Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1454AA7E565D11F0AB3CF18DDAE4EC9C.roa
File: 1454AA7E565D11F0AB3CF18DDAE4EC9C.roa (raw, json)
Hash identifier: /w2iLY1nx2S0fvZs/s2si7nzyq6VvfmoGy1bgwkUTqk=
Subject key identifier: E0:50:F1:FE:09:4D:20:44:56:86:E0:90:A2:3B:25:C8:DF:22:FD:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FBA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1454AA7E565D11F0AB3CF18DDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 09:23:42 +0000
ROA not before: Tue 01 Jul 2025 09:23:38 +0000
ROA not after: Thu 07 Aug 2025 09:23:38 +0000
asID: 200373
IP address blocks: 156.228.97.0/24 maxlen: 24
156.228.98.0/24 maxlen: 24
156.228.99.0/24 maxlen: 24
156.228.100.0/24 maxlen: 24
156.228.101.0/24 maxlen: 24
156.228.102.0/24 maxlen: 24
156.228.103.0/24 maxlen: 24
156.228.104.0/24 maxlen: 24
156.228.105.0/24 maxlen: 24
156.228.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90042 (0x15fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 09:23:38 2025 GMT
Not After : Aug 7 09:23:38 2025 GMT
Subject: CN=6863a91e-9eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:14:88:a3:5d:8c:a1:bd:cc:e4:56:06:cd:
b5:9a:3b:e8:91:57:a7:91:8a:93:57:52:95:62:5b:
44:f6:a2:81:88:ef:29:f2:af:91:ba:bc:7b:75:a0:
2d:b8:40:59:e6:5e:6d:69:e1:59:a3:43:04:0d:7f:
ab:79:cc:d1:8c:39:1b:3d:da:72:69:88:0e:c9:e9:
2f:0c:6d:29:a8:bd:96:ab:76:a2:cb:fb:cf:ae:65:
74:70:d0:77:08:52:fd:ea:97:91:7a:48:e2:4a:84:
1d:c9:0a:aa:f3:65:f0:7e:c1:e6:81:17:ed:27:01:
fa:aa:a6:8b:a9:47:89:8f:ec:e1:7c:d2:40:db:48:
bf:ce:91:70:6b:24:ea:04:61:14:57:ab:bf:8c:a7:
f2:32:0d:30:c4:d4:c1:7d:dd:f5:f8:de:26:db:f1:
d6:b8:5e:66:16:cb:d2:78:3e:60:44:78:24:96:31:
ac:06:72:49:66:36:4c:b2:5d:df:72:f1:49:fb:31:
f6:2a:b6:5b:d6:ad:35:a9:38:00:f6:6a:6b:ee:b0:
c8:74:b4:a0:59:2d:a9:3b:7f:eb:ce:a2:89:8c:1e:
1c:83:7f:5d:c0:2c:0b:c0:c3:af:da:6b:af:94:11:
83:d6:32:23:d2:04:0f:fc:e0:28:21:2a:ea:ec:f9:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:F1:FE:09:4D:20:44:56:86:E0:90:A2:3B:25:C8:DF:22:FD:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1454AA7E565D11F0AB3CF18DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.97.0-156.228.106.255
Signature Algorithm: sha256WithRSAEncryption
5c:c6:d2:e9:c6:3d:35:b0:70:17:94:b2:c7:92:8f:49:4a:40:
20:3f:df:b3:41:de:a3:dd:16:79:2d:49:ed:78:5a:44:87:bb:
dc:d6:f9:c3:6b:cd:fd:97:04:38:74:43:58:e0:ec:29:7e:cd:
2e:bb:50:09:02:c9:7c:ea:e7:5e:1c:4b:06:3a:5a:1e:51:b0:
a8:96:dd:ab:f6:cb:89:f8:bb:87:1f:a3:82:6a:c3:c9:cd:0a:
b2:bf:93:b9:69:44:cd:5a:5f:db:f5:d8:96:4b:e0:ec:e0:7e:
10:51:87:d1:97:d8:14:41:cf:29:50:f0:e1:f7:0f:9f:fa:a2:
bc:c0:47:27:ad:93:47:ea:eb:d6:62:7b:a4:91:b5:91:59:50:
ea:38:15:f0:ed:88:aa:3d:6b:01:fe:5d:ee:db:95:b1:b0:d8:
4a:e2:a2:9d:5c:f9:b7:eb:df:3d:86:d7:1b:6e:7d:d6:03:e2:
ef:05:3f:ac:07:3d:36:34:4d:a6:67:f9:ef:61:77:e1:07:c3:
b3:45:45:0e:5a:a2:9d:07:63:0f:44:54:08:bb:80:ed:9e:26:
1f:9d:eb:7e:cb:77:a4:1d:73:9d:f4:b5:72:cc:03:20:26:33:
4b:b0:95:93:99:09:29:38:ad:0c:0d:b5:6b:ba:af:1f:4c:62:
26:77:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:28:29 2025 by rpki-client