Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3395A260911F0A75367E7DAE4EC9C.roa
File: 39A3395A260911F0A75367E7DAE4EC9C.roa (raw, json)
Hash identifier: /YXpd/hUUVTRFAsClbnef7XZLAotdoq1kUzUeibdtY4=
Subject key identifier: 38:25:28:14:24:70:91:80:76:FD:A7:D2:9A:80:A2:B7:C3:81:99:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3395A260911F0A75367E7DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 21:22:32 +0000
ROA not before: Wed 30 Apr 2025 21:22:26 +0000
ROA not after: Wed 26 Apr 2028 21:22:26 +0000
asID: 17561
IP address blocks: 156.248.107.0/24 maxlen: 24
156.248.108.0/24 maxlen: 24
156.248.109.0/24 maxlen: 24
156.248.110.0/24 maxlen: 24
156.248.111.0/24 maxlen: 24
156.252.9.0/24 maxlen: 24
156.252.12.0/24 maxlen: 24
156.252.13.0/24 maxlen: 24
156.252.14.0/24 maxlen: 24
156.252.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86251 (0x150eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 21:22:26 2025 GMT
Not After : Apr 26 21:22:26 2028 GMT
Subject: CN=68129497-26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:e8:a4:a0:73:7a:29:62:7e:ea:6f:87:d4:
d7:11:b6:99:54:38:77:9a:8d:8b:3f:8a:d1:bc:4d:
2b:46:77:39:ae:57:1f:29:3d:dd:56:98:10:04:ef:
1b:14:11:0e:d1:f3:ed:60:81:0d:2c:59:3e:ea:4e:
3d:08:35:7e:e8:14:d4:bb:fa:b7:44:d8:58:22:7e:
54:2f:58:a7:02:4f:f4:78:e8:c4:17:26:87:2b:78:
58:d1:94:fa:02:24:f4:25:db:00:3d:b2:88:70:86:
61:c3:9f:e3:7a:50:50:59:5e:6c:5c:79:6b:ca:5c:
23:3f:79:35:51:5b:e3:5c:c2:aa:1e:d6:e5:3a:38:
87:9c:f5:9a:7a:f7:a0:70:27:c5:b6:d8:cd:4b:db:
e4:fd:65:c9:64:0e:99:56:d0:cf:3c:8a:12:1a:4c:
c8:c8:e7:44:30:1d:5c:5a:74:23:83:c5:9c:30:54:
bc:65:78:e5:e8:ab:cf:4e:c5:74:45:7c:38:e4:6c:
6d:89:c0:e9:d1:70:c8:3d:74:9b:06:4f:e4:75:0f:
40:14:d2:29:93:e5:5f:10:79:00:28:af:e8:a4:6b:
93:78:2c:dd:9c:a5:f6:3d:ed:07:5e:75:67:84:b0:
b1:a7:33:96:f8:32:22:46:59:66:8f:98:4f:83:b3:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:28:14:24:70:91:80:76:FD:A7:D2:9A:80:A2:B7:C3:81:99:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3395A260911F0A75367E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.107.0-156.248.111.255
156.252.9.0/24
156.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
67:13:f6:49:88:f0:58:ed:b2:12:44:13:5e:2c:39:96:c6:10:
b0:8d:e0:99:c5:55:c7:94:2f:3b:a5:a5:fb:99:00:be:32:0d:
4f:87:69:66:e1:d6:55:3f:65:27:a9:35:5a:70:f8:c8:6c:59:
31:e5:1f:15:ce:c8:b3:12:6d:0f:ed:a2:d8:31:1b:ce:3b:8f:
a5:5b:e7:cd:95:c2:46:e8:68:0b:b2:73:c4:47:e3:fa:84:cb:
e5:c4:32:ed:6b:ea:71:08:6a:d8:84:13:0a:4b:9a:b6:4c:4e:
62:61:71:7c:96:32:d5:b7:fe:ce:a4:50:e7:f6:e1:b5:e1:b9:
4b:9a:85:88:17:5c:51:4d:00:e5:3d:d6:5c:21:ef:59:6b:59:
9c:ea:d3:44:b6:eb:64:a4:f1:a8:b7:96:7e:b1:7c:14:55:79:
be:b6:37:0a:dd:f1:b6:97:90:6d:45:13:fe:6a:46:ae:d8:9d:
9b:cf:cc:35:97:9c:8d:a7:dd:39:3a:6b:5f:5e:1d:47:d6:08:
19:69:75:73:a5:b5:2c:ef:db:63:16:a3:3c:91:55:0d:20:1a:
fb:23:ac:e7:87:17:71:44:af:82:7a:41:82:46:71:80:8f:4d:
c6:0f:a6:91:8f:7a:ff:17:2a:18:b9:9a:94:d4:e9:35:06:65:
f3:58:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:34:12 2025 by rpki-client