Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/814FF86C4E7F11F09EA441E9DAE4EC9C.roa
File: 814FF86C4E7F11F09EA441E9DAE4EC9C.roa (raw, json)
Hash identifier: L/BtxhPb5DKQH4EpP/BkjGfdLcRvRHu4pBfZ7FfVmfs=
Subject key identifier: 76:21:64:E9:FA:2C:7D:7F:6C:C8:69:C9:9E:A6:93:34:C9:EE:63:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/814FF86C4E7F11F09EA441E9DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 09:09:58 +0000
ROA not before: Sat 21 Jun 2025 09:09:55 +0000
ROA not after: Sun 27 Jul 2025 09:09:55 +0000
asID: 44559
IP address blocks: 156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89498 (0x15d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 09:09:55 2025 GMT
Not After : Jul 27 09:09:55 2025 GMT
Subject: CN=685676e6-c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:73:43:6c:92:f0:8c:c8:da:f1:13:22:8d:
a2:2f:55:7d:4d:25:28:f4:75:f4:5a:1b:21:2d:4b:
7a:a1:5a:35:f3:3d:bf:5c:45:b4:54:40:6f:e3:2d:
ab:ef:80:56:38:32:81:94:3b:3c:dd:f6:f4:f1:ce:
cb:5e:91:5a:8b:83:90:8a:27:2c:8a:e0:72:03:7a:
0a:4d:30:1c:ed:d8:25:d8:9b:77:ee:3b:5f:80:73:
9f:5a:72:8c:71:4a:34:fe:37:39:55:1b:de:58:da:
40:d4:d0:ad:32:9a:24:1e:fd:79:22:88:24:50:4a:
cd:c2:21:68:49:45:5d:06:91:35:b3:4a:c0:f5:28:
cf:fd:1b:dc:c1:ff:8b:48:69:25:7a:1e:f4:27:78:
8e:4f:be:40:0b:ff:8b:1f:0c:40:68:cd:ca:4a:4d:
30:eb:b6:18:c7:a6:15:c9:dd:32:d0:01:6d:86:ad:
e6:26:ae:cd:c9:06:5e:d7:43:61:eb:e0:eb:08:78:
e0:b6:3f:58:30:ce:3f:fb:d8:61:d2:61:ed:dc:57:
cc:7b:a1:01:a4:81:2c:af:59:95:68:3d:87:15:a4:
95:10:c1:28:07:91:ec:f7:15:0d:8e:07:21:72:79:
29:07:44:5d:eb:03:2b:47:9d:eb:1e:2f:a1:5a:2a:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:64:E9:FA:2C:7D:7F:6C:C8:69:C9:9E:A6:93:34:C9:EE:63:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/814FF86C4E7F11F09EA441E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.234.0/23
156.246.252.0/24
156.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:16:8d:18:90:6a:16:79:65:6a:c0:23:47:e5:13:a2:2c:
eb:31:57:9f:a8:bd:59:a2:4f:77:56:a4:65:56:c6:7b:b2:a4:
80:9a:6f:94:5d:f0:98:13:c8:54:c1:3c:03:31:cd:aa:96:0c:
40:7c:14:d7:ef:8d:f4:49:70:f2:3b:72:a9:5a:45:60:41:57:
c3:d9:10:8a:6d:33:45:d4:b8:43:12:d5:35:e3:a3:85:52:97:
54:f5:0a:34:29:a0:f8:41:dc:70:3d:17:46:14:a9:4a:07:46:
51:84:d0:fd:88:d8:f3:9c:a9:b2:a9:f9:93:8b:13:b7:1a:57:
3d:2f:ed:00:b1:7e:71:bf:f5:06:08:30:3d:4e:8f:3e:55:9c:
4a:3d:38:59:ee:a8:ac:f8:07:e1:ee:4a:10:87:ae:17:1e:db:
5d:53:63:ec:11:28:4e:81:fc:d1:cf:90:49:01:1f:7e:7c:12:
08:6d:79:92:ea:b5:90:db:fc:dd:a4:54:27:19:fa:30:e1:d3:
26:0c:e2:c0:e2:ae:1d:82:96:be:c6:a3:e1:dd:35:d8:4f:7b:
9e:b0:72:ee:83:b9:37:a8:0a:38:64:94:e8:82:40:7e:4c:de:
a1:c1:ee:db:cf:0a:40:99:f7:00:2c:7f:dc:ab:0b:4c:f5:b8:
62:fc:4d:38
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAV2aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIxMDkwOTU1WhcNMjUwNzI3MDkwOTU1WjAYMRYw
FAYDVQQDEw02ODU2NzZlNi1jNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAou5zQ2yS8IzI2vETIo2iL1V9TSUo9HX0WhshLUt6oVo18z2/XEW0VEBv
4y2r74BWODKBlDs83fb08c7LXpFai4OQiicsiuByA3oKTTAc7dgl2Jt37jtfgHOf
WnKMcUo0/jc5VRveWNpA1NCtMpokHv15IogkUErNwiFoSUVdBpE1s0rA9SjP/Rvc
wf+LSGkleh70J3iOT75AC/+LHwxAaM3KSk0w67YYx6YVyd0y0AFthq3mJq7NyQZe
10Nh6+DrCHjgtj9YMM4/+9hh0mHt3FfMe6EBpIEsr1mVaD2HFaSVEMEoB5Hs9xUN
jgchcnkpB0Rd6wMrR53rHi+hWip78wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFHYh
ZOn6LH1/bMhpyZ6mkzTJ7mO4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTRGRjg2QzRFN0YxMUYwOUVBNDQxRTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnPbqAwQAnPb8AwQAnPb/MA0G
CSqGSIb3DQEBCwUAA4IBAQAuGhaNGJBqFnllasAjR+UToizrMVefqL1Zok93VqRl
VsZ7sqSAmm+UXfCYE8hUwTwDMc2qlgxAfBTX7430SXDyO3KpWkVgQVfD2RCKbTNF
1LhDEtU146OFUpdU9Qo0KaD4QdxwPRdGFKlKB0ZRhND9iNjznKmyqfmTixO3Glc9
L+0AsX5xv/UGCDA9To8+VZxKPThZ7qis+Afh7koQh64XHttdU2PsEShOgfzRz5BJ
AR9+fBIIbXmS6rWQ2/zdpFQnGfow4dMmDOLA4q4dgpa+xqPh3TXYT3uesHLug7k3
qAo4ZJTogkB+TN6hwe7bzwpAmfcALH/cqwtM9bhi/E04
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:09:38 2025 by rpki-client