Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56B8CDC25CFD11F0849EDCAADAE4EC9C.roa
File: 56B8CDC25CFD11F0849EDCAADAE4EC9C.roa (raw, json)
Hash identifier: wmWSB8TRvHfLSYlrUl0Koii7M34kIzKtUkfOmGhfXF8=
Subject key identifier: A4:80:BC:78:3D:43:03:92:B5:1D:FE:EF:B4:50:91:FC:0B:6F:CA:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016440
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56B8CDC25CFD11F0849EDCAADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 19:46:00 +0000
ROA not before: Wed 09 Jul 2025 19:45:55 +0000
ROA not after: Sat 23 Aug 2025 19:45:55 +0000
asID: 21859
IP address blocks: 156.229.0.0/24 maxlen: 24
156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91200 (0x16440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 19:45:55 2025 GMT
Not After : Aug 23 19:45:55 2025 GMT
Subject: CN=686ec6f8-7928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:76:db:81:9e:8b:5f:7b:55:d4:61:b6:d8:
a3:13:76:60:11:71:66:82:83:d7:ed:2a:bf:e7:84:
00:88:83:dc:a0:34:70:2b:5e:7a:9b:6d:36:29:14:
2e:36:c2:7b:d3:38:2d:dc:b4:c4:b8:45:26:55:21:
c1:72:f0:18:a7:77:8f:f0:61:f8:c1:a2:eb:79:6d:
23:85:f1:32:0c:22:13:a3:69:8f:45:f7:fe:6d:02:
54:4c:6c:af:23:e5:fb:57:0e:73:f2:24:c0:80:7e:
8d:b5:b8:51:c5:7a:96:43:23:2e:2f:63:1d:21:93:
42:da:12:6c:e8:f0:41:02:e2:77:9e:0b:3d:08:e0:
d5:27:ba:2a:7d:67:3f:8f:29:5e:bd:f8:b4:c5:1c:
b3:10:9b:be:e7:9b:04:84:e7:f3:6e:6a:1b:89:34:
9b:7d:b0:dd:8c:50:26:c5:02:84:4d:a1:4c:d3:e8:
79:a2:b5:1d:60:ab:c2:db:40:bf:bf:db:b4:0e:10:
15:27:5d:bd:41:e4:25:dd:25:ad:af:37:5f:91:29:
84:82:7d:4d:f1:bb:25:c5:e2:aa:73:d6:49:a7:68:
10:95:9e:ec:16:85:1b:a0:c6:1b:24:3c:fb:02:f6:
ba:27:30:86:cf:18:b3:44:0e:c7:ef:18:51:83:ee:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:BC:78:3D:43:03:92:B5:1D:FE:EF:B4:50:91:FC:0B:6F:CA:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56B8CDC25CFD11F0849EDCAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:40:8f:c7:c8:c6:51:47:29:5d:73:c5:f0:8d:5d:88:bb:
52:f7:d0:88:20:1a:95:d0:37:af:9a:95:63:36:6c:8d:df:ab:
05:66:28:a9:a6:5d:ba:82:d9:da:4d:52:82:a0:43:83:71:8f:
7d:a9:cf:2b:f9:a5:8b:9e:00:18:dc:a5:35:38:e8:ef:35:9a:
a3:93:03:6b:18:35:93:85:38:02:fd:71:06:31:d4:93:4e:bc:
f6:ab:f7:22:91:0d:04:19:13:f5:1b:32:35:8b:14:4a:0a:4c:
c1:da:8d:85:1e:8c:40:88:b4:cd:75:a0:a4:0f:c8:2f:6a:70:
1c:63:7c:fe:15:e3:d9:4b:75:e1:22:6c:99:1e:29:c6:c2:c6:
9b:40:45:3a:ee:77:cb:64:7e:19:a0:9f:ff:dd:2b:d7:48:ea:
a0:b7:a2:9c:c3:38:13:87:92:1a:a6:bc:e3:a5:bc:6a:b4:f7:
fa:a9:32:03:a7:c0:97:17:1e:e6:06:54:dc:4d:8c:85:7a:ea:
7d:84:18:c7:21:09:20:4d:92:05:89:ff:35:e3:38:1a:49:13:
de:88:f9:3e:4b:3d:ed:c0:d7:d0:7a:f9:95:c8:e2:79:a8:dd:
82:bc:a4:dc:45:57:ae:56:98:72:e3:b3:bf:1b:50:0f:3e:9e:
c5:74:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:44 2025 by rpki-client