Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDCBD50543F11F0B1754AC6DAE4EC9C.roa
File: EEDCBD50543F11F0B1754AC6DAE4EC9C.roa (raw, json)
Hash identifier: G7ER4FlP6rjzVLrlUdcF2OZnEyaaUAMddz/xPiuJ8M8=
Subject key identifier: 9B:20:30:AA:8D:38:87:97:73:8B:38:0B:E3:C5:77:41:CB:8C:D6:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDCBD50543F11F0B1754AC6DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 16:50:02 +0000
ROA not before: Sat 28 Jun 2025 16:49:57 +0000
ROA not after: Tue 26 Aug 2025 16:49:57 +0000
asID: 63139
IP address blocks: 156.225.121.0/24 maxlen: 24
156.227.14.0/24 maxlen: 24
156.227.192.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.194.0/23 maxlen: 24
156.227.196.0/24 maxlen: 24
156.227.197.0/24 maxlen: 24
156.227.198.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89947 (0x15f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 16:49:57 2025 GMT
Not After : Aug 26 16:49:57 2025 GMT
Subject: CN=68601d3a-92b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:76:78:69:91:a7:8c:d3:da:28:a9:e3:71:
31:2f:2d:ed:be:79:a9:07:bf:22:fc:62:6f:17:71:
b9:b3:44:0a:3f:b5:97:e1:ac:b9:93:ba:1d:8e:0e:
33:5c:77:56:f5:28:aa:b4:2a:39:87:3e:99:c3:27:
02:7d:7c:fa:2c:91:8a:33:a7:8d:1b:da:36:f2:b2:
12:86:53:cc:77:05:dc:04:7a:aa:6d:37:a1:34:ed:
71:01:5b:9c:07:75:36:4a:59:1a:69:1f:e7:0f:ab:
ec:c5:0f:2c:af:57:b2:1a:7f:3a:b1:3b:16:d2:a3:
9c:f2:f6:30:5d:1a:d1:b0:46:fc:79:57:15:d9:f8:
91:39:2d:29:d7:c3:a3:62:15:68:00:c3:d5:b6:d0:
11:ea:d3:ca:98:63:9f:e0:c0:f0:42:79:5d:fe:79:
05:ae:2c:f7:64:7e:8d:29:fb:a0:e8:c2:70:3e:84:
86:8c:92:34:21:b4:39:9d:80:47:c9:e0:c7:1b:b1:
93:0b:4a:57:f7:09:4e:a0:ff:af:c3:5e:de:da:28:
1e:e5:78:15:5d:39:ad:89:42:e3:cf:b9:b1:2a:ed:
68:79:cd:b2:09:5f:c3:74:a2:f9:8f:fd:3e:30:96:
64:da:69:44:21:95:ba:34:4d:8d:1c:18:71:55:9c:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:30:AA:8D:38:87:97:73:8B:38:0B:E3:C5:77:41:CB:8C:D6:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDCBD50543F11F0B1754AC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.121.0/24
156.227.14.0/24
156.227.192.0/21
156.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
88:67:03:ad:4c:1c:f7:b9:99:0c:5e:1d:0c:8e:83:46:ac:77:
b8:d4:1e:d6:4b:d8:5c:04:a9:69:f7:a3:ba:cd:70:b6:48:ef:
68:f8:b6:b9:60:33:58:64:fe:1c:7d:62:99:a1:18:15:c9:56:
c2:9a:29:c5:f8:9b:c8:20:51:aa:35:4f:02:b4:0e:76:68:0c:
c7:42:62:7a:51:bf:d6:b1:9b:f9:93:b9:d0:ef:05:22:02:b2:
80:2a:35:8a:b2:6d:7d:99:c7:e8:59:6d:7d:48:29:1a:12:27:
d7:71:e3:e5:43:81:aa:b3:e8:18:24:f4:9e:43:74:a0:b8:bd:
21:27:c1:f5:4e:9a:c2:6e:c2:de:0e:cf:3f:7c:b9:d2:6e:fb:
f4:76:b3:5d:b3:e0:bb:fc:0b:e5:00:b3:e2:fa:3d:5b:f8:a8:
af:6c:5e:25:a0:62:51:6e:d4:17:09:f7:4d:f9:75:e9:e5:d9:
87:ea:fc:8b:26:9a:15:b2:c9:83:51:f6:11:63:13:05:b6:6e:
e2:6c:f2:78:d1:15:81:b1:94:bd:2f:00:15:bb:e1:9b:c0:e3:
b9:7f:27:9c:37:1e:7f:72:b4:49:27:75:2d:08:d9:9c:d4:d7:
3f:5b:37:98:5b:c2:08:51:fd:89:62:2b:0c:05:b9:64:55:53:
d0:10:f4:25
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAV9bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI4MTY0OTU3WhcNMjUwODI2MTY0OTU3WjAYMRYw
FAYDVQQDEw02ODYwMWQzYS05MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTx2eGmRp4zT2iip43ExLy3tvnmpB78i/GJvF3G5s0QKP7WX4ay5k7od
jg4zXHdW9SiqtCo5hz6ZwycCfXz6LJGKM6eNG9o28rIShlPMdwXcBHqqbTehNO1x
AVucB3U2SlkaaR/nD6vsxQ8sr1eyGn86sTsW0qOc8vYwXRrRsEb8eVcV2fiROS0p
18OjYhVoAMPVttAR6tPKmGOf4MDwQnld/nkFriz3ZH6NKfug6MJwPoSGjJI0IbQ5
nYBHyeDHG7GTC0pX9wlOoP+vw17e2ige5XgVXTmtiULjz7mxKu1oec2yCV/DdKL5
j/0+MJZk2mlEIZW6NE2NHBhxVZw3hQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJsg
MKqNOIeXc4s4C+PFd0HLjNa6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRURDQkQ1MDU0M0YxMUYwQjE3NTRBQzZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnOF5AwQAnOMOAwQDnOPAAwQC
nOPcMA0GCSqGSIb3DQEBCwUAA4IBAQCIZwOtTBz3uZkMXh0MjoNGrHe41B7WS9hc
BKlp96O6zXC2SO9o+La5YDNYZP4cfWKZoRgVyVbCminF+JvIIFGqNU8CtA52aAzH
QmJ6Ub/WsZv5k7nQ7wUiArKAKjWKsm19mcfoWW19SCkaEifXcePlQ4Gqs+gYJPSe
Q3SguL0hJ8H1TprCbsLeDs8/fLnSbvv0drNds+C7/AvlALPi+j1b+KivbF4loGJR
btQXCfdN+XXp5dmH6vyLJpoVssmDUfYRYxMFtm7ibPJ40RWBsZS9LwAVu+GbwOO5
fyecNx5/crRJJ3UtCNmc1Nc/WzeYW8IIUf2JYisMBblkVVPQEPQl
-----END CERTIFICATE-----
Generated at Wed Jul 2 03:41:06 2025 by rpki-client