Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B28FBF050D711F0A2322DA4DAE4EC9C.roa
File: 7B28FBF050D711F0A2322DA4DAE4EC9C.roa (raw, json)
Hash identifier: DGHsWlSgC/oYyqvbgpJLUafTWoV7rpC7SCWR1Lco9BU=
Subject key identifier: 56:1C:B1:50:A5:16:BA:22:FA:56:F1:9C:68:7D:B7:2C:87:CE:D1:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B28FBF050D711F0A2322DA4DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 08:44:47 +0000
ROA not before: Tue 24 Jun 2025 08:44:42 +0000
ROA not after: Sat 26 Jul 2025 08:44:42 +0000
asID: 63139
IP address blocks: 156.225.121.0/24 maxlen: 24
156.227.14.0/24 maxlen: 24
156.227.192.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.194.0/23 maxlen: 24
156.227.196.0/24 maxlen: 24
156.227.197.0/24 maxlen: 24
156.227.198.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89662 (0x15e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 08:44:42 2025 GMT
Not After : Jul 26 08:44:42 2025 GMT
Subject: CN=685a657f-efbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:8d:14:44:cc:21:32:68:89:0f:50:c4:06:
e8:b4:83:36:91:16:14:a7:93:57:5d:61:dc:81:6c:
c6:13:8d:74:dd:3f:14:82:94:9a:6b:fe:9d:53:79:
ec:e2:5f:d7:44:43:17:cf:1a:47:c8:78:83:af:e1:
06:2f:20:26:e0:2e:bc:7e:ce:71:88:3c:87:8d:be:
6d:d1:58:7f:b2:bc:77:3f:a0:53:4a:02:98:55:32:
72:0c:7f:e9:2e:6d:59:e8:30:fb:0c:2c:f8:d9:3e:
d7:fc:9d:b1:99:30:95:66:a2:18:36:8e:17:80:65:
22:06:de:dd:78:28:89:5d:5b:99:bc:a6:05:7c:60:
f2:28:1c:9d:4c:c3:1a:f1:0e:35:f0:f7:0e:99:81:
71:52:c1:10:35:7a:1e:ca:96:cc:2c:96:c0:f0:d5:
42:96:01:85:90:be:c1:b7:34:82:ad:76:3c:41:de:
5a:0f:e5:d9:cd:7d:f7:2e:60:a0:06:05:36:0b:ad:
26:82:5a:32:c7:a8:3e:f5:21:15:0e:e2:bd:b3:67:
7f:b7:0e:04:01:4b:3a:3b:51:4c:d8:60:9a:b7:da:
a1:3f:61:65:96:90:eb:ca:29:b1:5b:30:84:04:68:
78:d0:70:20:79:6b:46:c7:9e:e5:7c:37:c8:19:29:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:B1:50:A5:16:BA:22:FA:56:F1:9C:68:7D:B7:2C:87:CE:D1:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B28FBF050D711F0A2322DA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.121.0/24
156.227.14.0/24
156.227.192.0/21
156.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
53:15:cc:62:eb:41:c8:97:c6:82:60:b4:25:55:8d:03:bb:b1:
70:df:60:b6:cd:6f:eb:60:39:83:cd:58:eb:7b:e7:6d:03:7d:
f7:ed:2d:cb:7b:f9:89:cf:64:2f:b3:4a:de:b4:75:94:b1:55:
4e:06:08:7f:7d:26:f0:63:b0:b4:0c:49:59:1b:2f:07:3e:92:
1a:f2:fb:af:d3:5d:e2:6e:cb:79:d7:89:fe:21:b2:44:60:7b:
29:b0:12:7d:30:b6:f6:db:28:f4:4f:eb:4e:47:51:7f:81:85:
ea:c6:c0:f7:18:af:9d:d9:bf:d1:0d:c3:7a:c6:d1:cc:49:db:
0e:58:48:b3:cf:14:26:b0:cf:3e:07:5f:87:a3:d9:a9:a0:1d:
b6:1e:a1:ac:94:c2:a8:3d:75:01:26:df:7f:1b:1e:df:57:78:
00:c0:bb:c2:f8:3a:dc:67:9e:8d:59:06:9e:24:84:6b:12:43:
5f:c6:d2:be:f7:fb:f7:a7:b5:76:07:0b:01:e4:40:00:fe:fd:
4b:ff:fd:27:d7:20:0a:35:9b:04:69:b1:5a:62:ed:5e:c1:de:
89:c7:79:64:cc:29:b9:11:3f:b8:17:58:95:dc:04:36:5d:15:
01:04:76:28:4d:3a:c7:53:4e:83:1e:cd:11:b2:fe:ff:67:72:
52:41:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:09:03 2025 by rpki-client