Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8B1EA8542311F080816291DAE4EC9C.roa
File: 8F8B1EA8542311F080816291DAE4EC9C.roa (raw, json)
Hash identifier: /xMcfOg4nRgFmB8rkgam+CZF/ZP7pXGa/N+JTbjQw+4=
Subject key identifier: 97:1D:EC:36:52:E4:D7:FC:FF:A2:01:12:EA:74:CC:74:1F:8A:B8:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8B1EA8542311F080816291DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:26:56 +0000
ROA not before: Sat 28 Jun 2025 13:26:51 +0000
ROA not after: Tue 29 Jul 2025 13:26:51 +0000
asID: 214143
IP address blocks: 156.230.136.0/21 maxlen: 24
156.231.13.0/24 maxlen: 24
156.231.176.0/21 maxlen: 24
156.249.192.0/23 maxlen: 24
156.249.198.0/23 maxlen: 24
156.249.210.0/23 maxlen: 24
156.252.27.0/24 maxlen: 24
156.252.28.0/24 maxlen: 24
156.254.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89895 (0x15f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:26:51 2025 GMT
Not After : Jul 29 13:26:51 2025 GMT
Subject: CN=685feda0-b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:a4:d7:32:e6:57:89:15:37:68:08:72:8d:
cd:0f:41:ec:34:86:fb:33:2f:cd:13:de:e1:c7:59:
6e:b6:45:2b:6b:60:99:76:4e:90:db:35:1f:c8:0d:
43:42:35:d0:d2:6d:fd:92:a8:e6:d7:d1:cf:96:3f:
a1:87:9c:4f:58:91:93:89:26:bc:76:f9:76:f4:3d:
5e:ef:40:6d:5e:7d:b2:3e:68:17:9e:e4:cb:9d:bc:
ef:73:f6:96:5d:a6:ed:d5:e1:0b:a8:85:d9:64:e2:
39:c1:6c:21:40:c4:af:24:b8:ba:24:05:63:26:85:
7a:11:b8:39:3f:1e:36:e9:9a:20:83:87:5b:5f:b7:
17:4d:be:94:9e:df:f3:65:e2:30:62:87:c3:9f:ec:
41:2d:2d:43:ac:66:f5:a5:9e:b0:f8:6c:4e:34:a0:
00:3a:6e:69:6f:40:60:af:bd:50:53:3d:13:c7:e4:
56:0b:cc:ab:58:36:8e:2a:b0:54:1f:0a:37:9d:0c:
85:e7:0b:b1:e1:21:6f:4a:d9:ff:ed:8d:3b:d8:c0:
b7:25:f9:e4:77:83:48:c6:16:aa:36:f0:20:c0:70:
c5:e8:8f:c8:21:b2:4f:bc:e0:62:6b:dd:20:09:27:
46:eb:ad:ca:d8:ff:33:5a:e1:64:88:16:67:5e:04:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1D:EC:36:52:E4:D7:FC:FF:A2:01:12:EA:74:CC:74:1F:8A:B8:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8B1EA8542311F080816291DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.136.0/21
156.231.13.0/24
156.231.176.0/21
156.249.192.0/23
156.249.198.0/23
156.249.210.0/23
156.252.27.0-156.252.28.255
156.254.112.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b0:9b:9f:76:6a:01:f3:dd:c0:17:8f:64:07:85:9c:ff:28:
2f:b6:d4:c9:68:37:e1:f5:1d:fe:a6:6a:9e:70:26:07:4d:be:
c3:56:da:26:23:ad:36:1d:06:2e:91:15:12:8b:63:a4:ac:19:
07:86:f1:b5:37:55:ac:d9:35:78:98:a2:17:db:9f:7f:d9:f5:
cc:30:cf:97:c0:bc:47:6a:47:21:cb:a9:48:29:ba:be:c1:51:
e2:f7:e9:ab:24:44:c7:7b:2f:9c:56:fa:e2:db:48:89:41:5a:
f9:19:32:ce:8f:9b:d8:f6:92:5b:20:e9:27:27:ec:8d:1d:b4:
be:bb:53:82:6c:15:f8:c8:de:25:39:7a:2a:27:d2:3c:67:4d:
ad:1e:14:16:91:c3:02:29:eb:c4:fd:ee:0d:19:84:9c:3b:05:
99:8a:80:65:00:f2:b7:a5:03:fb:e5:da:af:0a:f1:ae:95:c0:
de:3a:45:f0:f9:3f:d9:78:c0:60:73:85:35:5e:7a:cf:2d:33:
fd:21:b3:96:81:e8:05:7f:8f:04:48:7d:5d:87:30:89:9b:97:
e2:5d:46:55:40:58:0d:1e:13:f3:20:fd:29:b5:22:ee:dd:cf:
22:77:c9:81:7c:d3:f3:13:a4:52:03:f6:49:1f:02:46:51:16:
4a:7a:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:41:49 2025 by rpki-client