Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680B2E6E50DA11F0B8CF03B6DAE4EC9C.roa
File: 680B2E6E50DA11F0B8CF03B6DAE4EC9C.roa (raw, json)
Hash identifier: LKLGQcmD5v54VZVj1BNCb1MDPZUujk0KP57Y0ssrODo=
Subject key identifier: D3:B6:9A:DA:CF:CE:43:BB:07:CA:B7:F1:D2:4F:82:C8:8A:44:F7:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680B2E6E50DA11F0B8CF03B6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 09:05:43 +0000
ROA not before: Tue 24 Jun 2025 09:05:38 +0000
ROA not after: Sat 26 Jul 2025 09:05:38 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.203.0/24 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89672 (0x15e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 09:05:38 2025 GMT
Not After : Jul 26 09:05:38 2025 GMT
Subject: CN=685a6a67-9b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:67:ef:b0:0d:2a:ee:e4:5c:f7:9b:dd:5d:
90:60:e9:19:40:90:7d:94:31:1e:1b:61:0c:0e:0b:
bf:c0:34:37:ef:50:e4:be:5f:e3:37:38:33:40:8c:
71:82:c9:ef:08:cb:8f:8e:e2:8c:e7:64:d0:73:f1:
cb:19:c5:b0:35:85:fc:25:3e:7c:44:df:69:1d:26:
2d:e6:4e:1a:f8:26:16:21:0f:d5:f8:fe:ca:4c:6b:
f0:f9:21:d8:d0:b8:da:86:bd:44:37:5c:93:98:92:
de:da:95:fd:33:4b:db:fe:9a:1b:90:9e:9e:d7:d6:
2a:a8:e0:3a:1d:89:a5:34:04:2c:19:c2:8c:e2:ed:
2f:b8:fc:7e:08:0a:91:72:03:16:a1:57:92:f8:70:
6a:f8:ac:97:dc:66:65:52:8f:68:0f:9e:8a:75:b6:
28:87:55:fa:2f:1b:a1:31:b8:5a:8a:ce:a0:ed:28:
58:04:29:bf:ca:2b:4b:2c:68:98:e4:e0:97:a5:32:
04:6b:f8:09:8c:9b:ef:c6:d7:47:67:75:a8:f0:d3:
a3:38:dc:5e:73:80:80:4f:16:08:c8:12:8e:a4:24:
0a:9b:2b:db:1a:f7:ba:aa:a9:05:d0:a4:43:a0:b1:
10:ad:cb:16:a5:de:af:46:28:48:35:24:eb:ea:e8:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:9A:DA:CF:CE:43:BB:07:CA:B7:F1:D2:4F:82:C8:8A:44:F7:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680B2E6E50DA11F0B8CF03B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
156.227.226.0-156.227.231.255
156.229.40.0/22
Signature Algorithm: sha256WithRSAEncryption
92:0c:02:c6:8d:60:ca:10:fe:32:d8:59:ed:1e:61:85:76:94:
ad:94:a9:bc:5b:5b:f9:ed:5c:f4:e2:51:d6:79:5d:ff:23:dc:
3f:ee:8b:79:3a:63:7b:f3:19:d0:73:f8:ac:c5:28:99:0b:e5:
ae:de:4a:75:03:ea:0e:c6:ae:e2:67:15:d0:fe:82:da:a0:dc:
e3:71:8d:d0:56:17:25:44:12:f2:eb:f2:f5:10:a4:86:96:5c:
81:16:d3:d9:db:70:b9:0b:0a:ec:8f:3e:d6:c1:6c:2a:9d:59:
80:90:56:d9:4c:c0:80:4d:bb:99:b8:c4:7c:a5:95:7e:3c:44:
9f:21:77:56:77:78:94:ea:98:7d:29:4c:c4:8d:5a:1c:35:86:
0c:41:cb:0e:d3:b4:a6:27:a1:4e:46:e0:09:c5:12:3a:59:8a:
a3:68:fd:f8:07:45:e1:0f:65:04:95:6a:d9:7a:92:d4:82:02:
f1:61:89:97:97:df:55:f2:4a:48:37:e2:83:6e:7a:94:55:53:
8b:9c:3e:0a:84:4e:1b:30:c1:79:a0:a8:78:a9:55:68:ef:95:
d2:c1:6c:b6:6d:9c:14:e4:f9:2c:8a:b8:6c:a7:f3:ab:87:8b:
2c:e9:1c:52:43:ad:1f:18:91:9d:60:fa:40:82:de:93:9a:68:
53:d9:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:50:30 2025 by rpki-client