Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313CC5445AFF11F0B18808BBDAE4EC9C.roa
File: 313CC5445AFF11F0B18808BBDAE4EC9C.roa (raw, json)
Hash identifier: qcPBEdmkEZ+zKOEeZoNL53m0Lrur2KBp0o5bYNXC+IQ=
Subject key identifier: 0A:EB:DD:8B:A4:F6:C2:E7:BF:99:EB:6D:D9:47:A1:4D:38:3F:0E:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313CC5445AFF11F0B18808BBDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 06:54:14 +0000
ROA not before: Mon 07 Jul 2025 06:54:05 +0000
ROA not after: Thu 21 Aug 2025 06:54:05 +0000
asID: 203020
IP address blocks: 156.233.12.0/22 maxlen: 24
156.233.36.0/22 maxlen: 24
156.233.76.0/22 maxlen: 24
156.233.112.0/22 maxlen: 24
156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.32.0/21 maxlen: 24
156.241.60.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.244.132.0/22 maxlen: 24
156.244.136.0/21 maxlen: 24
156.248.32.0/19 maxlen: 24
156.251.96.0/20 maxlen: 24
156.251.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90786 (0x162a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 06:54:05 2025 GMT
Not After : Aug 21 06:54:05 2025 GMT
Subject: CN=686b6f16-5b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:0c:a3:63:ee:92:3e:29:41:2f:5e:81:d5:
d4:d1:63:17:19:e7:70:cb:76:fd:6f:2c:ec:83:d8:
a1:d1:1c:7b:75:41:5a:cc:eb:5b:0e:8d:f1:48:e9:
c3:f6:2d:9e:ec:06:cf:a7:04:fd:23:fd:d8:e6:b4:
68:78:cb:29:ad:2a:d3:6f:40:eb:5e:70:cf:6a:b3:
97:e0:46:ce:d0:d0:03:da:70:8e:15:b9:3c:94:78:
8b:37:5b:bb:19:56:b8:ea:3f:63:20:95:78:08:f3:
fa:c2:0a:e7:fc:46:96:17:23:19:fe:8c:23:97:11:
f4:f0:49:3d:19:ba:65:58:dd:0b:f3:96:8d:83:6b:
1f:f6:a7:99:25:2a:d7:67:d8:e8:a0:15:35:c0:9a:
95:b0:ec:f5:69:63:d2:c8:35:d6:64:e7:20:9c:7c:
30:f8:7a:c0:9c:3c:e6:62:c9:e4:54:c2:dc:54:f1:
a0:55:f0:c7:6d:91:9c:73:81:05:54:e3:4d:80:e7:
af:15:cb:1f:0b:93:12:76:0d:a7:78:9e:53:fb:74:
4e:ce:f7:55:3f:66:dc:9f:64:cf:09:61:5f:27:62:
39:68:4f:f3:2a:a5:5b:70:e9:cc:a3:53:af:24:de:
90:f3:ee:bf:c4:20:33:f0:39:31:01:db:8b:34:68:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:DD:8B:A4:F6:C2:E7:BF:99:EB:6D:D9:47:A1:4D:38:3F:0E:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313CC5445AFF11F0B18808BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/22
156.233.36.0/22
156.233.76.0/22
156.233.112.0/22
156.233.180.0-156.233.192.255
156.241.16.0-156.241.39.255
156.241.60.0/22
156.243.140.0/22
156.244.132.0-156.244.143.255
156.248.32.0/19
156.251.96.0-156.251.119.255
Signature Algorithm: sha256WithRSAEncryption
24:69:7c:55:37:13:c9:5c:b6:e0:62:d9:ec:87:3e:54:db:c0:
52:1e:c8:72:ea:93:24:eb:49:0e:6f:5e:50:ea:cf:d2:8a:03:
d2:aa:81:b9:7d:03:71:93:83:8d:ed:48:a8:bc:1f:32:f5:f2:
13:e2:2e:16:38:70:dd:e7:29:19:34:81:94:7e:f2:0f:5c:cc:
41:aa:44:62:93:8a:02:9f:32:66:b2:ed:97:2c:b2:24:5c:1b:
58:15:f7:6f:71:4a:00:5b:fa:cc:d0:7e:f3:ec:4a:92:fc:ae:
87:cc:0d:ad:af:79:bc:89:0f:b8:32:c1:78:f7:ea:41:4d:ae:
21:a1:59:54:7d:03:d6:6d:7a:b3:50:37:c5:cd:99:0c:b2:a2:
1a:f0:ee:21:a5:1f:4c:d4:72:31:7a:00:d2:c1:68:b4:72:8c:
df:68:c6:81:4e:19:66:97:ea:ce:92:44:c8:cc:6d:6f:81:a2:
9a:76:63:f9:be:71:53:32:07:54:5a:23:05:c2:7d:58:fc:54:
26:68:34:9b:83:0f:bc:81:df:f0:8f:fd:d3:84:8b:71:71:15:
c9:24:de:80:17:81:6c:57:f8:d2:57:84:20:fd:d9:3e:63:02:
b4:85:90:d6:1c:e0:f4:d2:5c:98:7c:07:27:95:83:34:ef:32:
30:55:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:51:07 2025 by rpki-client