Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB1DDA18265111F08D4758DEDAE4EC9C.roa
File: DB1DDA18265111F08D4758DEDAE4EC9C.roa (raw, json)
Hash identifier: ZRTaeatCIZgR2ZbScbRukMohL973Q2gdopmJD1GhRYM=
Subject key identifier: 1C:F4:9C:CA:D8:B5:E6:AF:9B:94:47:F8:33:A5:35:31:5D:33:13:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015112
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB1DDA18265111F08D4758DEDAE4EC9C.roa
Signing time: Thu 01 May 2025 06:02:26 +0000
ROA not before: Thu 01 May 2025 06:02:22 +0000
ROA not after: Fri 09 May 2025 06:02:22 +0000
asID: 9009
IP address blocks: 156.246.45.0/24 maxlen: 24
156.246.48.0/24 maxlen: 24
156.246.51.0/24 maxlen: 24
156.246.52.0/24 maxlen: 24
156.246.57.0/24 maxlen: 24
156.246.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86290 (0x15112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 06:02:22 2025 GMT
Not After : May 9 06:02:22 2025 GMT
Subject: CN=68130e72-8cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:18:30:e3:9c:ea:7d:e2:07:49:c3:0f:ab:
5e:75:55:3c:39:ab:e1:31:7d:e8:eb:b8:c6:39:23:
a8:cd:fa:46:e1:d7:f9:33:b2:9f:b6:63:c4:55:4f:
63:d4:cd:b1:89:ad:95:80:32:61:9b:da:31:93:9e:
ea:d4:c3:d0:d4:fe:34:02:36:89:ab:c4:ce:f2:8d:
fb:8c:ce:b4:25:8d:41:8b:2c:0c:21:4f:79:bd:57:
ea:4b:48:0a:f1:8f:c2:f3:f8:6a:c9:32:9b:e7:9f:
68:fa:41:b7:e7:12:94:06:dd:21:4d:77:db:e5:b7:
5c:70:96:b0:bc:7e:a3:f5:67:95:b9:dc:8c:c5:f6:
93:2f:6d:1f:23:51:fa:95:92:63:4d:f5:97:8e:ce:
a9:c2:f0:ff:a7:a3:02:eb:99:be:6b:04:60:c9:98:
29:d9:c4:59:fe:b5:1f:a8:0a:a7:dd:e7:47:72:3f:
bb:bb:c5:b8:05:cc:7e:1a:d8:9f:45:9e:4f:fd:44:
2b:6f:91:a4:9b:cf:c2:9f:7c:1f:03:2d:bb:ce:a7:
e9:b3:a4:cb:4d:31:fb:1b:ce:eb:f0:93:b1:cf:e6:
ea:49:e4:22:8b:a5:d4:e2:2c:6c:b2:fc:64:63:b4:
25:72:e7:c7:19:94:32:1e:64:82:a5:81:a6:b2:db:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:9C:CA:D8:B5:E6:AF:9B:94:47:F8:33:A5:35:31:5D:33:13:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB1DDA18265111F08D4758DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.45.0/24
156.246.48.0/24
156.246.51.0-156.246.52.255
156.246.57.0-156.246.58.255
Signature Algorithm: sha256WithRSAEncryption
ae:8f:82:26:82:57:90:7d:c8:c0:17:e5:3e:87:bc:de:f6:c0:
90:48:6e:ca:6f:df:61:14:7d:85:c7:d6:98:89:f8:03:52:a8:
ca:4f:ce:24:76:67:c9:bb:cb:d2:ba:f4:1a:ac:a2:25:b2:09:
7a:b2:91:fc:52:77:b7:2e:05:38:76:ff:47:b8:6d:91:98:44:
a3:5b:e1:ab:8d:c3:60:fc:38:36:3d:7a:c7:06:75:9c:98:d3:
19:31:48:37:31:f4:4b:32:4d:79:48:d8:5d:be:7d:de:e6:82:
98:3f:29:e7:71:f5:76:d0:41:cb:bd:56:60:12:09:47:9f:ee:
a1:0e:ad:55:36:15:85:39:44:35:50:84:5d:96:d6:c8:f2:d3:
ed:7c:e1:65:75:24:25:67:ee:87:f2:74:9d:68:57:1a:df:0c:
57:97:9d:40:3e:65:66:d1:63:10:4b:fc:dc:ec:9c:17:40:a7:
92:4e:27:6a:e3:91:78:ae:dc:46:65:38:cc:e5:74:b1:92:54:
b0:59:e0:ca:e2:ca:55:d8:d6:c3:33:ba:4f:1f:ed:c3:cd:05:
ac:b0:62:d4:ba:81:d2:d2:84:4b:44:d7:a3:46:0e:b8:f9:48:
72:a7:64:25:48:27:e7:e6:5b:a0:8d:21:cd:9a:e4:3b:e9:0b:
57:27:60:d0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAVESMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAxMDYwMjIyWhcNMjUwNTA5MDYwMjIyWjAYMRYw
FAYDVQQDEw02ODEzMGU3Mi04Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtZUYMOOc6n3iB0nDD6tedVU8OavhMX3o67jGOSOozfpG4df5M7KftmPE
VU9j1M2xia2VgDJhm9oxk57q1MPQ1P40AjaJq8TO8o37jM60JY1BiywMIU95vVfq
S0gK8Y/C8/hqyTKb559o+kG35xKUBt0hTXfb5bdccJawvH6j9WeVudyMxfaTL20f
I1H6lZJjTfWXjs6pwvD/p6MC65m+awRgyZgp2cRZ/rUfqAqn3edHcj+7u8W4Bcx+
GtifRZ5P/UQrb5Gkm8/Cn3wfAy27zqfps6TLTTH7G87r8JOxz+bqSeQii6XU4ixs
svxkY7QlcufHGZQyHmSCpYGmstv3lwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFBz0
nMrYteavm5RH+DOlNTFdMxPTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQjFEREExODI2NTExMUYwOEQ0NzU4REVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAnPYtAwQAnPYwMAwDBACc9jMD
BACc9jQwDAMEAJz2OQMEAJz2OjANBgkqhkiG9w0BAQsFAAOCAQEAro+CJoJXkH3I
wBflPoe83vbAkEhuym/fYRR9hcfWmIn4A1Koyk/OJHZnybvL0rr0GqyiJbIJerKR
/FJ3ty4FOHb/R7htkZhEo1vhq43DYPw4Nj16xwZ1nJjTGTFINzH0SzJNeUjYXb59
3uaCmD8p53H1dtBBy71WYBIJR5/uoQ6tVTYVhTlENVCEXZbWyPLT7XzhZXUkJWfu
h/J0nWhXGt8MV5edQD5lZtFjEEv83OycF0Cnkk4nauOReK7cRmU4zOV0sZJUsFng
yuLKVdjWwzO6Tx/tw80FrLBi1LqB0tKES0TXo0YOuPlIcqdkJUgn5+ZboI0hzZrk
O+kLVydg0A==
-----END CERTIFICATE-----
Generated at Mon May 5 12:40:59 2025 by rpki-client