Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAA330519611F0AA39F381DAE4EC9C.roa
File: 90DAA330519611F0AA39F381DAE4EC9C.roa (raw, json)
Hash identifier: HEfENi4Moz05ryfxs5/0eozTj9Amy9v9NLRocP0hKSw=
Subject key identifier: 3B:8E:34:20:55:8A:AC:50:43:27:87:43:33:C9:3D:84:1E:82:26:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAA330519611F0AA39F381DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:32:37 +0000
ROA not before: Wed 25 Jun 2025 07:32:32 +0000
ROA not after: Thu 31 Jul 2025 07:32:32 +0000
asID: 44559
IP address blocks: 156.243.217.0/24 maxlen: 24
156.243.219.0/24 maxlen: 24
156.243.220.0/24 maxlen: 24
156.243.221.0/24 maxlen: 24
156.243.222.0/24 maxlen: 24
156.243.224.0/24 maxlen: 24
156.243.226.0/24 maxlen: 24
156.243.227.0/24 maxlen: 24
156.243.231.0/24 maxlen: 24
156.243.232.0/24 maxlen: 24
156.243.233.0/24 maxlen: 24
156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
156.243.242.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.244.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89793 (0x15ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 07:32:32 2025 GMT
Not After : Jul 31 07:32:32 2025 GMT
Subject: CN=685ba615-04ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:c0:69:c4:ca:b7:3d:a3:37:41:41:9f:3f:
6b:f3:9b:ff:b6:24:13:01:df:3d:fa:80:c1:5d:c0:
fe:2f:cd:fc:f7:95:4b:0b:18:76:c0:d2:3b:70:04:
f2:72:34:d8:af:d2:9f:a0:ef:d7:76:f4:94:5e:42:
dc:b8:4f:b8:a9:4c:d4:6c:c4:d2:c9:ed:cc:3d:91:
41:ae:68:53:f6:f0:89:ac:53:04:35:f0:de:f9:97:
d3:64:ed:70:08:82:1c:f5:5b:3f:80:4d:fa:0b:d4:
f8:5f:f0:f1:50:8b:3d:57:4f:92:82:5a:1f:bf:5a:
05:0f:ce:89:df:d1:17:46:ed:52:be:e2:3e:5f:b7:
08:36:6a:c2:99:ba:b0:d5:ea:3f:5e:d5:c4:43:aa:
34:b9:92:5a:74:86:d3:7c:1c:6b:91:fb:90:0f:b6:
ab:d5:a9:4f:e2:21:f6:ce:f1:86:f7:e0:6a:21:ea:
13:30:88:c8:d2:cc:f2:c9:c4:07:df:75:21:c2:ff:
27:5e:08:36:5e:b4:16:6b:c2:05:3f:2e:cd:4e:88:
72:c5:58:c8:f9:17:56:e0:6f:ea:b9:91:72:27:f4:
16:e8:65:25:8e:68:0e:6b:db:c0:7c:29:ab:27:f9:
7b:a9:39:81:d5:37:9a:a2:8d:19:ae:5e:87:59:59:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:34:20:55:8A:AC:50:43:27:87:43:33:C9:3D:84:1E:82:26:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAA330519611F0AA39F381DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.217.0/24
156.243.219.0-156.243.222.255
156.243.224.0/24
156.243.226.0/23
156.243.231.0-156.243.234.255
156.243.240.0/24
156.243.242.0/23
156.243.248.0/23
156.243.254.0/23
156.244.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:de:94:ed:5a:09:03:8d:04:ce:a9:33:48:e1:4e:bf:48:95:
7a:ce:0b:8a:e8:38:e6:29:c1:1b:b2:c0:ad:75:85:7e:5f:25:
5f:1c:a5:fd:83:e8:30:cf:6c:7a:a8:41:35:26:a8:6f:74:eb:
7d:dd:44:91:f8:ba:ae:48:9e:68:9d:d3:65:59:3b:59:9b:25:
ad:c8:b1:da:13:6d:37:71:83:09:63:84:eb:7f:97:c9:45:81:
65:58:40:d1:5d:e0:d1:76:4c:30:88:e1:cc:ca:ce:ee:e7:15:
37:8c:07:d7:3c:9e:39:41:80:22:5e:5f:c2:af:86:ae:9e:be:
bb:ad:f5:30:b4:d0:4a:02:71:9b:5d:d8:a5:51:64:2e:d7:c8:
0c:5e:fa:38:63:87:fc:b2:45:f8:46:ad:83:ab:81:fe:d9:7e:
aa:77:32:bd:63:6b:36:e7:03:71:7e:d3:c7:f4:33:62:66:75:
27:a6:4b:c5:30:28:7d:cc:39:e0:35:0c:fc:9b:31:d6:b3:74:
c2:09:82:49:a8:b6:74:a4:af:d6:6c:ae:96:a6:1c:bc:ab:71:
2a:1a:27:f6:be:01:f1:06:8e:8f:56:11:c3:e1:dd:ed:42:c7:
03:7f:8a:d3:ec:0e:70:3c:54:23:60:79:ab:6e:16:42:e2:11:
c6:ea:a8:36
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIDAV7BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI1MDczMjMyWhcNMjUwNzMxMDczMjMyWjAYMRYw
FAYDVQQDEw02ODViYTYxNS0wNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2AHAacTKtz2jN0FBnz9r85v/tiQTAd89+oDBXcD+L83895VLCxh2wNI7
cATycjTYr9KfoO/XdvSUXkLcuE+4qUzUbMTSye3MPZFBrmhT9vCJrFMENfDe+ZfT
ZO1wCIIc9Vs/gE36C9T4X/DxUIs9V0+Sglofv1oFD86J39EXRu1SvuI+X7cINmrC
mbqw1eo/XtXEQ6o0uZJadIbTfBxrkfuQD7ar1alP4iH2zvGG9+BqIeoTMIjI0szy
ycQH33Uhwv8nXgg2XrQWa8IFPy7NTohyxVjI+RdW4G/quZFyJ/QW6GUljmgOa9vA
fCmrJ/l7qTmB1Teaoo0Zrl6HWVluIQIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFDuO
NCBViqxQQyeHQzPJPYQegiYyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MERBQTMzMDUxOTYxMUYwQUEzOUYzODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAnPPZMAwDBACc89sDBACc894D
BACc8+ADBAGc8+IwDAMEAJzz5wMEAJzz6gMEAJzz8AMEAZzz8gMEAZzz+AMEAZzz
/gMEAJz00TANBgkqhkiG9w0BAQsFAAOCAQEAKt6U7VoJA40EzqkzSOFOv0iVes4L
iug45inBG7LArXWFfl8lXxyl/YPoMM9seqhBNSaob3Trfd1Ekfi6rkieaJ3TZVk7
WZslrcix2hNtN3GDCWOE63+XyUWBZVhA0V3g0XZMMIjhzMrO7ucVN4wH1zyeOUGA
Il5fwq+Grp6+u631MLTQSgJxm13YpVFkLtfIDF76OGOH/LJF+Eatg6uB/tl+qncy
vWNrNucDcX7Tx/QzYmZ1J6ZLxTAofcw54DUM/Jsx1rN0wgmCSai2dKSv1myulqYc
vKtxKhon9r4B8QaOj1YRw+Hd7ULHA3+K0+wOcDxUI2B5q24WQuIRxuqoNg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:46:25 2025 by rpki-client