Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD7DFC2581711F0AC267DC5DAE4EC9C.roa
File: 8DD7DFC2581711F0AC267DC5DAE4EC9C.roa (raw, json)
Hash identifier: 12RmccbvYZlPfGAFAiIUZu2CfG4t8vDDeHleMIfmpG4=
Subject key identifier: BF:F3:D9:0B:D4:72:82:A0:9D:96:5E:3F:AB:0C:08:2F:9A:91:D6:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016094
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD7DFC2581711F0AC267DC5DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 14:11:04 +0000
ROA not before: Thu 03 Jul 2025 14:10:59 +0000
ROA not after: Fri 10 Oct 2025 14:10:59 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90260 (0x16094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 14:10:59 2025 GMT
Not After : Oct 10 14:10:59 2025 GMT
Subject: CN=68668f78-6d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:02:d3:05:b7:04:da:8e:ed:57:8d:d2:bb:
fd:13:d2:d5:96:c5:c8:e8:dd:ec:15:6b:8e:e6:62:
76:a4:46:ea:d8:27:aa:bf:7d:9e:5f:c9:f2:15:fa:
f3:00:34:50:70:2d:9e:88:ab:34:fd:a6:5e:46:0f:
f1:c8:9d:c7:ce:be:08:37:94:2d:a0:97:85:4d:01:
68:9f:7a:89:c6:5a:36:fa:ab:ad:32:42:d5:a2:0b:
e3:18:7e:72:07:49:da:cc:41:89:5d:a6:ce:f6:21:
d2:d5:10:80:7c:e9:65:2e:d2:be:0e:18:33:16:ed:
8c:20:46:10:b0:0c:b9:8d:b2:41:63:d9:bb:da:c9:
54:c5:ac:56:7a:a4:3e:25:58:a1:66:a2:ee:ec:c0:
a5:d6:c9:a2:97:54:a0:99:93:95:c0:b6:30:e8:d4:
cd:62:69:4b:50:55:cb:7c:6d:1d:e3:7b:b9:30:a2:
e7:b1:28:50:ec:61:4a:92:37:77:db:7f:61:ce:49:
f8:06:63:44:b6:0f:ed:70:87:82:ac:96:ee:68:73:
29:98:08:27:d2:84:28:83:a5:ac:04:b6:6f:fb:6e:
e9:f4:c1:3a:5d:68:ba:01:10:cc:52:b8:38:43:0d:
bf:4e:e2:8a:6a:33:53:d1:a9:de:ed:c1:0b:0b:f6:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:D9:0B:D4:72:82:A0:9D:96:5E:3F:AB:0C:08:2F:9A:91:D6:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD7DFC2581711F0AC267DC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:01:21:ba:29:d7:fd:83:86:25:0a:45:2a:af:51:69:80:00:
f2:37:db:00:03:77:3b:49:50:e0:c2:40:7b:45:eb:6e:0e:c4:
29:bb:8e:a4:69:7b:16:88:e7:c5:f3:b0:e1:eb:3c:a7:73:36:
d5:e9:33:6d:a6:09:ef:58:f0:96:8f:e9:ab:f3:8f:f1:9b:5f:
f8:81:97:29:13:0d:c7:a3:96:7a:22:6e:6d:e5:42:e1:f9:f2:
0a:70:77:8d:d1:31:c3:68:40:9e:ac:2f:0d:87:1a:c0:8d:7c:
5d:c9:ec:df:b2:74:ad:86:ca:4e:22:87:ac:77:11:ea:65:6e:
f0:72:3b:72:02:ee:d9:14:c4:58:59:35:67:cd:61:ea:98:f2:
97:3a:92:f3:71:15:fd:9f:fa:b3:85:37:f5:47:31:da:9b:36:
9f:76:79:99:63:6c:11:e0:be:47:1b:84:d9:a1:22:92:d4:b0:
69:04:84:9f:3e:c5:60:d1:88:24:36:41:8e:a0:29:c9:ae:45:
d0:32:07:ae:7d:b8:eb:64:02:79:bf:49:94:88:00:1c:b9:fc:
5e:fe:44:92:a1:7e:bf:96:41:91:85:a2:7d:38:ea:96:2f:61:
10:18:b6:fd:36:b8:39:cb:15:21:7f:fb:8d:f7:46:6f:2c:8c:
e1:df:34:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWCUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTQxMDU5WhcNMjUxMDEwMTQxMDU5WjAYMRYw
FAYDVQQDEw02ODY2OGY3OC02ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAohwC0wW3BNqO7VeN0rv9E9LVlsXI6N3sFWuO5mJ2pEbq2Ceqv32eX8ny
FfrzADRQcC2eiKs0/aZeRg/xyJ3Hzr4IN5QtoJeFTQFon3qJxlo2+qutMkLVogvj
GH5yB0nazEGJXabO9iHS1RCAfOllLtK+DhgzFu2MIEYQsAy5jbJBY9m72slUxaxW
eqQ+JVihZqLu7MCl1smil1SgmZOVwLYw6NTNYmlLUFXLfG0d43u5MKLnsShQ7GFK
kjd3239hzkn4BmNEtg/tcIeCrJbuaHMpmAgn0oQog6WsBLZv+27p9ME6XWi6ARDM
Urg4Qw2/TuKKajNT0ane7cELC/awMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL/z
2QvUcoKgnZZeP6sMCC+akdZwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84REQ3REZDMjU4MTcxMUYwQUMyNjdEQzVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOtaMA0GCSqGSIb3DQEBCwUA
A4IBAQB/ASG6Kdf9g4YlCkUqr1FpgADyN9sAA3c7SVDgwkB7RetuDsQpu46kaXsW
iOfF87Dh6zynczbV6TNtpgnvWPCWj+mr84/xm1/4gZcpEw3Ho5Z6Im5t5ULh+fIK
cHeN0THDaECerC8NhxrAjXxdyezfsnSthspOIoesdxHqZW7wcjtyAu7ZFMRYWTVn
zWHqmPKXOpLzcRX9n/qzhTf1RzHamzafdnmZY2wR4L5HG4TZoSKS1LBpBISfPsVg
0YgkNkGOoCnJrkXQMgeufbjrZAJ5v0mUiAAcufxe/kSSoX6/lkGRhaJ9OOqWL2EQ
GLb9Nrg5yxUhf/uN90ZvLIzh3zSk
-----END CERTIFICATE-----
Generated at Sun Jul 6 00:04:32 2025 by rpki-client