Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49443158260311F0B9DC40C1DAE4EC9C.roa
File: 49443158260311F0B9DC40C1DAE4EC9C.roa (raw, json)
Hash identifier: sTSh+XBs3OHDf5/hSNtqAdc+OoSIe2XQLGXW0O8j798=
Subject key identifier: FF:45:2A:28:90:83:6C:DB:B2:EF:5C:62:30:55:6F:89:A7:55:D7:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49443158260311F0B9DC40C1DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 20:40:01 +0000
ROA not before: Wed 30 Apr 2025 20:39:56 +0000
ROA not after: Wed 26 Apr 2028 20:39:56 +0000
asID: 17561
IP address blocks: 156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.243.0.0/24 maxlen: 24
156.246.26.0/24 maxlen: 24
156.246.27.0/24 maxlen: 24
156.246.64.0/24 maxlen: 24
156.246.65.0/24 maxlen: 24
156.246.66.0/24 maxlen: 24
156.246.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86239 (0x150df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 20:39:56 2025 GMT
Not After : Apr 26 20:39:56 2028 GMT
Subject: CN=68128aa1-b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:4b:b3:83:5f:c8:61:92:f0:fa:df:28:0a:
00:a2:22:9b:09:4b:dc:ad:2c:3c:1e:d9:c5:16:bb:
cd:7c:1a:3b:32:21:97:d1:e0:db:21:cc:c0:f9:d9:
dc:90:5e:82:cb:5c:c5:ed:b3:9b:fa:0b:6d:7b:ba:
1d:45:b1:6e:85:f3:f8:a9:0b:ea:29:a0:01:d9:3c:
8b:6e:6f:29:8c:30:95:67:8f:25:bd:25:d8:d9:fc:
dd:88:42:5d:aa:07:96:d0:c0:f7:d7:1c:65:58:f1:
a9:9c:06:fe:db:75:d9:ef:bc:aa:de:da:8c:40:51:
bd:04:cd:40:1c:f5:b2:17:a2:3e:fe:c2:1f:29:11:
80:15:2a:46:60:77:13:5f:09:a4:f9:31:36:5e:03:
03:96:d5:02:23:aa:2f:db:9e:b1:af:f2:49:5f:0d:
6b:be:a4:31:77:8a:96:9d:5f:c7:3f:6c:68:20:5d:
f7:67:e4:af:26:21:8a:8f:10:12:67:f7:72:5d:4e:
d7:d6:a7:eb:cc:6e:b7:9e:04:43:a5:74:31:95:ae:
f4:82:b9:7d:37:f5:a8:0d:96:e5:fa:d3:1a:7c:18:
dd:f6:d5:13:ac:f7:e7:04:ff:dc:84:e1:60:19:05:
da:eb:10:ff:0c:9f:b3:9d:9d:d3:a8:d0:49:23:d2:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:2A:28:90:83:6C:DB:B2:EF:5C:62:30:55:6F:89:A7:55:D7:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49443158260311F0B9DC40C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.29.0-156.242.31.255
156.243.0.0/24
156.246.26.0/23
156.246.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:1e:8d:a1:40:c8:21:00:e2:3b:83:8b:02:44:b8:f0:87:e5:
0d:85:7b:b5:d4:b2:09:cd:01:49:71:6c:c8:3d:dc:19:64:56:
b4:a0:73:d1:34:e9:11:3c:4b:4b:bc:fe:ed:cb:88:94:d3:dd:
4a:a0:a4:62:06:fa:14:1a:23:61:09:5e:79:78:8c:d3:05:03:
7f:32:ee:39:7a:14:a1:cc:e3:2d:99:33:95:9f:90:6f:7b:18:
0c:79:a4:f0:9d:e5:16:33:ac:06:b5:93:13:fd:4e:f2:60:0f:
e6:f6:bb:09:34:06:7d:02:25:25:52:83:2b:c6:e9:80:f9:54:
f1:4e:f4:5a:c3:1b:af:7f:09:53:04:1c:cd:a5:a4:52:91:b0:
7f:4b:db:ab:81:68:33:47:5f:7f:0d:68:5d:36:29:e1:37:b1:
e5:fc:d7:ff:be:c3:94:f7:72:a9:c4:23:84:c4:48:07:0a:66:
8e:79:ee:68:a6:b1:2e:76:e1:1d:bf:d6:3b:da:9c:9b:96:26:
61:39:c8:41:40:8a:73:e4:dd:88:8c:64:0d:81:3c:9a:49:fe:
5a:79:52:24:5d:54:8e:16:44:b4:e1:c5:25:54:e8:80:b3:d2:
d1:6c:a6:cd:0c:a4:14:24:b9:1e:6c:db:eb:f0:cd:db:2c:90:
ad:61:27:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 11:38:23 2025 by rpki-client