Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E9DE2C4E7D11F0BC3991DCDAE4EC9C.roa
File: 84E9DE2C4E7D11F0BC3991DCDAE4EC9C.roa (raw, json)
Hash identifier: 55QCZkyc+JFHexEdaF97nYYzQn+nfnxxl1+XstDEEPs=
Subject key identifier: 2C:A0:6C:6D:CB:D3:DF:3C:E3:F2:72:3F:2B:3F:40:CD:BA:01:91:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E9DE2C4E7D11F0BC3991DCDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:55:46 +0000
ROA not before: Sat 21 Jun 2025 08:55:41 +0000
ROA not after: Sun 27 Jul 2025 08:55:41 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89494 (0x15d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:55:41 2025 GMT
Not After : Jul 27 08:55:41 2025 GMT
Subject: CN=68567392-5b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:86:f3:23:92:06:29:24:37:66:0c:41:dd:
6c:c7:db:35:48:13:2c:8e:75:cd:fe:14:a2:78:14:
de:2c:b9:0b:2e:39:f4:a8:3d:67:99:5f:8f:a3:85:
a1:89:ae:e5:ac:12:4e:94:dc:e8:8a:0a:93:62:25:
60:5e:ad:df:c9:b3:37:00:20:75:4e:1c:b5:1d:95:
6d:48:72:a5:9f:4f:74:20:2d:80:4c:0a:89:bc:ac:
0a:a6:08:c6:0c:31:60:e8:e3:64:c0:d7:ba:28:4a:
36:ba:9a:fb:c6:96:58:ed:72:4f:bc:af:77:c1:af:
bf:f1:6c:f0:a2:b3:42:fb:bc:63:75:39:1b:5e:a1:
d5:da:00:21:4d:38:ed:df:8c:67:ef:00:a1:52:f9:
34:b7:69:1e:b8:3c:75:9c:48:a2:d9:74:a8:f9:5f:
e4:5a:23:5b:25:0f:97:37:69:38:24:16:46:af:2d:
3d:d7:75:df:d9:3f:bc:a1:4e:f6:e6:20:73:87:29:
a4:35:14:ab:c6:d4:a3:f7:7c:4d:ca:7f:9a:a5:81:
16:39:bb:ad:95:17:2c:a3:16:be:ff:1c:a5:0d:89:
22:88:49:79:5b:d4:f3:ba:dc:6d:66:65:3d:ec:da:
c2:b8:22:55:7e:ea:8b:99:7b:f4:36:b1:85:1a:96:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:6C:6D:CB:D3:DF:3C:E3:F2:72:3F:2B:3F:40:CD:BA:01:91:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E9DE2C4E7D11F0BC3991DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/24
156.246.152.0-156.246.160.255
156.246.166.0-156.246.168.255
156.246.180.0/24
156.246.182.0/24
156.246.192.0/24
156.246.195.0/24
156.246.251.0/24
156.246.253.0-156.246.254.255
Signature Algorithm: sha256WithRSAEncryption
af:4a:86:a1:03:b0:5d:c4:67:48:bc:50:48:f8:a6:b3:21:db:
0b:c1:2a:69:e5:3f:ce:87:af:5c:f1:cc:0a:94:d4:e5:77:3e:
15:03:2e:f1:29:09:e6:7d:a6:cd:c8:04:3e:8b:fb:4b:80:80:
6a:24:25:33:2a:2c:b2:89:15:8e:5e:1e:53:d4:85:b9:36:66:
c1:ce:00:4f:76:bf:74:ea:8f:11:90:4b:7e:39:d8:bc:de:84:
11:10:b8:cc:48:ec:d4:90:70:6f:85:ff:14:f7:58:c2:3f:b7:
72:37:4c:75:5b:de:2f:18:23:85:27:ce:f9:34:2a:dd:2c:52:
5b:7f:9e:b3:e8:c3:48:5f:a7:24:41:11:eb:66:c4:f7:ee:99:
4c:a4:7c:a3:8a:b9:3d:44:4e:e4:a9:12:bd:01:a0:9b:e5:59:
f7:a8:37:fb:a6:ff:69:14:40:f3:e6:f4:e8:60:a2:91:49:9e:
7d:64:ea:0c:38:77:56:5d:76:df:49:11:ae:2d:04:0e:0f:95:
01:94:78:9b:da:2e:f4:45:40:0d:d7:1f:ce:70:4c:e8:98:ff:
34:7e:ad:48:de:0b:bc:a7:20:6a:a3:40:4a:b3:85:5c:14:b3:
26:2e:07:2b:db:07:e3:8b:cd:0f:66:b8:0d:8e:ef:f7:a7:0a:
81:70:59:c3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIDAV2WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIxMDg1NTQxWhcNMjUwNzI3MDg1NTQxWjAYMRYw
FAYDVQQDEw02ODU2NzM5Mi01YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvumG8yOSBikkN2YMQd1sx9s1SBMsjnXN/hSieBTeLLkLLjn0qD1nmV+P
o4Whia7lrBJOlNzoigqTYiVgXq3fybM3ACB1Thy1HZVtSHKln090IC2ATAqJvKwK
pgjGDDFg6ONkwNe6KEo2upr7xpZY7XJPvK93wa+/8WzworNC+7xjdTkbXqHV2gAh
TTjt34xn7wChUvk0t2keuDx1nEii2XSo+V/kWiNbJQ+XN2k4JBZGry0913Xf2T+8
oU725iBzhymkNRSrxtSj93xNyn+apYEWObutlRcsoxa+/xylDYkiiEl5W9Tzutxt
ZmU97NrCuCJVfuqLmXv0NrGFGpYACQIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFCyg
bG3L09884/JyPys/QM26AZGhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NEU5REUyQzRFN0QxMUYwQkMzOTkxRENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAnPaWMAwDBAOc9pgDBACc9qAw
DAMEAZz2pgMEAJz2qAMEAJz2tAMEAJz2tgMEAJz2wAMEAJz2wwMEAJz2+zAMAwQA
nPb9AwQAnPb+MA0GCSqGSIb3DQEBCwUAA4IBAQCvSoahA7BdxGdIvFBI+KazIdsL
wSpp5T/Oh69c8cwKlNTldz4VAy7xKQnmfabNyAQ+i/tLgIBqJCUzKiyyiRWOXh5T
1IW5NmbBzgBPdr906o8RkEt+Odi83oQRELjMSOzUkHBvhf8U91jCP7dyN0x1W94v
GCOFJ875NCrdLFJbf56z6MNIX6ckQRHrZsT37plMpHyjirk9RE7kqRK9AaCb5Vn3
qDf7pv9pFEDz5vToYKKRSZ59ZOoMOHdWXXbfSRGuLQQOD5UBlHib2i70RUAN1x/O
cEzomP80fq1I3gu8pyBqo0BKs4VcFLMmLgcr2wfji80PZrgNju/3pwqBcFnD
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:45:37 2025 by rpki-client