Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A28F2C25F011F0ADDC95C7DAE4EC9C.roa
File: F3A28F2C25F011F0ADDC95C7DAE4EC9C.roa (raw, json)
Hash identifier: uoeIO4J+Lm81Z06B3TVisiwi5NI6utgO4Ifs0bL6MVY=
Subject key identifier: 8A:55:27:AD:A9:1B:65:59:27:F6:55:A1:27:1A:2A:E9:43:88:77:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A28F2C25F011F0ADDC95C7DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 18:28:46 +0000
ROA not before: Wed 30 Apr 2025 18:28:41 +0000
ROA not after: Fri 14 Apr 2028 18:28:41 +0000
asID: 17561
IP address blocks: 156.237.232.0/24 maxlen: 24
156.237.234.0/24 maxlen: 24
156.237.235.0/24 maxlen: 24
156.237.238.0/24 maxlen: 24
156.237.240.0/24 maxlen: 24
156.237.241.0/24 maxlen: 24
156.237.243.0/24 maxlen: 24
156.237.246.0/24 maxlen: 24
156.237.247.0/24 maxlen: 24
156.237.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86201 (0x150b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 18:28:41 2025 GMT
Not After : Apr 14 18:28:41 2028 GMT
Subject: CN=68126bde-b46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:66:43:b2:9a:e6:3d:dc:fc:1e:0f:98:25:
ac:a9:49:45:a0:a2:19:c5:51:3b:25:d8:cd:1f:99:
9b:26:dc:8f:b3:42:bb:37:66:04:6d:35:56:c4:0e:
89:54:cc:78:f8:57:46:60:8e:65:65:26:93:eb:51:
2c:55:23:ee:bc:51:36:c6:bd:b6:6c:90:3a:f4:98:
2a:2e:89:ca:c7:83:c2:86:1a:97:71:77:43:9b:4b:
fa:da:a1:1a:41:ac:7d:a0:f1:8c:9f:e6:ea:6b:05:
d3:98:c8:a0:fa:3e:0b:20:89:0c:ee:81:f0:01:e1:
8f:75:0e:98:36:1e:93:14:63:a5:46:84:6d:cb:99:
bd:40:9f:5d:08:01:66:9d:81:8b:cd:fb:b9:05:ac:
5d:ba:af:7c:35:18:0d:bf:38:31:f0:fd:e0:59:1b:
0b:c5:2b:20:f8:f1:96:e9:c6:35:1e:0e:f3:9f:1e:
3a:f2:42:09:28:08:02:06:06:66:b8:51:c9:35:a2:
95:49:a6:18:97:46:ab:9b:b5:e3:68:5e:74:2d:e7:
ee:8c:97:ef:46:05:5e:5b:40:48:16:52:fd:94:32:
3a:7b:08:ea:a5:cf:30:9a:14:a0:d6:f2:f5:0e:3b:
fa:00:92:0c:f5:4b:c9:3c:36:16:65:9a:51:5e:7f:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:27:AD:A9:1B:65:59:27:F6:55:A1:27:1A:2A:E9:43:88:77:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A28F2C25F011F0ADDC95C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.232.0/24
156.237.234.0/23
156.237.238.0/24
156.237.240.0/23
156.237.243.0/24
156.237.246.0-156.237.248.255
Signature Algorithm: sha256WithRSAEncryption
3a:20:88:ed:29:f4:fc:ac:c5:b2:56:e8:9a:15:4f:f5:ff:a3:
78:ed:a5:d1:65:b6:fb:7b:a7:59:95:e8:97:9a:ef:bc:e0:53:
73:30:bc:96:6e:6f:6e:97:f4:b8:a7:bb:d1:27:08:b8:9e:f3:
46:12:9a:b0:7c:9c:ee:11:b4:6a:a7:f6:c3:1a:f9:aa:cb:a6:
cc:e5:90:90:98:c5:21:d6:e9:29:93:c3:9d:b9:a9:f9:e9:e4:
32:9a:76:90:dd:a4:c2:f0:33:4b:4b:b0:a7:c1:be:9f:10:36:
d0:a6:db:a7:5b:d2:66:35:02:ed:d2:22:4a:ea:c2:d2:f1:19:
a8:37:79:b5:a1:cb:ff:4a:bb:39:ec:49:87:62:32:e6:29:89:
5c:31:84:34:1e:7b:0a:c6:88:01:96:96:71:f3:8d:8c:4f:31:
13:1b:24:0b:31:25:e8:ed:c2:06:fd:be:41:d0:ef:b8:24:e6:
00:d4:33:80:fa:f1:d2:7b:ac:5c:3e:dc:b1:2d:fa:b6:af:1e:
7b:a9:b7:a4:21:f7:d0:50:cc:8e:77:0e:45:f3:dd:40:66:cc:
9d:ae:74:25:87:fa:e3:a8:2b:ee:f8:e8:c5:10:8c:84:e7:ff:
dd:4f:3a:89:c1:95:c3:be:34:04:98:1c:28:e3:ff:6d:d2:55:
53:51:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:55:26 2025 by rpki-client