Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF9B5D0565311F09F7066D0DAE4EC9C.roa
File: CFF9B5D0565311F09F7066D0DAE4EC9C.roa (raw, json)
Hash identifier: QiPTzWWF5tSwR7mIRlXTVrbuTFxS4sec83yPPgfGiiU=
Subject key identifier: 5A:53:34:0A:50:51:6F:73:73:B5:B7:65:FE:61:94:E8:39:45:68:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF9B5D0565311F09F7066D0DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:17:22 +0000
ROA not before: Tue 01 Jul 2025 08:17:17 +0000
ROA not after: Mon 04 Aug 2025 08:17:17 +0000
asID: 264750
IP address blocks: 156.248.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90023 (0x15fa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 08:17:17 2025 GMT
Not After : Aug 4 08:17:17 2025 GMT
Subject: CN=68639992-a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:02:51:1d:69:84:39:a3:4f:7f:2f:5b:f4:
1f:58:47:93:94:0f:7e:e9:b3:5b:be:b2:a7:1f:04:
e1:06:3f:b2:34:f8:dc:67:b7:54:aa:4d:6f:ed:81:
e4:f0:52:58:d9:f4:61:c7:56:2e:84:03:56:3c:f1:
45:98:af:ff:07:10:98:54:53:fe:bd:ad:58:cb:59:
99:dd:81:d9:06:9e:99:08:aa:f1:eb:aa:11:f9:fb:
00:53:9a:f7:fd:34:77:48:98:f0:ab:30:54:4e:3d:
4a:3d:50:87:d3:7c:bf:af:41:65:5f:55:c4:20:eb:
f9:5b:f5:cb:b1:7b:e5:23:fc:4e:65:6a:ea:f8:20:
17:81:99:ef:0d:80:65:4c:f2:3a:ed:61:99:7c:ac:
3f:91:4d:88:8c:65:25:da:a4:f9:5b:65:cf:17:2b:
7b:d5:c5:6d:3d:ab:25:b6:0e:db:f4:ad:64:f2:f7:
ee:8a:ee:87:93:65:0e:30:92:8c:c3:1c:2c:90:c9:
f0:cb:92:4b:0a:43:2a:0a:4a:a1:19:aa:c4:a7:79:
b8:e1:83:3c:3d:06:a1:a8:c2:86:1b:52:d3:2d:08:
3d:e9:1d:41:a6:01:a3:28:16:ff:c2:d2:fc:79:27:
01:a6:cd:f4:39:b5:e5:4c:73:fb:7b:1a:47:2e:70:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:34:0A:50:51:6F:73:73:B5:B7:65:FE:61:94:E8:39:45:68:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF9B5D0565311F09F7066D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
91:92:da:2b:54:94:98:f1:5d:ce:d8:25:1e:d7:7e:a3:e8:e3:
aa:a1:a3:32:80:41:0a:b1:1d:b0:4c:b2:1f:fb:ea:a5:20:98:
30:7a:bd:95:50:1d:1b:c8:6c:a4:67:e3:d0:ae:d7:c6:b3:ab:
3a:65:af:67:52:6a:71:77:89:4c:22:65:23:02:71:b6:0f:c7:
9b:24:14:1a:c6:e0:f4:8f:b7:f1:30:e1:c1:66:eb:c3:a0:ac:
ad:e7:e0:b6:e0:35:51:6c:f7:6b:da:73:8f:7b:2d:54:69:dd:
e4:df:5b:51:26:85:05:d1:9c:0a:3c:0a:93:5a:bc:a4:03:c6:
41:49:23:ec:cb:eb:dc:33:60:52:f8:b2:d0:69:80:12:25:ca:
0c:57:74:70:dc:b3:5c:83:da:a5:51:dc:3d:27:3a:45:f3:eb:
01:65:b9:51:f4:19:77:f7:3d:bb:f9:b7:5d:65:fd:19:87:5d:
43:ea:a0:ff:b5:dc:8d:bc:88:64:fe:5b:7a:ed:40:c9:0f:7f:
8f:1a:b7:4f:cc:de:d4:17:b1:de:a2:6a:48:44:91:67:fd:61:
e1:28:55:b5:4b:38:54:67:eb:89:63:d9:c3:45:1a:39:c9:4c:
cb:d0:79:3e:bb:f9:12:a8:a1:e6:c1:da:00:0f:9d:fa:f8:0b:
ca:4c:39:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV+nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAxMDgxNzE3WhcNMjUwODA0MDgxNzE3WjAYMRYw
FAYDVQQDEw02ODYzOTk5Mi1hMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7mkCUR1phDmjT38vW/QfWEeTlA9+6bNbvrKnHwThBj+yNPjcZ7dUqk1v
7YHk8FJY2fRhx1YuhANWPPFFmK//BxCYVFP+va1Yy1mZ3YHZBp6ZCKrx66oR+fsA
U5r3/TR3SJjwqzBUTj1KPVCH03y/r0FlX1XEIOv5W/XLsXvlI/xOZWrq+CAXgZnv
DYBlTPI67WGZfKw/kU2IjGUl2qT5W2XPFyt71cVtPasltg7b9K1k8vfuiu6Hk2UO
MJKMwxwskMnwy5JLCkMqCkqhGarEp3m44YM8PQahqMKGG1LTLQg96R1BpgGjKBb/
wtL8eScBps30ObXlTHP7expHLnCGQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFpT
NApQUW9zc7W3Zf5hlOg5RWikMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRkY5QjVEMDU2NTMxMUYwOUY3MDY2RDBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPjAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRktorVJSY8V3O2CUe136j6OOqoaMygEEKsR2wTLIf++qlIJgwer2VUB0b
yGykZ+PQrtfGs6s6Za9nUmpxd4lMImUjAnG2D8ebJBQaxuD0j7fxMOHBZuvDoKyt
5+C24DVRbPdr2nOPey1Uad3k31tRJoUF0ZwKPAqTWrykA8ZBSSPsy+vcM2BS+LLQ
aYASJcoMV3Rw3LNcg9qlUdw9JzpF8+sBZblR9Bl39z27+bddZf0Zh11D6qD/tdyN
vIhk/lt67UDJD3+PGrdPzN7UF7HeompIRJFn/WHhKFW1SzhUZ+uJY9nDRRo5yUzL
0Hk+u/kSqKHmwdoAD536+AvKTDn3
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:58:43 2025 by rpki-client