Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/860E3918243B11F089DA27D9DAE4EC9C.roa
File: 860E3918243B11F089DA27D9DAE4EC9C.roa (raw, json)
Hash identifier: vNKLPynnXUDWF2G67OaC3y1pdmXqXDsHPbp/Y0slBqc=
Subject key identifier: AE:D8:B4:B1:43:2C:2E:06:60:28:1D:8D:EC:88:4D:EF:C8:93:A2:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/860E3918243B11F089DA27D9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:17:32 +0000
ROA not before: Mon 28 Apr 2025 14:17:27 +0000
ROA not after: Sat 25 Apr 2026 14:17:27 +0000
asID: 984
IP address blocks: 156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85862 (0x14f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:17:27 2025 GMT
Not After : Apr 25 14:17:27 2026 GMT
Subject: CN=680f8dfc-a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:cd:b5:7c:0d:db:2e:29:e6:27:a4:93:b8:
6a:50:ba:68:51:03:32:93:c8:de:4a:75:9a:dd:6a:
d5:4c:9f:d5:81:60:ff:ae:04:77:98:9d:93:06:6a:
60:46:cb:54:23:9c:fc:04:66:e8:ff:2b:94:62:ae:
05:93:35:db:2d:bd:4d:3c:58:11:a6:55:1f:f6:11:
47:53:28:59:86:29:6a:cd:7d:1d:76:c8:da:d5:df:
a9:96:86:e2:53:f7:38:b0:92:4e:a6:74:32:aa:9b:
41:00:96:63:77:74:f2:2d:95:80:85:b4:6a:70:b0:
8a:64:30:2f:12:4c:b5:1d:51:a2:52:2b:df:e0:7a:
7d:b0:aa:ad:2a:a5:39:06:c5:3b:1a:0f:25:19:c1:
34:60:5d:1e:30:cd:ea:f0:8e:94:91:11:be:34:f2:
c0:3b:f2:e9:f9:c0:67:90:d6:d7:c8:c3:d6:12:76:
71:d9:be:2d:13:e7:0a:d5:90:85:13:36:5f:f2:08:
46:7b:89:38:34:7b:f2:54:6e:38:86:60:d8:03:01:
8d:32:45:8d:79:ea:25:46:ea:bc:50:e3:99:08:1a:
d2:e2:5c:9e:68:66:51:25:e4:fd:28:ca:32:a5:9a:
32:e9:7f:b9:57:86:5e:b0:a7:08:8e:20:fb:76:4e:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:B4:B1:43:2C:2E:06:60:28:1D:8D:EC:88:4D:EF:C8:93:A2:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/860E3918243B11F089DA27D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.133.0-156.245.135.255
156.245.188.0/23
156.245.198.0-156.245.202.255
Signature Algorithm: sha256WithRSAEncryption
5d:85:20:80:98:59:e1:c5:a5:4e:59:e2:c9:39:51:fa:75:ee:
89:7f:bb:60:dc:2e:55:c2:b9:f2:a1:12:7f:96:41:51:54:20:
b3:84:98:9a:76:93:6d:43:33:5e:1e:5a:16:b2:8f:b0:a5:e2:
f1:e9:63:d5:61:80:ef:c6:5f:0f:4e:db:3c:98:fb:7b:4b:f8:
d4:54:16:06:ea:82:ab:35:c8:47:a5:d7:66:fa:e5:2c:17:74:
04:80:fb:d8:9d:4a:ca:8c:c7:21:e3:9a:63:23:66:0b:9b:c3:
00:6d:85:f4:0a:36:dc:8e:67:f3:38:34:db:44:3b:2c:64:00:
2a:e0:9a:02:17:c9:71:c7:b2:1b:a9:8d:f4:bf:91:15:29:db:
fd:04:51:75:53:45:5d:22:72:e5:13:a4:7f:88:0e:d5:3d:07:
6f:9c:5b:3f:ab:ad:2c:ee:1b:d3:11:b3:6c:ab:5f:03:4e:13:
f4:a6:bd:2e:84:7b:2f:46:8c:a6:4d:bf:86:0b:2c:44:98:06:
af:e5:fc:e4:db:82:20:dd:59:02:d6:2e:32:b4:d7:4a:03:91:
42:57:29:84:57:4a:70:ff:94:28:9b:c2:f4:24:a4:ce:4c:e5:
0d:82:a5:32:df:7d:be:48:05:19:81:a8:da:ef:b5:9d:ef:3b:
6b:2d:0c:1a
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAU9mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTQxNzI3WhcNMjYwNDI1MTQxNzI3WjAYMRYw
FAYDVQQDEw02ODBmOGRmYy1hMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApFzNtXwN2y4p5iekk7hqULpoUQMyk8jeSnWa3WrVTJ/VgWD/rgR3mJ2T
BmpgRstUI5z8BGbo/yuUYq4FkzXbLb1NPFgRplUf9hFHUyhZhilqzX0ddsja1d+p
lobiU/c4sJJOpnQyqptBAJZjd3TyLZWAhbRqcLCKZDAvEky1HVGiUivf4Hp9sKqt
KqU5BsU7Gg8lGcE0YF0eMM3q8I6UkRG+NPLAO/Lp+cBnkNbXyMPWEnZx2b4tE+cK
1ZCFEzZf8ghGe4k4NHvyVG44hmDYAwGNMkWNeeolRuq8UOOZCBrS4lyeaGZRJeT9
KMoypZoy6X+5V4ZesKcIjiD7dk59wQIDAQABo4ICvjCCArowHQYDVR0OBBYEFK7Y
tLFDLC4GYCgdjeyITe/Ik6KIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NjBFMzkxODI0M0IxMUYwODlEQTI3RDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACc9YUDBAOc9YADBAGc9bww
DAMEAZz1xgMEAJz1yjANBgkqhkiG9w0BAQsFAAOCAQEAXYUggJhZ4cWlTlniyTlR
+nXuiX+7YNwuVcK58qESf5ZBUVQgs4SYmnaTbUMzXh5aFrKPsKXi8elj1WGA78Zf
D07bPJj7e0v41FQWBuqCqzXIR6XXZvrlLBd0BID72J1KyozHIeOaYyNmC5vDAG2F
9Ao23I5n8zg020Q7LGQAKuCaAhfJcceyG6mN9L+RFSnb/QRRdVNFXSJy5ROkf4gO
1T0Hb5xbP6utLO4b0xGzbKtfA04T9Ka9LoR7L0aMpk2/hgssRJgGr+X85NuCIN1Z
AtYuMrTXSgORQlcphFdKcP+UKJvC9CSkzkzlDYKlMt99vkgFGYGo2u+1ne87ay0M
Gg==
-----END CERTIFICATE-----
Generated at Mon May 12 13:21:47 2025 by rpki-client