Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5FA9258543311F0A4D0FB7BDAE4EC9C.roa
File: F5FA9258543311F0A4D0FB7BDAE4EC9C.roa (raw, json)
Hash identifier: asziGYVsYxDqEQp0V1sGg9CNqhsGcVLD8yedNuq7mss=
Subject key identifier: C7:72:F9:DD:35:F2:24:E9:FD:F2:34:DA:A6:B7:B6:46:F0:48:62:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5FA9258543311F0A4D0FB7BDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:24:20 +0000
ROA not before: Sat 28 Jun 2025 15:24:15 +0000
ROA not after: Sun 03 Aug 2025 15:24:15 +0000
asID: 203020
IP address blocks: 156.228.12.0/24 maxlen: 24
156.228.25.0/24 maxlen: 24
156.243.247.0/24 maxlen: 24
156.253.136.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.182.0/23 maxlen: 24
156.253.194.0/23 maxlen: 24
156.253.198.0/23 maxlen: 24
156.253.202.0/23 maxlen: 24
156.253.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89925 (0x15f45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:24:15 2025 GMT
Not After : Aug 3 15:24:15 2025 GMT
Subject: CN=68600924-119b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:70:77:3e:47:c4:20:28:5b:23:a7:e6:49:
6f:c3:cd:a7:a7:5d:ed:75:d0:77:d2:71:a9:f5:cd:
a1:bc:a8:36:82:58:78:95:7d:c3:ac:ed:89:b4:97:
16:a8:73:d1:e5:db:7d:4f:f1:31:08:92:5d:b5:7a:
75:99:47:d6:ba:4f:3c:bb:8b:bb:05:1a:e0:f6:f6:
c4:4e:04:ad:75:24:f4:8f:ca:6a:86:31:5f:3f:e7:
4d:29:b2:44:04:e5:c6:96:83:7d:33:8b:a7:98:52:
c3:3b:54:2f:03:7b:7c:69:c2:90:eb:b5:d7:c2:72:
d2:63:63:67:15:04:1a:1c:a9:93:da:f7:d0:1a:00:
d3:e9:b5:0a:df:e5:00:74:87:c2:00:3c:d6:92:b9:
68:52:6f:82:94:4f:64:44:11:64:3f:f1:7a:46:ba:
e6:6f:b6:bb:03:78:51:80:f4:e9:ef:71:5c:39:56:
a2:c9:1b:40:43:85:8a:35:7b:b1:30:ff:df:a3:6e:
59:14:f8:7c:22:ca:08:e1:e0:d4:09:04:c4:e8:3b:
0c:fb:99:ac:29:6b:06:9b:de:40:f8:8a:b4:94:da:
e9:f0:67:90:d6:eb:b4:c8:6e:e7:b3:98:cb:74:35:
33:ff:ba:37:90:d1:9b:2f:7c:25:d4:60:42:c0:9c:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:F9:DD:35:F2:24:E9:FD:F2:34:DA:A6:B7:B6:46:F0:48:62:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5FA9258543311F0A4D0FB7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.12.0/24
156.228.25.0/24
156.243.247.0/24
156.253.136.0/24
156.253.163.0/24
156.253.182.0/23
156.253.194.0/23
156.253.198.0/23
156.253.202.0/23
156.253.206.0/23
Signature Algorithm: sha256WithRSAEncryption
05:76:45:b6:ec:d4:d5:00:91:ee:c0:b4:ac:e6:4a:9a:7f:9a:
38:4e:25:2a:bb:9d:60:d7:09:00:ee:b9:02:d2:90:4e:5c:39:
39:4d:7c:63:18:53:15:4f:7f:31:e5:58:a2:b0:7a:3c:ea:bc:
dc:0a:4e:69:ec:54:44:f8:f8:27:25:a0:62:3a:5a:8b:16:38:
65:5a:02:5c:e7:ae:a3:16:bb:f1:cb:8b:27:5e:f9:56:17:97:
4b:c4:43:af:1d:b9:b2:97:93:93:3d:ab:eb:e4:b3:28:2e:ee:
bc:9a:08:5a:8c:4b:7f:5d:32:4f:4b:87:5d:b7:f3:bb:29:0e:
3d:26:3d:78:a5:15:fb:0a:51:86:fe:50:6f:a2:d3:26:4f:78:
d2:86:94:ad:1b:99:47:6a:4b:d0:c0:00:8b:3f:01:73:3b:8f:
72:c3:ff:ca:c0:7a:01:cd:aa:4d:86:d3:53:7d:40:34:ec:67:
7e:03:38:23:87:9e:4d:a9:04:dd:ee:52:19:61:16:de:68:3f:
fa:83:d0:fa:45:d2:6a:56:da:75:61:3f:1f:ad:9a:b2:21:9c:
4f:f4:4b:fd:0b:1e:7b:30:81:2d:a5:d8:d7:80:d3:15:6a:2c:
15:01:69:f1:4f:40:a0:68:a6:f3:96:5e:f3:12:78:7c:b8:65:
e3:c3:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:25:18 2025 by rpki-client