
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583FE87058CE11F0AF2DE3EEDAE4EC9C.roa
File: 583FE87058CE11F0AF2DE3EEDAE4EC9C.roa (raw, json)
Hash identifier: zLAMoWTtRlgx67//kkpbhpg339NQYBBOl4AvjrA1otI=
Subject key identifier: 2B:2B:0A:73:81:5E:3F:86:05:1A:03:33:FA:96:99:61:13:B0:69:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583FE87058CE11F0AF2DE3EEDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:59:33 +0000
ROA not before: Fri 04 Jul 2025 11:59:25 +0000
ROA not after: Thu 21 Aug 2025 11:59:25 +0000
asID: 42689
IP address blocks: 156.233.152.0/21 maxlen: 24
156.233.160.0/20 maxlen: 24
156.241.48.0/21 maxlen: 24
156.241.56.0/22 maxlen: 24
156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90366 (0x160fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:59:25 2025 GMT
Not After : Aug 21 11:59:25 2025 GMT
Subject: CN=6867c225-96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:63:65:10:78:f5:4f:92:ae:80:19:06:38:
1c:d3:0c:1e:d0:a0:83:3c:24:67:1e:a6:c2:07:7c:
a7:e7:1d:6d:87:2f:e6:02:8a:ef:4b:5d:18:6d:7a:
03:2f:ec:13:f0:d5:70:bb:28:47:87:e7:4c:6d:23:
22:77:0d:7c:f9:0b:df:ea:0c:f1:b9:d5:47:92:ec:
0a:45:82:50:8f:77:1e:dd:81:fc:0c:b8:9e:af:df:
a0:54:05:f3:b4:2b:5a:10:5a:fe:e7:ad:e1:28:7b:
62:e8:f2:59:c5:d7:8c:03:50:2e:2b:1a:67:1b:d4:
d2:c9:e3:d3:1f:28:f9:22:0e:71:a0:88:14:2b:c6:
d3:03:78:0d:e6:20:fa:c3:47:be:ca:78:33:b2:a5:
77:52:56:67:72:8e:f5:27:11:3d:9d:15:44:e6:e8:
27:6c:4f:8d:48:e9:69:2c:ff:17:15:04:89:bc:48:
10:d1:f6:a5:84:c2:dc:62:9b:41:1c:1a:e2:df:0f:
3f:05:37:7e:ff:82:a2:ad:7a:8a:fe:9e:6a:7a:d9:
29:65:30:f0:03:62:50:cc:72:19:1e:7e:70:a2:02:
2e:c1:3d:58:ca:08:bb:7c:2e:32:60:c2:d8:5e:f2:
77:dd:63:fd:32:48:df:37:01:15:2a:de:15:db:3d:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:0A:73:81:5E:3F:86:05:1A:03:33:FA:96:99:61:13:B0:69:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583FE87058CE11F0AF2DE3EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.152.0-156.233.175.255
156.241.48.0-156.241.59.255
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:cd:c1:2b:d3:7b:7a:6c:5a:79:15:7a:5a:44:71:4f:7b:bc:
26:8d:e1:96:b2:23:03:8d:14:b3:cb:19:b3:9d:66:9b:17:8c:
9f:18:a3:08:80:c7:8a:81:72:14:93:e2:94:5c:8b:20:62:86:
63:d1:97:a0:9f:b7:bd:6d:51:db:5b:a0:4b:43:05:a2:1e:ad:
1e:f2:10:e9:e7:6c:8c:e2:5f:7d:57:b8:df:dc:bc:b1:b4:61:
cc:c0:76:91:8b:58:24:75:28:bb:41:48:ae:29:8e:52:c1:ea:
10:2f:56:d7:2f:8f:9a:30:55:1b:af:19:b0:b0:ab:8d:62:50:
33:3e:8c:41:ac:17:94:66:95:18:96:0c:46:8a:15:1b:89:7f:
0c:2b:68:2e:aa:3a:9a:52:e6:23:df:ff:2d:dd:1b:83:cb:d5:
4a:b0:9e:61:6f:05:f5:09:26:ab:4d:2f:c2:2f:20:fe:4c:02:
fa:aa:46:10:7b:99:fb:ad:9d:51:3a:15:00:c7:f1:d7:fd:7c:
0a:83:3d:91:85:a2:53:44:4f:38:30:59:09:8a:65:27:62:03:
87:89:56:ad:9e:dc:6c:32:1a:72:ab:7d:05:0a:c1:99:c6:38:
ea:66:50:70:6f:a0:2f:95:97:48:01:d5:86:09:bc:cc:09:56:
57:dc:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:38 2025 by rpki-client