Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E9500225DC11F097C39AC2DAE4EC9C.roa
File: C0E9500225DC11F097C39AC2DAE4EC9C.roa (raw, json)
Hash identifier: fAy90mU+rJkt1XAWgUDciOYsLemv1aJMvaYeq/uDO0k=
Subject key identifier: 04:16:F5:95:F8:85:1E:61:C9:41:91:55:73:25:55:E6:99:71:90:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01508F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E9500225DC11F097C39AC2DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 16:04:11 +0000
ROA not before: Wed 30 Apr 2025 16:04:06 +0000
ROA not after: Fri 14 Apr 2028 16:04:06 +0000
asID: 17561
IP address blocks: 156.235.129.0/24 maxlen: 24
156.235.130.0/24 maxlen: 24
156.235.131.0/24 maxlen: 24
156.235.132.0/24 maxlen: 24
156.235.133.0/24 maxlen: 24
156.235.134.0/24 maxlen: 24
156.235.135.0/24 maxlen: 24
156.235.136.0/24 maxlen: 24
156.235.137.0/24 maxlen: 24
156.235.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86159 (0x1508f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 16:04:06 2025 GMT
Not After : Apr 14 16:04:06 2028 GMT
Subject: CN=681249fb-fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:c2:fe:a0:c4:b1:eb:81:9c:5b:83:d4:ec:
0e:ce:30:2e:6b:0b:bf:4b:2c:42:61:f5:ff:ab:c4:
b4:7a:a3:97:11:2f:1c:5e:f6:94:b7:a1:f1:3d:84:
57:11:08:d5:a0:0b:07:56:0f:32:7c:12:2a:18:9c:
cf:6e:60:79:59:b5:49:80:62:be:be:1a:95:80:c3:
0a:60:a5:2b:51:75:3c:01:92:80:0c:ed:6f:1f:c6:
bf:a2:3f:92:40:8d:03:cf:9b:f2:be:16:f3:5d:f2:
b6:45:dc:90:78:e6:ac:2f:fd:1b:3a:0d:d0:50:a4:
f2:90:cd:ba:79:65:27:c8:99:e6:36:5c:4e:13:2c:
31:de:e9:a4:63:38:8a:f5:73:6d:1b:b9:81:6f:9b:
37:3a:d6:41:1a:55:c0:4a:80:bf:88:d1:34:a2:b4:
0c:1e:60:ed:e8:9c:b6:05:0a:7a:9b:c4:ba:9b:a1:
5c:f5:f6:75:06:14:ef:69:6c:bf:b3:6f:b0:44:64:
81:52:3c:5c:de:b9:cc:ee:0e:b9:5b:00:e8:c3:bd:
1b:5f:3d:49:17:c7:4a:55:53:69:f1:4e:07:1b:cd:
c6:de:2f:e1:d9:7c:e4:ea:c7:0f:22:61:5c:36:c9:
15:fd:3d:7a:76:bc:1f:39:a1:66:51:f7:ae:ff:f1:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:F5:95:F8:85:1E:61:C9:41:91:55:73:25:55:E6:99:71:90:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E9500225DC11F097C39AC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.129.0-156.235.138.255
Signature Algorithm: sha256WithRSAEncryption
14:34:ac:5a:48:1a:bb:2c:88:0b:0d:7b:77:53:fa:7a:15:5c:
8a:72:a3:a2:2b:64:0b:eb:c0:bf:56:15:dd:a5:81:95:dd:a7:
e3:4c:7c:b1:7b:c7:ef:59:10:37:59:f0:98:b5:0d:af:47:2a:
d6:04:ea:90:8e:f3:ee:79:53:47:96:9d:5a:42:58:c3:27:b7:
4b:ec:a4:28:0c:79:d5:b6:4d:21:e0:f4:32:70:f0:59:1a:e6:
a4:4f:3c:9f:eb:11:99:a7:86:43:75:0d:a7:55:16:5e:a9:f3:
e8:c8:2a:d4:97:81:50:ab:45:6a:33:52:a2:a8:85:25:50:27:
59:0f:7d:5e:37:66:02:79:74:bd:00:97:a1:73:85:e6:61:50:
2d:ef:f3:7d:18:98:24:cc:9b:80:18:0d:26:93:d3:d2:2a:07:
b4:0a:62:5e:37:39:f3:4b:4f:b4:97:d7:1e:86:7d:a8:80:79:
de:71:46:be:2c:fe:35:78:14:92:dd:8d:e6:d0:91:89:f6:b4:
f9:f7:9a:a8:63:e6:2f:3d:ec:ce:9f:60:d2:c6:7e:ff:c4:06:
08:4d:bd:c0:c4:8c:10:5a:bb:d9:c1:9c:6f:e8:9c:d7:71:c3:
2f:53:19:38:fb:57:5f:33:6f:bd:ab:6a:a1:7d:22:2d:b4:e6:
6a:d4:4a:73
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVCPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDMwMTYwNDA2WhcNMjgwNDE0MTYwNDA2WjAYMRYw
FAYDVQQDEw02ODEyNDlmYi1mYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsJLC/qDEseuBnFuD1OwOzjAuawu/SyxCYfX/q8S0eqOXES8cXvaUt6Hx
PYRXEQjVoAsHVg8yfBIqGJzPbmB5WbVJgGK+vhqVgMMKYKUrUXU8AZKADO1vH8a/
oj+SQI0Dz5vyvhbzXfK2RdyQeOasL/0bOg3QUKTykM26eWUnyJnmNlxOEywx3umk
YziK9XNtG7mBb5s3OtZBGlXASoC/iNE0orQMHmDt6Jy2BQp6m8S6m6Fc9fZ1BhTv
aWy/s2+wRGSBUjxc3rnM7g65WwDow70bXz1JF8dKVVNp8U4HG83G3i/h2Xzk6scP
ImFcNskV/T16drwfOaFmUfeu//HN3QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAQW
9ZX4hR5hyUGRVXMlVeaZcZBnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMEU5NTAwMjI1REMxMUYwOTdDMzlBQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc64EDBACc64owDQYJKoZI
hvcNAQELBQADggEBABQ0rFpIGrssiAsNe3dT+noVXIpyo6IrZAvrwL9WFd2lgZXd
p+NMfLF7x+9ZEDdZ8Ji1Da9HKtYE6pCO8+55U0eWnVpCWMMnt0vspCgMedW2TSHg
9DJw8Fka5qRPPJ/rEZmnhkN1DadVFl6p8+jIKtSXgVCrRWozUqKohSVQJ1kPfV43
ZgJ5dL0Al6FzheZhUC3v830YmCTMm4AYDSaT09IqB7QKYl43OfNLT7SX1x6GfaiA
ed5xRr4s/jV4FJLdjebQkYn2tPn3mqhj5i897M6fYNLGfv/EBghNvcDEjBBau9nB
nG/onNdxwy9TGTj7V18zb72raqF9Ii205mrUSnM=
-----END CERTIFICATE-----
Generated at Sat May 10 05:03:42 2025 by rpki-client