Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410ADD585CCB11F0ABE01EE9DAE4EC9C.roa
File: 410ADD585CCB11F0ABE01EE9DAE4EC9C.roa (raw, json)
Hash identifier: GI2EfNyHbxrZuYVJq6mbvQNtKeehjxFl4P9nNLcT0hU=
Subject key identifier: DD:0B:6C:E9:77:0E:A1:6E:D2:47:2F:05:42:BC:1B:EB:14:32:90:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410ADD585CCB11F0ABE01EE9DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 13:47:29 +0000
ROA not before: Wed 09 Jul 2025 13:47:24 +0000
ROA not after: Thu 21 Aug 2025 13:47:24 +0000
asID: 42689
IP address blocks: 156.233.152.0/21 maxlen: 24
156.233.160.0/20 maxlen: 24
156.241.48.0/21 maxlen: 24
156.241.56.0/22 maxlen: 24
156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91128 (0x163f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 13:47:24 2025 GMT
Not After : Aug 21 13:47:24 2025 GMT
Subject: CN=686e72f1-3c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:ab:ec:b0:88:e3:88:61:86:88:77:d7:91:
e6:50:8b:0c:86:d3:32:9a:9d:57:ec:78:c7:df:23:
70:dc:d3:b2:2f:2c:25:26:29:43:61:48:e2:03:bb:
ab:48:5d:41:85:a1:3c:d5:65:51:15:49:ae:25:12:
10:19:c2:f8:ea:b9:5c:80:87:b0:65:82:52:60:89:
16:9c:f1:f6:9c:9a:9d:d4:d0:c7:80:4b:7d:53:fe:
70:24:1c:23:b6:3c:43:ca:52:82:65:7f:fa:05:50:
f0:ce:15:3e:f4:07:5d:24:4a:21:45:70:12:39:2b:
02:56:cd:e7:af:16:90:fb:92:4c:2e:8f:70:19:98:
31:cf:59:a8:51:29:14:85:1d:fb:21:53:1c:59:25:
b6:6f:6d:d9:13:32:df:49:52:c5:57:df:fe:ed:d1:
80:92:0d:74:9a:cd:25:fb:3e:3d:77:4b:07:f2:36:
e8:a6:0d:d9:01:7a:73:f3:43:74:7f:72:55:96:8e:
46:a3:9d:6a:8b:25:d0:a7:ee:95:6d:bf:6b:e9:91:
1e:ca:fb:4f:0e:ee:34:55:b4:2f:45:c7:4d:e4:16:
42:cf:a4:48:67:c7:e1:27:b9:79:6e:81:53:cb:8c:
d6:fa:b8:50:69:1e:4f:12:6a:3d:f5:30:a7:4e:b4:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:6C:E9:77:0E:A1:6E:D2:47:2F:05:42:BC:1B:EB:14:32:90:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410ADD585CCB11F0ABE01EE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.152.0-156.233.175.255
156.241.48.0-156.241.59.255
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
09:35:31:91:0d:35:7e:15:24:50:f4:ad:ed:e8:11:64:74:f0:
16:2c:26:bd:bf:cc:e4:c9:24:fc:36:51:18:a1:f2:50:d8:1e:
35:a7:45:06:6d:d9:8c:43:ec:85:f6:2f:98:8c:b9:7f:d2:a1:
7c:a0:ec:66:19:5b:e0:19:87:e9:e4:79:11:d2:9c:7e:9e:ac:
9d:68:41:26:2c:73:0e:db:d1:5a:19:96:15:3e:ef:40:71:be:
be:0b:37:71:42:8f:db:11:8a:b8:26:a3:eb:3d:93:e7:10:0c:
f7:a1:e8:ba:e1:32:36:6b:47:d8:99:7f:71:69:1c:e6:61:aa:
08:ca:13:27:33:e3:a6:84:88:83:0a:ea:13:c8:09:a8:1e:ca:
98:b9:af:13:74:5f:6b:d6:c1:9d:85:1e:05:8a:91:f9:1c:3d:
82:9e:7d:41:65:28:2d:9e:7d:e7:10:5d:1f:0e:41:7e:58:87:
34:42:30:12:99:f4:50:65:4c:75:c5:d7:66:3e:b0:e4:7a:ce:
53:55:17:e3:fa:a6:49:09:68:e3:ac:20:e6:b7:ad:31:b7:da:
a5:74:a4:62:7c:8f:7b:e8:0c:9a:29:8d:be:ee:c0:ef:db:94:
a2:5d:53:0d:31:83:0d:f7:02:95:84:ff:0a:12:dd:d4:a6:66:
ce:88:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:43 2025 by rpki-client