
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91BFE3F415F611F0A1B535156EB8BCC6.roa
File: 91BFE3F415F611F0A1B535156EB8BCC6.roa (raw, json)
Hash identifier: BDAg0Aggl45HbUCTckjGcub4HbjU3qzvGGK4HN03kfY=
Subject key identifier: 50:3B:8B:22:6C:C2:A0:93:AA:DF:A3:AF:F7:5F:4A:4B:02:28:D1:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91BFE3F415F611F0A1B535156EB8BCC6.roa
Signing time: Thu 10 Apr 2025 10:28:40 +0000
ROA not before: Thu 10 Apr 2025 10:28:36 +0000
ROA not after: Thu 22 May 2025 10:28:36 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84872 (0x14b88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:28:36 2025 GMT
Not After : May 22 10:28:36 2025 GMT
Subject: CN=67f79d58-b640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:9e:02:2d:52:2b:b2:e3:42:9a:2f:5a:2a:
5b:9d:a0:0e:76:54:08:b1:e7:fe:a3:1c:00:db:45:
2c:2c:c1:a6:01:c2:c4:23:b1:8d:8b:79:dc:60:c1:
3b:09:9e:69:72:d4:b1:1b:3c:f1:46:39:39:bc:8b:
76:1e:88:10:27:c1:ea:6b:56:52:cf:ca:de:af:65:
aa:17:7b:75:59:00:3a:95:5f:6d:0e:0b:dc:1e:e2:
6f:2e:47:59:ea:70:ca:3e:51:26:29:4a:25:4f:47:
a1:97:57:56:53:fa:4e:04:ae:9c:96:78:41:e2:44:
cb:06:5a:da:05:b1:54:4f:07:ca:ab:61:25:33:ee:
1b:f1:29:ae:bb:be:20:22:c9:3f:dd:0a:93:e3:a5:
f9:61:02:db:13:e8:93:4f:02:ef:9e:0d:39:eb:66:
d8:89:93:ab:f9:1f:16:5d:f1:e5:94:2c:90:5f:e6:
90:89:f8:37:8f:70:e5:bf:24:e3:56:6b:77:cb:53:
0f:36:a1:db:16:3a:73:63:48:8d:25:b3:8e:da:14:
31:e0:1f:10:69:9a:9c:1e:d9:5d:ff:dc:53:67:e2:
e1:ea:c6:87:df:a3:ba:b2:c2:c4:7a:a2:56:ae:ea:
c1:24:42:06:94:f8:a0:81:d0:44:04:7c:36:4c:d4:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:8B:22:6C:C2:A0:93:AA:DF:A3:AF:F7:5F:4A:4B:02:28:D1:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91BFE3F415F611F0A1B535156EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a1:4f:7a:a6:f0:f1:ee:74:1b:34:43:aa:6b:41:70:a9:0b:
ca:55:0e:55:40:b0:01:98:47:d4:3a:87:13:ae:e3:85:0d:0c:
81:92:3a:19:0f:46:e1:33:9d:2a:c4:18:02:a5:1e:05:91:49:
fd:57:a5:f3:c5:4d:31:b3:f3:13:d4:78:f1:e1:fe:e1:43:5d:
c6:25:af:9b:d9:ad:02:ed:08:a4:cd:c4:d9:07:d4:b2:b9:46:
53:97:10:95:40:b5:c0:20:4c:11:a6:f5:f9:68:7e:c9:3b:e3:
3a:d0:0f:64:72:63:26:b0:2f:3e:e8:be:93:e0:dd:52:9a:4d:
37:43:2b:c6:51:95:d8:b6:4b:18:6e:92:dd:ed:21:c3:76:b2:
56:13:da:25:0e:b3:f7:78:23:10:4e:02:d7:7b:6f:d5:63:ee:
3f:52:4e:04:19:63:13:5a:97:6d:79:ef:98:aa:59:30:12:bb:
02:bb:25:5f:1c:52:a7:50:f8:07:c4:f8:8c:da:5d:bf:54:8f:
2a:b9:47:b4:34:3d:9f:28:8e:97:91:cb:16:b2:21:53:14:a3:
e6:78:87:4b:69:c7:3f:ce:d8:d3:25:1d:70:b4:10:7b:b2:af:
5d:64:61:4a:d9:aa:5e:59:a9:50:58:51:b0:72:9c:64:25:20:
54:a5:b8:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUuIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDEwMTAyODM2WhcNMjUwNTIyMTAyODM2WjAYMRYw
FAYDVQQDEw02N2Y3OWQ1OC1iNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxq2eAi1SK7LjQpovWipbnaAOdlQIsef+oxwA20UsLMGmAcLEI7GNi3nc
YME7CZ5pctSxGzzxRjk5vIt2HogQJ8Hqa1ZSz8rer2WqF3t1WQA6lV9tDgvcHuJv
LkdZ6nDKPlEmKUolT0ehl1dWU/pOBK6clnhB4kTLBlraBbFUTwfKq2ElM+4b8Smu
u74gIsk/3QqT46X5YQLbE+iTTwLvng0562bYiZOr+R8WXfHllCyQX+aQifg3j3Dl
vyTjVmt3y1MPNqHbFjpzY0iNJbOO2hQx4B8QaZqcHtld/9xTZ+Lh6saH36O6ssLE
eqJWrurBJEIGlPiggdBEBHw2TNSgyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFA7
iyJswqCTqt+jr/dfSksCKNH/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MUJGRTNGNDE1RjYxMUYwQTFCNTM1MTU2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFEMA0GCSqGSIb3DQEBCwUA
A4IBAQB8oU96pvDx7nQbNEOqa0FwqQvKVQ5VQLABmEfUOocTruOFDQyBkjoZD0bh
M50qxBgCpR4FkUn9V6XzxU0xs/MT1Hjx4f7hQ13GJa+b2a0C7QikzcTZB9SyuUZT
lxCVQLXAIEwRpvX5aH7JO+M60A9kcmMmsC8+6L6T4N1Smk03QyvGUZXYtksYbpLd
7SHDdrJWE9olDrP3eCMQTgLXe2/VY+4/Uk4EGWMTWpdtee+YqlkwErsCuyVfHFKn
UPgHxPiM2l2/VI8quUe0ND2fKI6XkcsWsiFTFKPmeIdLacc/ztjTJR1wtBB7sq9d
ZGFK2apeWalQWFGwcpxkJSBUpbiD
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:29 2025 by rpki-client on console.sobornost.net