Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EFDFE2243911F0A5C385CBDAE4EC9C.roa
File: A3EFDFE2243911F0A5C385CBDAE4EC9C.roa (raw, json)
Hash identifier: /FkdlcEXFsqOQSHxWcVkQ5iZBAZOdcJ2WYNyo+YRWcA=
Subject key identifier: 4C:96:09:95:DE:CA:96:27:1E:30:41:37:CA:B8:51:72:36:1B:76:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EFDFE2243911F0A5C385CBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:04:03 +0000
ROA not before: Mon 28 Apr 2025 14:03:59 +0000
ROA not after: Tue 14 Apr 2026 14:03:59 +0000
asID: 984
IP address blocks: 156.237.230.0/24 maxlen: 24
156.237.233.0/24 maxlen: 24
156.237.236.0/24 maxlen: 24
156.237.237.0/24 maxlen: 24
156.237.239.0/24 maxlen: 24
156.237.242.0/24 maxlen: 24
156.237.244.0/24 maxlen: 24
156.237.245.0/24 maxlen: 24
156.237.253.0/24 maxlen: 24
156.237.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85841 (0x14f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:03:59 2025 GMT
Not After : Apr 14 14:03:59 2026 GMT
Subject: CN=680f8ad3-73e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:10:b0:1d:86:88:1c:89:51:ff:b2:18:52:
77:4e:f5:8f:d4:91:01:08:15:e5:9b:f0:ca:6d:55:
16:88:eb:65:63:f8:c5:01:c1:39:46:22:77:4e:9e:
64:d3:2e:52:f3:3d:75:f1:09:18:27:62:a2:45:17:
e6:3c:aa:83:ae:61:a4:ce:60:2d:74:7b:2f:b7:66:
5a:e9:a4:e4:51:3a:3b:c7:2e:9e:6a:12:dd:47:e3:
d2:e8:b3:85:89:61:45:03:bd:65:2b:7f:07:10:a4:
72:e5:57:8d:19:61:9f:82:c8:54:c3:1e:7c:4e:19:
35:6b:72:6a:f4:45:ef:f4:ce:a0:70:da:9b:5f:72:
a6:28:47:cb:a2:86:0e:7f:c2:80:e0:a9:c6:36:55:
e2:ac:23:76:be:97:18:b7:b8:0c:72:6a:6e:98:53:
4d:ab:3a:e2:57:7f:e9:bd:48:84:39:c5:4e:53:46:
94:f7:13:67:fb:67:0e:53:1d:57:89:01:2b:88:e3:
3e:39:8e:49:18:f6:f4:50:5c:fb:8c:e7:88:d8:dd:
01:05:89:6b:78:ca:51:06:7b:d5:40:c8:86:f8:34:
65:c6:fb:3d:04:e6:8f:cc:28:1a:cc:f5:06:2d:26:
47:8c:17:e6:17:3e:c1:72:5f:e6:bd:46:f4:86:94:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:09:95:DE:CA:96:27:1E:30:41:37:CA:B8:51:72:36:1B:76:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EFDFE2243911F0A5C385CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.230.0/24
156.237.233.0/24
156.237.236.0/23
156.237.239.0/24
156.237.242.0/24
156.237.244.0/23
156.237.253.0/24
156.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2d:54:71:41:6d:da:23:57:1e:ba:5e:aa:6f:70:ac:39:13:
43:ec:3e:e5:d8:b0:0c:c4:25:d2:f2:cf:bf:e0:aa:b3:7f:9e:
26:27:a4:ec:fb:5f:c8:fe:ff:12:31:a6:3a:4e:c3:51:bf:ef:
c1:90:be:9f:b3:c0:97:89:50:82:6f:99:0a:59:e6:eb:9d:54:
f3:33:f0:eb:f9:b5:42:44:75:39:4a:e9:1b:47:c2:7f:9b:ac:
9f:f2:10:b1:54:d9:0b:39:46:f5:ec:d4:54:c4:57:06:e8:f0:
ce:31:8e:42:b8:79:f6:20:5b:58:d1:89:16:6c:f8:8e:a6:bd:
9f:34:17:4b:62:17:08:d1:fd:7b:ac:b7:11:0a:23:8f:11:38:
8c:52:75:9a:d1:57:df:03:78:96:a6:c4:ce:a9:16:2b:0c:c5:
e4:65:27:2f:ad:2c:34:e5:08:b3:20:be:85:26:c9:52:fc:a4:
bc:7f:61:dc:a2:48:97:8e:f1:70:b3:15:17:7b:7d:58:6f:17:
da:12:51:d1:c6:7b:47:74:b4:11:a2:20:26:2d:ff:7d:ba:c9:
79:96:4c:13:e7:b7:01:47:73:db:b4:5b:71:4f:81:51:62:7b:
0c:e1:f8:32:b9:cd:09:4d:5f:e9:41:bf:f2:37:00:bf:08:6c:
fb:dd:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:45:14 2025 by rpki-client