Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13736A90565E11F0A3B58694DAE4EC9C.roa
File: 13736A90565E11F0A3B58694DAE4EC9C.roa (raw, json)
Hash identifier: cqC5fHSe5oOOB1j4Vjmm8Z9w2CwmPqIJ15H8DTNbXCU=
Subject key identifier: 3C:DF:A2:86:E8:3E:9C:A0:91:AB:66:8E:45:61:49:BD:00:F9:D4:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13736A90565E11F0A3B58694DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 09:30:52 +0000
ROA not before: Tue 01 Jul 2025 09:30:44 +0000
ROA not after: Thu 07 Aug 2025 09:30:44 +0000
asID: 200373
IP address blocks: 156.228.107.0/24 maxlen: 24
156.228.108.0/24 maxlen: 24
156.228.109.0/24 maxlen: 24
156.228.110.0/24 maxlen: 24
156.228.111.0/24 maxlen: 24
156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90044 (0x15fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 09:30:44 2025 GMT
Not After : Aug 7 09:30:44 2025 GMT
Subject: CN=6863aacb-4438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:5a:36:2f:17:73:89:64:87:4b:51:10:39:
c0:84:dd:fe:40:c0:ba:3b:60:62:bd:91:7c:30:c8:
93:e8:27:bd:1b:fb:c2:b8:af:3e:01:b4:60:7b:dd:
36:b7:9b:af:96:f0:a9:dd:55:67:43:55:6a:83:39:
1d:13:21:dd:99:08:db:a4:a7:48:47:cd:9c:dc:e6:
f1:45:7b:5f:53:f7:aa:87:30:c8:96:41:85:e0:48:
b6:e9:a1:3f:ca:fc:2a:33:8b:30:9a:68:7f:f0:47:
1e:81:38:46:3d:94:e2:fa:cd:bb:e1:95:66:eb:0c:
8d:55:24:2f:b2:09:09:a8:1f:72:76:19:f4:29:b9:
9b:b9:56:1b:06:f5:1f:18:c1:bf:d8:91:98:9c:21:
9f:59:0e:73:ce:77:3a:2c:be:df:ea:5b:8b:83:bf:
07:6e:18:f5:7a:67:2d:7c:df:f7:55:ef:42:5a:d1:
21:49:bd:75:67:6e:fe:17:ad:a3:81:42:51:ba:6b:
e0:c8:b6:c9:24:b5:21:25:20:9a:b5:62:e8:c9:4b:
3f:95:b2:f7:72:95:85:0a:5f:6b:97:78:28:1e:eb:
c6:a9:7a:c7:18:b4:64:22:ca:b3:2e:a2:11:03:55:
0e:3d:4a:94:6c:f5:c2:01:24:dd:35:32:d7:06:8d:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:A2:86:E8:3E:9C:A0:91:AB:66:8E:45:61:49:BD:00:F9:D4:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13736A90565E11F0A3B58694DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.107.0-156.228.116.255
Signature Algorithm: sha256WithRSAEncryption
95:74:e3:bd:90:a1:3f:fb:a1:a6:d0:05:9d:f8:90:97:8f:1c:
1b:81:36:04:1e:07:ac:b1:52:fa:4a:54:f5:55:cb:fe:e1:c2:
84:78:04:1e:23:b1:c9:44:9f:97:8b:06:d5:45:c5:0c:26:ad:
a2:78:8f:6e:1b:ae:6c:43:84:01:c0:ed:b3:14:57:a4:67:b0:
cc:20:60:f3:9a:a5:5c:47:83:57:f1:5a:cd:dc:47:51:5c:93:
b3:d1:c1:1b:ff:f3:db:a7:a8:58:8d:bc:46:17:5c:28:9c:4a:
cd:85:9c:a6:9a:20:96:d1:41:20:f6:f1:b3:c6:6a:d1:33:24:
b9:ce:33:d0:fb:44:5f:23:f8:c9:bb:2b:41:d7:2f:24:19:cc:
c6:cd:2c:a0:f7:22:ae:39:f6:a0:a2:f7:12:b9:42:9a:37:c1:
5d:32:0e:28:53:f6:de:96:71:ba:a9:1b:5a:40:92:67:6b:14:
bb:55:51:43:e7:d3:6e:61:40:a6:11:8e:ce:e0:44:03:43:fb:
c1:7e:d8:c5:dc:80:90:11:33:3a:77:cb:47:39:64:73:d3:22:
18:6d:1d:be:08:fd:7b:db:b0:6e:a8:f7:30:6f:dd:bc:18:01:
87:a0:01:d1:f5:98:9b:83:b7:56:c0:61:01:ee:fb:e6:4c:af:
e5:e0:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:59:26 2025 by rpki-client