Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F51110617911F0B0A36FB5DAE4EC9C.roa
File: 58F51110617911F0B0A36FB5DAE4EC9C.roa (raw, json)
Hash identifier: KmZPDmf4DRZJ6yOgQKsCm5eyOiaiNqWY4+QQ15cQWBc=
Subject key identifier: 5A:56:85:35:CA:2E:38:C1:22:DB:86:74:A7:F4:63:04:FF:C0:F4:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F51110617911F0B0A36FB5DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:43:47 +0000
ROA not before: Tue 15 Jul 2025 12:43:41 +0000
ROA not after: Wed 20 Aug 2025 12:43:41 +0000
asID: 214413
IP address blocks: 156.226.131.0/24 maxlen: 24
156.226.132.0/24 maxlen: 24
156.226.218.0/23 maxlen: 24
156.226.243.0/24 maxlen: 24
156.226.244.0/24 maxlen: 24
156.243.113.0/24 maxlen: 24
156.243.114.0/24 maxlen: 24
156.252.30.0/23 maxlen: 24
156.255.59.0/24 maxlen: 24
156.255.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91473 (0x16551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 12:43:41 2025 GMT
Not After : Aug 20 12:43:41 2025 GMT
Subject: CN=68764d03-c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:b0:53:38:bb:fc:69:22:6c:f4:21:98:bd:
52:1d:35:e0:a1:ac:63:01:28:66:93:83:88:1c:30:
89:db:d7:8c:55:6f:6e:0f:4b:4f:de:48:21:b8:3c:
60:04:de:f3:61:16:07:05:c5:21:45:4c:97:1d:c1:
51:10:15:97:6a:92:19:63:da:13:01:76:b9:de:ab:
56:c2:6a:8f:1e:5d:a2:87:b8:7b:2f:a3:0d:66:e5:
9e:3d:07:b1:cd:40:15:4d:9d:bd:a6:3a:d1:f1:b8:
68:54:95:af:4f:49:5a:a5:d8:b0:39:74:84:b4:b4:
84:1c:0c:6a:28:82:8d:b7:ce:01:07:4a:e6:8f:e8:
b0:d5:25:14:ef:fa:61:6e:60:ce:d0:78:12:c9:21:
af:90:f6:fa:f5:7e:4e:22:29:da:e7:0f:2f:20:4f:
31:3c:0f:3a:62:5e:5a:08:6f:f7:12:fc:93:4c:04:
07:62:a5:f4:f0:25:fe:75:69:2c:28:e5:23:b0:b0:
ce:8f:1c:6c:ce:95:0c:10:31:9f:77:62:38:6b:c5:
3a:d4:af:f2:40:26:6e:29:25:52:fb:c9:bf:01:5a:
24:40:ac:d9:49:9d:8f:8a:22:a8:b8:25:62:db:f0:
ba:a6:19:5c:c5:11:19:32:2b:18:00:cd:42:a5:b1:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:85:35:CA:2E:38:C1:22:DB:86:74:A7:F4:63:04:FF:C0:F4:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F51110617911F0B0A36FB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.131.0-156.226.132.255
156.226.218.0/23
156.226.243.0-156.226.244.255
156.243.113.0-156.243.114.255
156.252.30.0/23
156.255.59.0-156.255.60.255
Signature Algorithm: sha256WithRSAEncryption
b6:40:20:09:4f:9a:ac:23:ef:92:f3:fc:c8:a8:5d:be:60:a7:
13:d2:d5:fe:79:a6:3d:70:95:5e:c0:e3:03:e6:63:b4:d4:fe:
c1:24:ac:f0:48:e7:5e:36:1a:e3:9a:41:b2:c5:b8:cc:41:71:
01:1a:40:75:79:77:47:fe:94:af:36:69:54:bc:56:a5:d6:23:
a6:33:07:2b:ad:83:08:e7:7d:e7:1b:0e:ae:08:49:0f:35:de:
61:0e:16:ec:52:48:78:c0:8e:c1:5d:49:6a:9a:cd:e1:1d:4a:
a0:1f:cf:2c:fe:54:25:12:67:64:30:14:3b:dd:49:fe:da:52:
8a:45:87:9c:04:48:40:e7:1e:46:32:2a:48:d0:61:a0:b1:93:
53:68:25:fa:4b:8f:d9:b3:69:38:39:38:bb:76:1a:c4:74:82:
e8:b2:66:76:dc:2f:2e:a1:70:c3:3a:5a:ab:fc:df:66:5a:77:
33:73:36:ee:33:86:b8:da:fa:14:38:85:91:c7:76:61:fc:f2:
c1:17:b2:5e:18:57:b0:1d:df:1b:e5:6b:ae:54:ea:ef:91:1d:
c5:c7:13:92:99:d5:e6:b0:fa:81:5d:22:dc:22:bf:03:4f:a5:
66:af:ad:c0:50:e8:1b:83:7c:64:7f:ab:cc:07:1d:07:ba:77:
4e:c6:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:43 2025 by rpki-client