Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C859B4A8543511F0BE18AF85DAE4EC9C.roa
File: C859B4A8543511F0BE18AF85DAE4EC9C.roa (raw, json)
Hash identifier: pM/iTXdEMN2nVbRkTExxVaVC5EAJyzjoTd0Gh1SpvWg=
Subject key identifier: F8:E6:A3:8D:AC:37:4D:93:7E:64:C6:11:05:32:74:14:4B:14:69:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C859B4A8543511F0BE18AF85DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:37:23 +0000
ROA not before: Sat 28 Jun 2025 15:37:17 +0000
ROA not after: Sun 03 Aug 2025 15:37:17 +0000
asID: 203020
IP address blocks: 156.228.19.0/24 maxlen: 24
156.228.251.0/24 maxlen: 24
156.243.235.0/24 maxlen: 24
156.253.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89929 (0x15f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:37:17 2025 GMT
Not After : Aug 3 15:37:17 2025 GMT
Subject: CN=68600c33-3263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:26:0b:bf:14:6d:74:40:ca:bd:fe:5d:96:
03:93:99:5c:82:25:09:53:1d:44:e5:04:54:46:e7:
c3:c3:ff:d7:51:75:fc:45:c8:df:fd:d4:3f:1c:8b:
ae:18:70:b8:2c:df:97:0c:84:2c:06:c5:52:fd:32:
53:3b:f2:2e:47:46:cc:65:0f:2d:dd:dd:92:f1:00:
80:45:12:6c:e2:a2:2a:04:24:52:04:e0:da:bf:13:
84:1d:4b:cd:96:d9:f0:f8:3c:d0:6a:23:90:a6:e3:
c1:82:36:f1:31:52:03:0c:83:9e:78:7d:e1:9d:7b:
00:92:8b:31:86:a8:d8:45:b8:7e:f9:ff:04:e5:a9:
fe:77:87:74:6c:bd:38:cd:7d:e2:bd:64:cb:7e:05:
8e:8d:34:76:57:37:1f:86:47:b2:e4:6b:97:35:95:
53:7a:a4:40:a7:5d:18:7b:e6:d6:50:8c:92:7a:b3:
a2:31:98:75:05:21:a4:28:d0:18:e1:48:49:53:84:
48:af:00:6f:08:bb:27:90:7d:6a:be:86:ad:da:02:
ef:09:c8:55:68:d9:1c:96:8c:e2:f4:80:0f:55:c3:
01:89:26:50:58:25:04:09:7b:5a:1c:83:88:f0:6a:
ec:90:04:db:80:6a:e2:16:03:4e:19:82:fc:11:86:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:A3:8D:AC:37:4D:93:7E:64:C6:11:05:32:74:14:4B:14:69:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C859B4A8543511F0BE18AF85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.19.0/24
156.228.251.0/24
156.243.235.0/24
156.253.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:15:b0:f6:8c:63:5b:b8:ef:b6:f6:98:eb:63:bc:22:c7:85:
4e:85:85:19:27:be:bf:fa:bd:38:bd:aa:58:00:d3:c9:7a:92:
83:29:37:17:a6:af:59:a1:d9:83:49:b6:73:9d:a8:6e:36:23:
88:b0:16:ba:15:cd:3e:62:31:43:61:bc:27:0b:b3:0c:81:a2:
0a:65:fb:e7:cb:3f:f7:df:89:d2:da:b8:de:b6:de:16:d1:99:
a8:4e:1b:5f:49:57:f6:af:6a:2e:d0:3f:74:ae:dd:ec:ca:cf:
de:b7:23:8c:0c:18:25:02:66:60:18:9b:c8:a8:09:17:a2:47:
0f:b6:2b:08:19:1e:57:36:c3:6c:92:f8:43:42:a3:c0:4a:9a:
0e:81:15:40:90:7f:f1:d1:cc:02:59:e6:12:f2:7a:56:27:29:
a1:ea:53:90:e8:2e:66:6b:d6:81:f6:95:ee:f8:7b:f5:d1:c9:
8e:08:96:af:83:24:f6:b0:72:58:d3:77:43:b5:f6:48:05:f9:
dd:4e:3f:bd:1e:a3:5b:69:55:07:c3:46:83:9f:21:25:67:53:
8b:85:44:83:b2:8a:75:49:b5:f6:cc:1d:97:86:a6:cb:d6:e2:
5b:10:55:0e:bf:06:16:27:b0:35:c4:70:e8:90:a8:34:66:be:
8c:0d:b2:91
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAV9JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI4MTUzNzE3WhcNMjUwODAzMTUzNzE3WjAYMRYw
FAYDVQQDEw02ODYwMGMzMy0zMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA19ImC78UbXRAyr3+XZYDk5lcgiUJUx1E5QRURufDw//XUXX8Rcjf/dQ/
HIuuGHC4LN+XDIQsBsVS/TJTO/IuR0bMZQ8t3d2S8QCARRJs4qIqBCRSBODavxOE
HUvNltnw+DzQaiOQpuPBgjbxMVIDDIOeeH3hnXsAkosxhqjYRbh++f8E5an+d4d0
bL04zX3ivWTLfgWOjTR2Vzcfhkey5GuXNZVTeqRAp10Ye+bWUIySerOiMZh1BSGk
KNAY4UhJU4RIrwBvCLsnkH1qvoat2gLvCchVaNkclozi9IAPVcMBiSZQWCUECXta
HIOI8GrskATbgGriFgNOGYL8EYbwwwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPjm
o42sN02TfmTGEQUydBRLFGlwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DODU5QjRBODU0MzUxMUYwQkUxOEFGODVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnOQTAwQAnOT7AwQAnPPrAwQB
nP3WMA0GCSqGSIb3DQEBCwUAA4IBAQANFbD2jGNbuO+29pjrY7wix4VOhYUZJ76/
+r04vapYANPJepKDKTcXpq9ZodmDSbZznahuNiOIsBa6Fc0+YjFDYbwnC7MMgaIK
Zfvnyz/334nS2rjett4W0ZmoThtfSVf2r2ou0D90rt3sys/etyOMDBglAmZgGJvI
qAkXokcPtisIGR5XNsNskvhDQqPASpoOgRVAkH/x0cwCWeYS8npWJymh6lOQ6C5m
a9aB9pXu+Hv10cmOCJavgyT2sHJY03dDtfZIBfndTj+9HqNbaVUHw0aDnyElZ1OL
hUSDsop1SbX2zB2XhqbL1uJbEFUOvwYWJ7A1xHDokKg0Zr6MDbKR
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:04:21 2025 by rpki-client