Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B9E7A250F511F09C7AEEE3DAE4EC9C.roa
File: 83B9E7A250F511F09C7AEEE3DAE4EC9C.roa (raw, json)
Hash identifier: ncK3+3WpFt9+1jozc6f4WarHuHkzs2wJivxdldRTka4=
Subject key identifier: 79:54:60:CD:D8:D8:08:35:0F:8C:30:61:2E:A0:4E:B4:E9:92:AF:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B9E7A250F511F09C7AEEE3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:19:46 +0000
ROA not before: Tue 24 Jun 2025 12:19:41 +0000
ROA not after: Sat 09 Aug 2025 12:19:41 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89712 (0x15e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 12:19:41 2025 GMT
Not After : Aug 9 12:19:41 2025 GMT
Subject: CN=685a97e2-ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:7c:55:f8:d2:31:b1:fc:bb:19:78:71:12:
65:1d:0d:b9:b0:e5:23:8a:59:f0:a2:20:db:a8:66:
2d:d6:37:18:5a:a7:b9:a0:d9:d1:5f:45:cb:d5:1c:
7c:20:49:fa:db:80:b2:6b:ea:45:4f:01:17:7a:59:
77:2d:ac:19:e9:e6:af:1a:63:5d:64:3d:ed:8a:8f:
be:7d:05:67:94:d6:3d:fb:e4:80:28:d0:19:74:e8:
78:55:01:77:db:13:e7:72:84:8f:21:8b:70:4e:c6:
28:04:f3:76:ca:86:06:b5:e4:9a:22:6a:e1:31:30:
47:04:d2:8e:cb:08:49:d6:24:90:4e:38:65:87:86:
3c:31:cd:c1:d4:5b:e7:9e:5b:49:ac:ee:58:b8:bb:
ed:76:a6:55:39:dc:2f:c2:33:60:5d:69:f2:de:96:
66:4b:26:c5:06:4b:bd:81:ad:24:92:41:02:ca:3d:
54:33:4a:40:93:ec:f1:c3:cf:37:ff:9d:72:6a:cf:
69:a8:d7:85:f7:02:31:d5:ad:98:c5:43:07:7a:89:
e2:69:78:2f:e3:66:ec:97:c4:9b:bb:21:81:4c:8f:
68:dc:38:10:6b:3b:7e:43:b6:d7:4a:85:de:d5:f0:
d1:a6:f6:21:bb:9b:77:fe:e9:5f:6c:ee:59:d1:c4:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:60:CD:D8:D8:08:35:0F:8C:30:61:2E:A0:4E:B4:E9:92:AF:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B9E7A250F511F09C7AEEE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0/21
156.244.37.0-156.244.38.255
Signature Algorithm: sha256WithRSAEncryption
ad:f8:b0:4f:b3:6c:a8:5a:3d:99:01:59:f7:6e:cf:65:95:ea:
7c:f1:d5:e1:05:b0:b5:e8:ed:be:a6:81:08:9a:30:e3:f2:31:
44:9c:6a:2e:e5:db:21:da:55:5c:7d:4f:cd:de:cd:39:f6:b9:
81:2b:b7:ec:ed:43:4d:2a:84:73:96:86:5e:ed:5a:ea:aa:bd:
0d:4a:e4:d4:f0:43:12:7d:e0:f2:23:9a:10:a4:79:fa:a1:b3:
ac:0e:04:de:5d:f7:29:4b:23:f7:25:49:20:20:25:4d:7c:13:
db:27:b7:3c:c5:0f:4d:dc:19:d2:cc:5a:11:6a:de:98:68:98:
21:27:c9:0a:fc:07:e0:51:80:41:a1:a3:43:dc:cc:1d:03:da:
cb:38:1d:b3:57:80:6c:96:18:7f:46:78:29:63:7a:a8:57:bb:
f5:4a:80:19:69:ed:3d:f3:20:6d:d8:bd:3f:6a:fe:08:59:f6:
c8:8e:dc:a3:0d:e6:f5:81:99:71:8b:4d:ef:f0:24:fd:9e:2d:
0a:67:fd:65:8f:87:1c:3c:e1:3e:65:05:45:66:3e:42:43:15:
7a:26:eb:d0:e7:7c:6f:36:69:22:73:e7:34:95:37:36:b1:2c:
a8:4b:a1:18:e6:5d:bd:cd:57:0c:07:12:46:2d:7c:1d:d2:44:
2b:e6:3d:57
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAV5wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI0MTIxOTQxWhcNMjUwODA5MTIxOTQxWjAYMRYw
FAYDVQQDEw02ODVhOTdlMi1lZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Bx8VfjSMbH8uxl4cRJlHQ25sOUjilnwoiDbqGYt1jcYWqe5oNnRX0XL
1Rx8IEn624Cya+pFTwEXell3LawZ6eavGmNdZD3tio++fQVnlNY9++SAKNAZdOh4
VQF32xPncoSPIYtwTsYoBPN2yoYGteSaImrhMTBHBNKOywhJ1iSQTjhlh4Y8Mc3B
1FvnnltJrO5YuLvtdqZVOdwvwjNgXWny3pZmSybFBku9ga0kkkECyj1UM0pAk+zx
w883/51yas9pqNeF9wIx1a2YxUMHeoniaXgv42bsl8SbuyGBTI9o3DgQazt+Q7bX
SoXe1fDRpvYhu5t3/ulfbO5Z0cRVjwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHlU
YM3Y2Ag1D4wwYS6gTrTpkq80MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84M0I5RTdBMjUwRjUxMUYwOUM3QUVFRTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDnPQAMAwDBACc9CUDBACc9CYw
DQYJKoZIhvcNAQELBQADggEBAK34sE+zbKhaPZkBWfduz2WV6nzx1eEFsLXo7b6m
gQiaMOPyMUScai7l2yHaVVx9T83ezTn2uYErt+ztQ00qhHOWhl7tWuqqvQ1K5NTw
QxJ94PIjmhCkefqhs6wOBN5d9ylLI/clSSAgJU18E9sntzzFD03cGdLMWhFq3pho
mCEnyQr8B+BRgEGho0PczB0D2ss4HbNXgGyWGH9GeCljeqhXu/VKgBlp7T3zIG3Y
vT9q/ghZ9siO3KMN5vWBmXGLTe/wJP2eLQpn/WWPhxw84T5lBUVmPkJDFXom69Dn
fG82aSJz5zSVNzaxLKhLoRjmXb3NVwwHEkYtfB3SRCvmPVc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:49:03 2025 by rpki-client