Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4060C256260B11F0AB8AD3F4DAE4EC9C.roa
File: 4060C256260B11F0AB8AD3F4DAE4EC9C.roa (raw, json)
Hash identifier: 3DQORyDWIrkDVj5FFMRfS3z5iha69AhQ3wYn/Vkoll0=
Subject key identifier: 60:40:4C:F9:7E:4A:92:1D:E8:05:26:D5:75:BE:91:BA:40:6D:5D:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4060C256260B11F0AB8AD3F4DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 21:37:02 +0000
ROA not before: Wed 30 Apr 2025 21:36:57 +0000
ROA not after: Fri 28 Apr 2028 21:36:57 +0000
asID: 17561
IP address blocks: 156.232.132.0/24 maxlen: 24
156.232.133.0/24 maxlen: 24
156.232.134.0/24 maxlen: 24
156.232.135.0/24 maxlen: 24
156.232.136.0/24 maxlen: 24
156.232.137.0/24 maxlen: 24
156.232.138.0/24 maxlen: 24
156.232.139.0/24 maxlen: 24
156.232.140.0/24 maxlen: 24
156.232.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86255 (0x150ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 21:36:57 2025 GMT
Not After : Apr 28 21:36:57 2028 GMT
Subject: CN=681297fe-eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:ca:fb:bb:ef:fa:c3:a1:7d:aa:0f:1d:f0:
a9:0c:49:09:7a:d2:8d:a9:f7:65:10:69:ca:38:fd:
a0:36:6e:ae:3d:61:14:9f:59:f9:a9:48:bb:3c:a1:
49:d5:4d:b8:a3:c5:0e:90:19:1a:27:f8:9d:45:0b:
ed:5a:4b:48:5f:70:20:96:4b:73:0b:7e:0f:bb:57:
3c:65:b6:32:4a:88:f8:b3:84:68:8d:8a:f8:e9:c8:
11:e5:99:59:12:d2:37:98:e8:08:21:1e:78:3d:66:
79:f6:cc:c1:f8:e1:5d:ad:23:06:2a:c1:69:94:dd:
4d:9d:3e:70:7a:b4:63:8d:c7:d4:58:f9:07:ce:2c:
d7:2a:ed:8e:4e:12:a5:61:43:c0:7a:4d:5b:32:87:
8e:41:f0:cd:53:a2:c7:b2:8f:96:6e:82:8f:09:59:
3c:2e:b9:12:17:49:1a:8a:d3:89:e4:fa:4d:a7:34:
b8:e5:16:d6:33:d3:6e:1d:69:f6:35:83:46:10:3c:
06:e2:99:67:f4:00:a4:81:34:10:04:0c:89:30:56:
de:32:9b:8f:1a:d3:c2:78:f3:ed:c2:27:4a:8a:7a:
bd:ce:14:1b:81:aa:3d:f7:2c:eb:29:7b:f1:31:aa:
f8:43:87:bd:fe:df:8a:93:82:da:7d:f0:8e:77:da:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:4C:F9:7E:4A:92:1D:E8:05:26:D5:75:BE:91:BA:40:6D:5D:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4060C256260B11F0AB8AD3F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.132.0-156.232.141.255
Signature Algorithm: sha256WithRSAEncryption
49:a5:10:dd:60:35:6a:a8:7e:9b:72:91:42:1e:0a:53:02:4f:
45:21:39:4b:ee:48:3e:8c:3c:d8:f4:0e:cd:0a:35:a0:c0:b1:
f1:ae:56:c9:c2:73:43:69:fc:68:ad:11:d3:71:aa:50:6d:d7:
66:54:0d:81:8a:a3:09:57:87:3f:8e:ad:a2:5b:cc:91:5b:c0:
7c:5e:ba:bc:66:b1:52:a4:70:95:83:54:b8:4d:e9:7b:26:a6:
c7:a0:e7:a2:ba:ae:13:d3:c7:1e:aa:a3:e2:48:5c:3c:70:49:
0b:2d:92:f8:d2:e2:9b:4a:53:a8:41:c3:7b:da:22:9c:c6:6f:
d6:e7:60:83:da:5c:af:9c:a5:ad:d9:77:71:db:23:fa:1d:da:
64:7e:37:e4:7b:af:f7:57:f1:a4:70:58:1c:94:73:2d:f6:36:
50:e5:74:f7:e7:57:4f:28:46:d4:cd:93:62:20:e1:14:76:81:
01:98:6a:32:a6:c6:03:b0:1f:18:bc:c8:5e:6a:e1:09:6e:2b:
b6:65:1f:fe:cc:79:e7:d1:83:e5:5d:e7:af:eb:13:15:c1:5f:
e3:c2:48:86:cf:c9:3e:2d:94:2f:33:33:77:bd:f2:91:2c:3d:
37:a1:28:9c:76:6c:b3:1d:8f:53:30:28:aa:f7:c3:63:60:3c:
4f:ec:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:52:51 2025 by rpki-client