:28:f2:29:bb:d9:74:
65:fb:66:57:95:29:23:31:a9:72:be:92:7a:c4:0f:
0a:69:7d:21:db:99:25:05:8b:3a:d0:a7:af:fb:9b:
2e:97:5b:2a:65:ef:31:12:b0:17:0b:a7:f1:25:a7:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:B5:94:E2:34:9F:A8:D3:06:8E:35:5B:BA:C9:E6:CD:7C:4F:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1600F0243D11F0977EE4E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.9.0-156.226.10.255
156.226.12.0/22
156.229.57.0/24
156.229.59.0-156.229.60.255
156.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a6:74:f3:9a:b6:2b:c9:34:db:7d:72:98:6c:88:a4:f2:a7:
c8:6b:2e:61:2e:6b:3a:f6:b4:42:62:69:00:9c:1f:db:08:0a:
7d:a0:e2:6b:cf:60:c7:7d:71:59:13:a9:ed:36:c4:5c:23:01:
f2:ee:65:1a:38:79:71:e6:ed:15:15:c9:11:2c:53:4a:44:6f:
42:eb:40:55:b3:16:15:12:f8:67:22:f2:0d:cc:81:27:be:e8:
3f:60:f6:89:f4:3e:45:bb:75:e3:58:cf:29:28:8f:f5:99:4e:
b3:c4:f3:92:b0:5b:7b:8c:4e:b6:a0:cd:49:1a:d2:a9:42:f9:
b8:58:e9:2b:53:d4:ed:5d:e6:d8:1e:e5:36:55:c4:9a:04:d2:
53:46:7f:ce:f3:ae:ba:1f:b8:de:a1:10:15:69:3b:f5:aa:ac:
4c:ad:f2:35:1a:2e:33:67:87:43:96:32:1f:45:c2:db:cb:a0:
66:27:5d:51:02:78:74:50:68:03:0e:ae:b7:9d:06:c9:41:0a:
7d:ae:f2:45:32:9f:7d:a8:fa:78:ee:9c:e0:1e:dd:67:1d:f6:
77:77:a0:c2:ef:46:ce:2c:dd:64:15:5c:17:59:bf:e3:a2:4b:
7a:f3:88:ca:ac:5d:1d:2c:c9:30:8d:56:ba:2d:33:06:87:f5:
9a:20:fc:09
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAU9yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTQzMTA3WhcNMjYwNDI2MTQzMTA3WjAYMRYw
FAYDVQQDEw02ODBmOTEyZi0zYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1kfD6zOPrASPbDMo87j30L7wudWxBmwQrkfzA6rOY4qmJXSUaXVOofeL
dMlIZ5F6yE/8yIQOKKmUhiVu5dXQ0ET6/Q1t7GOWEpxJNwg3yJGQJ61RcxmS+JJ/
nD5AFGzTduJY4Ol+m43H7sp/UAJPvqQraNtJHoiCToBrXJA/wwUCOQF7k9TXAMEo
HL1IEOADMsRli/AKQhDE6hGdTD8/fMCR1DdK4lQ7ekLbYaQTkOoaopDQtI6Wow6b
sZTEUf6iOydOtu0AR78V7A4o8im72XRl+2ZXlSkjMalyvpJ6xA8KaX0h25klBYs6
0Kev+5sul1sqZe8xErAXC6fxJad7/QIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFCsl
tZTiNJ+o0waONVu6yebNfE9lMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTE2MDBGMDI0M0QxMUYwOTc3RUU0RTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBACc4gkDBACc4goDBAKc4gwD
BACc5TkwDAMEAJzlOwMEAJzlPAMEAJzlPjANBgkqhkiG9w0BAQsFAAOCAQEAuaZ0
85q2K8k0231ymGyIpPKnyGsuYS5rOva0QmJpAJwf2wgKfaDia89gx31xWROp7TbE
XCMB8u5lGjh5cebtFRXJESxTSkRvQutAVbMWFRL4ZyLyDcyBJ77oP2D2ifQ+Rbt1
41jPKSiP9ZlOs8TzkrBbe4xOtqDNSRrSqUL5uFjpK1PU7V3m2B7lNlXEmgTSU0Z/
zvOuuh+43qEQFWk79aqsTK3yNRouM2eHQ5YyH0XC28ugZiddUQJ4dFBoAw6ut50G
yUEKfa7yRTKffaj6eO6c4B7dZx32d3egwu9GzizdZBVcF1m/46JLevOIyqxdHSzJ
MI1Wui0zBof1miD8CQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:16:11 2025 by rpki-client