Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506E54F4580311F0A63162C5DAE4EC9C.roa
File: 506E54F4580311F0A63162C5DAE4EC9C.roa (raw, json)
Hash identifier: NJHwH+AqTaW5Bb/MVczYuZmWY42f9z6A3iZMQxk8bnU=
Subject key identifier: 92:36:A1:60:DE:B6:FA:FE:27:11:6B:63:FB:7B:BB:A6:8D:E0:60:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016060
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506E54F4580311F0A63162C5DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 11:46:11 +0000
ROA not before: Thu 03 Jul 2025 11:46:06 +0000
ROA not after: Thu 07 Aug 2025 11:46:06 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90208 (0x16060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 11:46:06 2025 GMT
Not After : Aug 7 11:46:06 2025 GMT
Subject: CN=68666d83-8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:ff:65:a1:8d:e2:f4:51:34:1e:5d:13:50:
bc:0b:33:08:b9:76:7c:8c:d0:76:46:e5:e8:e9:49:
6e:83:76:bc:0d:4c:ac:a9:b4:8b:c6:5d:82:e6:83:
2e:56:90:b8:24:80:41:ad:ab:1d:99:60:99:be:c8:
0f:e7:0a:c2:4a:6b:db:57:61:3d:84:81:51:86:ed:
fe:f2:23:6f:0c:f2:60:dc:21:f0:4a:b0:45:71:b7:
11:fb:ab:a4:19:40:a7:e1:28:23:df:32:6a:16:e7:
86:69:6c:29:77:fd:18:00:e5:ef:3b:77:c2:e0:60:
4e:07:21:1b:c8:7e:a9:ba:58:00:3e:69:92:49:d8:
c1:89:16:3a:d9:61:dc:f0:21:94:80:4f:08:56:49:
b0:ee:b5:ff:7f:b1:4e:3a:91:fe:b0:95:48:10:ec:
60:fd:c6:7e:20:49:d1:e3:f1:17:a3:21:8e:f0:e1:
0c:58:44:b3:42:84:12:7a:7a:00:92:ad:de:6f:ea:
d0:a9:e1:c5:d3:b4:7f:41:97:45:87:39:e7:bf:95:
31:83:86:cc:99:36:96:a9:bd:ef:6a:c9:32:52:53:
13:0b:fb:d7:65:76:a7:31:75:8b:28:e0:84:4e:ef:
f1:eb:99:4c:b7:dc:39:98:3f:a8:3e:6e:3b:e9:6e:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:A1:60:DE:B6:FA:FE:27:11:6B:63:FB:7B:BB:A6:8D:E0:60:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506E54F4580311F0A63162C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.249.137.0-156.249.138.255
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
45:7c:7e:bc:92:0a:93:bf:ce:d4:7c:6c:47:e0:86:5e:65:b5:
63:df:65:1b:c0:84:94:5f:50:a3:dc:95:a5:9d:d5:24:22:37:
61:60:ba:e8:55:8e:a6:c2:b1:06:8d:56:c3:ed:9a:54:23:c8:
d1:75:0d:2e:9d:e0:59:84:4d:db:f1:84:c2:28:e2:29:ae:e6:
67:83:36:ea:81:5d:90:09:e1:ed:51:d6:ae:41:f6:32:f3:1b:
b4:16:2d:36:ec:78:52:b6:50:40:50:e2:e7:2f:c9:8d:85:3e:
80:b3:e9:21:76:5d:af:90:76:43:b9:c2:35:f5:15:37:6a:61:
0e:15:2f:86:ca:b5:f3:df:ef:22:47:ce:ef:6f:58:df:61:57:
2f:68:5c:bf:4f:f6:06:dc:e0:09:4e:2d:f1:d9:35:41:9a:2e:
a6:ad:88:d9:cf:79:88:48:9a:8c:4b:60:65:20:bb:b3:c9:18:
dc:e9:03:d7:78:e2:e8:89:0f:3d:04:2c:d1:58:89:5e:8e:bb:
73:23:21:9f:af:a5:f5:ef:be:a1:ab:f1:c0:a4:a8:41:75:27:
62:ab:f7:66:af:5c:6b:92:c1:ea:c5:ac:0c:c3:42:5f:40:5a:
fa:3c:52:bb:7c:bf:a7:b6:e2:10:06:0f:44:6d:53:17:9f:8b:
56:b8:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:45:59 2025 by rpki-client