Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFB7A4A0243811F0ACFBDFC6DAE4EC9C.roa
File: AFB7A4A0243811F0ACFBDFC6DAE4EC9C.roa (raw, json)
Hash identifier: Hu5PCK15HZszQDjUILIUFP7F/G2zprwciOq2avyvNhM=
Subject key identifier: 51:48:72:96:9B:53:0B:65:F8:E9:B6:C2:E8:95:2D:BA:8D:3C:71:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFB7A4A0243811F0ACFBDFC6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:57:14 +0000
ROA not before: Mon 28 Apr 2025 13:57:09 +0000
ROA not after: Tue 14 Apr 2026 13:57:09 +0000
asID: 984
IP address blocks: 156.237.178.0/24 maxlen: 24
156.237.183.0/24 maxlen: 24
156.237.186.0/24 maxlen: 24
156.237.187.0/24 maxlen: 24
156.237.188.0/24 maxlen: 24
156.237.191.0/24 maxlen: 24
156.237.196.0/24 maxlen: 24
156.237.198.0/24 maxlen: 24
156.237.210.0/24 maxlen: 24
156.237.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85833 (0x14f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:57:09 2025 GMT
Not After : Apr 14 13:57:09 2026 GMT
Subject: CN=680f893a-502e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:d8:ac:78:f4:b1:9a:cb:8e:34:51:a5:06:
a1:c6:19:94:92:db:0c:a2:12:40:dc:37:45:75:f1:
4a:7b:39:bc:a5:c8:a2:b7:94:96:8c:ab:2a:4b:b2:
d8:3a:60:e0:40:8f:06:e6:d5:64:62:7a:6f:19:e4:
63:4f:59:7a:5a:c4:2a:05:b3:40:e2:b9:ae:48:19:
0f:e1:7d:2a:5e:b5:1d:02:83:57:d5:db:78:c6:6e:
2e:65:84:b2:2b:eb:0e:4f:6e:44:89:b8:a1:54:90:
96:c3:12:a5:b4:01:c9:10:5f:72:28:70:ae:91:f4:
80:7d:bd:41:18:14:44:32:61:c0:79:6d:35:f0:11:
0a:77:e6:03:fe:11:a6:81:b5:f2:c7:66:dc:15:64:
d7:a4:0f:84:57:8e:7e:3c:a2:f2:75:77:28:62:20:
9c:52:23:ff:14:53:ab:c6:3d:88:5f:df:3c:4f:fd:
0a:f4:ee:98:a5:45:9f:1e:f1:a5:5b:8d:3d:1e:3f:
b3:92:30:11:07:16:0a:c0:d3:44:88:de:a7:3d:d2:
34:71:bb:37:da:bf:5e:8b:39:40:5e:5c:95:68:f3:
48:9d:19:ee:99:06:8d:19:fc:30:47:05:1d:aa:37:
c3:1b:ed:be:a8:fc:74:4c:b4:8d:41:17:8e:b2:75:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:72:96:9B:53:0B:65:F8:E9:B6:C2:E8:95:2D:BA:8D:3C:71:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFB7A4A0243811F0ACFBDFC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.178.0/24
156.237.183.0/24
156.237.186.0-156.237.188.255
156.237.191.0/24
156.237.196.0/24
156.237.198.0/24
156.237.210.0/24
156.237.213.0/24
Signature Algorithm: sha256WithRSAEncryption
88:71:af:ba:1b:2b:97:2b:d4:6e:73:58:c5:f5:79:6d:f7:60:
76:21:de:b2:3b:7c:f4:96:1d:33:52:e7:c6:10:ef:ec:2e:73:
05:6b:b1:32:ec:ef:ac:45:49:58:ce:d8:66:6d:31:74:8f:ec:
f5:63:97:b0:de:dd:10:0a:73:96:76:2e:77:a3:46:3e:69:df:
5e:3a:6d:3f:85:0a:60:25:37:8b:a0:de:90:db:b1:40:a5:8e:
a5:cc:44:8c:7f:d0:70:e6:5d:3e:e0:73:ea:a5:11:3a:62:7f:
8c:49:39:3a:a1:5a:46:07:4d:21:ac:54:94:04:d6:85:d4:e5:
89:6f:37:61:ff:83:ef:8e:71:b9:84:c2:7f:5c:30:5d:f0:55:
04:54:ca:27:de:6f:9e:40:bd:a7:d8:5f:60:04:91:16:c6:2e:
2c:04:75:a0:2e:a1:4f:3e:d1:2d:4a:3d:23:b5:21:c8:f8:37:
af:a3:10:48:f4:98:61:c1:84:dd:75:61:64:b1:6d:2b:43:5a:
c3:8e:14:a2:24:82:5e:67:26:40:12:bd:68:33:09:f8:70:de:
71:8e:0b:25:be:69:7d:6b:59:09:a4:68:a3:7b:85:0f:aa:a3:
a4:ee:0c:77:47:f2:b7:90:0a:43:5b:bb:1f:57:d9:6b:5f:ad:
4c:1a:ff:95
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAU9JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTM1NzA5WhcNMjYwNDE0MTM1NzA5WjAYMRYw
FAYDVQQDEw02ODBmODkzYS01MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnIDYrHj0sZrLjjRRpQahxhmUktsMohJA3DdFdfFKezm8pciit5SWjKsq
S7LYOmDgQI8G5tVkYnpvGeRjT1l6WsQqBbNA4rmuSBkP4X0qXrUdAoNX1dt4xm4u
ZYSyK+sOT25EibihVJCWwxKltAHJEF9yKHCukfSAfb1BGBREMmHAeW018BEKd+YD
/hGmgbXyx2bcFWTXpA+EV45+PKLydXcoYiCcUiP/FFOrxj2IX988T/0K9O6YpUWf
HvGlW409Hj+zkjARBxYKwNNEiN6nPdI0cbs32r9eizlAXlyVaPNInRnumQaNGfww
RwUdqjfDG+2+qPx0TLSNQReOsnWaaQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFFFI
cpabUwtl+Om2wuiVLbqNPHFYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRkI3QTRBMDI0MzgxMUYwQUNGQkRGQzZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAnO2yAwQAnO23MAwDBAGc7boD
BACc7bwDBACc7b8DBACc7cQDBACc7cYDBACc7dIDBACc7dUwDQYJKoZIhvcNAQEL
BQADggEBAIhxr7obK5cr1G5zWMX1eW33YHYh3rI7fPSWHTNS58YQ7+wucwVrsTLs
76xFSVjO2GZtMXSP7PVjl7De3RAKc5Z2LnejRj5p3146bT+FCmAlN4ug3pDbsUCl
jqXMRIx/0HDmXT7gc+qlETpif4xJOTqhWkYHTSGsVJQE1oXU5YlvN2H/g++OcbmE
wn9cMF3wVQRUyifeb55AvafYX2AEkRbGLiwEdaAuoU8+0S1KPSO1Icj4N6+jEEj0
mGHBhN11YWSxbStDWsOOFKIkgl5nJkASvWgzCfhw3nGOCyW+aX1rWQmkaKN7hQ+q
o6TuDHdH8reQCkNbux9X2WtfrUwa/5U=
-----END CERTIFICATE-----
Generated at Sat May 10 10:42:30 2025 by rpki-client