Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95E309282B1511F093450BBBDAE4EC9C.roa
File: 95E309282B1511F093450BBBDAE4EC9C.roa (raw, json)
Hash identifier: Yt+E3STyrCw/xfwdvyG/Hw+DPFsg22t4Ku3LXcN2Anw=
Subject key identifier: E6:B3:FB:2B:4F:5E:62:2A:6D:90:F7:FB:A0:D3:88:BE:55:AF:EF:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015262
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95E309282B1511F093450BBBDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:33:36 +0000
ROA not before: Wed 07 May 2025 07:33:31 +0000
ROA not after: Thu 10 Jul 2025 07:33:31 +0000
asID: 153526
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86626 (0x15262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 07:33:31 2025 GMT
Not After : Jul 10 07:33:31 2025 GMT
Subject: CN=681b0cd0-6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:a5:ea:e3:08:d7:2d:55:84:96:82:0a:7e:
35:e9:76:4b:d2:62:fd:cb:e6:67:a0:3b:05:4e:62:
d3:e5:dd:88:c9:41:f6:7b:bf:38:68:0b:e5:61:bb:
34:1c:96:de:9f:36:2f:d1:40:20:95:21:16:a3:a1:
42:5f:a3:b0:09:04:6c:61:c2:92:35:54:73:63:38:
92:bf:91:a4:51:e6:1b:98:86:13:cb:db:2e:13:4e:
b1:90:90:41:34:c1:9f:5c:23:2f:75:6b:7c:8d:4b:
9a:e6:b5:43:9f:a1:10:4c:21:2c:e4:a2:1e:8e:68:
9c:f2:b0:ce:cc:c4:cb:c2:c7:62:22:75:4b:2c:3b:
78:43:0b:2b:5e:f5:bf:21:41:86:5e:b7:9a:79:b8:
7c:09:8a:c5:0a:14:dc:50:97:98:9e:80:6c:85:c4:
1c:89:7d:a0:bf:5c:aa:6c:55:7d:b5:7b:6d:99:a9:
cd:bd:98:d7:5c:4b:f2:a7:44:6c:8f:93:bc:7b:95:
3e:41:68:ca:85:d7:0e:e7:22:a1:3f:cb:7d:f7:7d:
2f:a8:68:59:5d:ca:50:26:65:d4:10:6d:5f:89:96:
f3:54:c3:09:ae:a5:ab:fd:78:9c:ec:b7:36:6f:30:
16:0d:fd:f6:e3:10:69:17:a1:31:8b:9d:5a:1f:2a:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:FB:2B:4F:5E:62:2A:6D:90:F7:FB:A0:D3:88:BE:55:AF:EF:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95E309282B1511F093450BBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
66:33:4e:f1:44:f2:9a:b2:40:25:be:10:ae:c3:f6:26:a1:04:
fb:ed:9e:9b:22:76:20:01:1e:7d:57:19:9c:9f:39:50:48:b3:
1b:f9:50:82:bc:b3:fb:eb:cb:43:50:ad:6c:d0:0c:a2:8f:a5:
ab:51:34:eb:08:62:bb:76:51:30:58:bc:09:4b:a4:1c:39:ec:
a9:9e:2a:5c:4b:8d:cb:e2:22:e1:40:20:82:c5:29:da:51:72:
d6:60:b5:9e:db:9f:f7:e5:3e:76:a4:0a:c4:ba:a6:3c:df:75:
f0:5b:f1:2b:5d:cb:4a:f9:8f:3a:0b:e2:50:d5:40:d5:b7:bd:
94:d7:33:f5:dd:b9:cf:7a:f9:60:a4:9e:cc:d9:76:47:db:66:
e7:9a:23:cb:84:e1:c2:aa:c9:2b:5f:89:27:37:dc:c0:c6:6f:
09:0f:a7:f0:bd:91:55:55:64:c1:f1:ca:5f:4c:c7:c7:e2:34:
3f:df:a2:2a:8d:e5:42:16:b2:67:03:ab:30:2f:dd:00:75:4b:
0f:48:05:25:9e:78:31:de:03:9a:60:54:75:2a:40:cd:b8:3d:
16:27:ee:27:58:87:b8:20:df:cb:5b:a3:82:cb:6f:f0:09:ae:
c2:b7:90:a9:1d:a0:e5:d5:87:c0:55:7f:14:2b:95:0a:fa:af:
ce:e1:e9:41
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVJiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA3MDczMzMxWhcNMjUwNzEwMDczMzMxWjAYMRYw
FAYDVQQDEw02ODFiMGNkMC02YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr4Kl6uMI1y1VhJaCCn416XZL0mL9y+ZnoDsFTmLT5d2IyUH2e784aAvl
Ybs0HJbenzYv0UAglSEWo6FCX6OwCQRsYcKSNVRzYziSv5GkUeYbmIYTy9suE06x
kJBBNMGfXCMvdWt8jUua5rVDn6EQTCEs5KIejmic8rDOzMTLwsdiInVLLDt4Qwsr
XvW/IUGGXreaebh8CYrFChTcUJeYnoBshcQciX2gv1yqbFV9tXttmanNvZjXXEvy
p0Rsj5O8e5U+QWjKhdcO5yKhP8t9930vqGhZXcpQJmXUEG1fiZbzVMMJrqWr/Xic
7Lc2bzAWDf324xBpF6Exi51aHyoIpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOaz
+ytPXmIqbZD3+6DTiL5Vr++tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NUUzMDkyODJCMTUxMUYwOTM0NTBCQkJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPGLMA0GCSqGSIb3DQEBCwUA
A4IBAQBmM07xRPKaskAlvhCuw/YmoQT77Z6bInYgAR59VxmcnzlQSLMb+VCCvLP7
68tDUK1s0Ayij6WrUTTrCGK7dlEwWLwJS6QcOeypnipcS43L4iLhQCCCxSnaUXLW
YLWe25/35T52pArEuqY833XwW/ErXctK+Y86C+JQ1UDVt72U1zP13bnPevlgpJ7M
2XZH22bnmiPLhOHCqskrX4knN9zAxm8JD6fwvZFVVWTB8cpfTMfH4jQ/36IqjeVC
FrJnA6swL90AdUsPSAUlnngx3gOaYFR1KkDNuD0WJ+4nWIe4IN/LW6OCy2/wCa7C
t5CpHaDl1YfAVX8UK5UK+q/O4elB
-----END CERTIFICATE-----
Generated at Wed May 14 00:38:49 2025 by rpki-client