Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C359AD3225F511F0B523F6E6DAE4EC9C.roa
File: C359AD3225F511F0B523F6E6DAE4EC9C.roa (raw, json)
Hash identifier: IqzUxdyBKKBH6BqULehmKpo+FREGY1pcRUMVpNpMS9U=
Subject key identifier: 28:A3:D2:7C:5C:AF:B6:9E:50:57:BD:8F:AA:FC:D4:F0:CE:77:5D:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C359AD3225F511F0B523F6E6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 19:03:13 +0000
ROA not before: Wed 30 Apr 2025 19:03:07 +0000
ROA not after: Wed 26 Apr 2028 19:03:07 +0000
asID: 17561
IP address blocks: 156.232.80.0/24 maxlen: 24
156.232.81.0/24 maxlen: 24
156.232.82.0/24 maxlen: 24
156.232.83.0/24 maxlen: 24
156.232.84.0/24 maxlen: 24
156.232.85.0/24 maxlen: 24
156.232.86.0/24 maxlen: 24
156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86211 (0x150c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 19:03:07 2025 GMT
Not After : Apr 26 19:03:07 2028 GMT
Subject: CN=681273f1-9c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:b6:53:fc:38:c9:41:49:40:77:fc:8e:4a:
83:d1:66:c5:0c:49:ec:75:8d:96:9f:5a:e8:eb:d4:
b6:5a:71:4d:32:ee:d3:be:eb:99:08:4f:f0:f8:56:
a0:2b:32:fd:70:55:83:54:83:4f:8e:88:f7:b9:dc:
70:05:3a:bd:7c:45:06:67:89:78:a2:1f:3c:80:7f:
c9:c4:2a:d2:ee:f1:d3:26:b3:97:88:7e:36:24:b1:
10:9c:60:79:16:83:4d:7a:42:8b:f2:7f:98:62:f8:
c7:77:78:38:e0:2f:25:76:06:71:c2:26:a6:ba:a2:
a0:91:e2:27:01:ef:e5:36:4e:d0:ff:ba:a6:87:45:
fe:e2:da:fe:57:86:71:fb:8f:a3:53:f0:54:96:43:
27:24:d5:54:42:52:fc:49:aa:01:62:da:cd:bb:17:
6e:d9:d1:41:e1:23:47:14:c1:60:28:f0:c1:63:a7:
85:ad:ee:da:48:8d:3d:78:4d:c9:b8:f9:0d:1c:0a:
77:d1:b5:23:8d:2f:43:61:03:ab:d2:dd:64:b8:1e:
4b:f3:4e:e3:fd:b6:58:57:04:ed:62:08:df:4c:15:
70:65:9d:66:7b:a4:18:3e:a3:85:cf:64:fc:f8:ba:
b2:4c:30:c3:d8:a9:e4:e6:85:86:77:e3:6d:61:74:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:D2:7C:5C:AF:B6:9E:50:57:BD:8F:AA:FC:D4:F0:CE:77:5D:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C359AD3225F511F0B523F6E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0-156.232.86.255
156.233.0.0/23
156.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
01:27:59:16:b4:6c:13:ef:ca:17:db:2b:4d:3c:6e:a7:a8:d6:
03:cc:0d:b5:5a:de:65:e6:37:c2:31:c0:78:9c:35:9c:25:1f:
84:e4:9d:bf:31:b8:62:06:4f:69:ad:f7:20:fe:16:6c:76:30:
42:c1:d8:a2:d0:dd:dd:48:97:32:f3:a4:ce:73:b5:55:0b:ab:
ac:62:5e:d3:db:97:38:74:66:d2:f9:3a:a3:0b:72:c9:05:fb:
fc:64:c2:20:c8:75:96:00:37:07:d4:f3:90:86:2d:63:9f:a1:
d0:fa:77:7b:d0:d9:04:bc:4c:8f:65:61:d9:d4:48:c5:a1:34:
30:56:80:b4:55:44:22:2a:1c:64:c0:21:c0:60:33:d7:56:91:
20:3b:12:64:cf:db:ad:c4:1b:e5:22:af:e3:7d:fc:64:9c:ae:
82:89:5b:aa:2f:95:bb:3b:e1:8e:27:f3:4b:85:59:46:9d:da:
89:c4:ad:83:8e:ea:b5:1f:5b:b9:97:9b:97:4e:e2:08:bd:32:
b1:41:a7:4f:e7:c1:d0:0b:1c:2f:55:b6:16:42:83:8c:80:43:
04:07:88:6e:cd:c7:c7:33:e3:59:8c:5c:42:79:27:4b:9a:17:
7f:a3:a1:c5:f7:37:f1:b5:7a:a8:50:1b:71:e8:ca:7c:63:81:
84:4a:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:48:36 2025 by rpki-client