Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B25844617311F090018E8EDAE4EC9C.roa
File: 62B25844617311F090018E8EDAE4EC9C.roa (raw, json)
Hash identifier: l/qaRAPenyJYr/9dWM9PkQL0Hxc5aH8Boq7N1+W53Cs=
Subject key identifier: 5F:9E:57:AE:81:59:E8:3C:7E:EA:3D:43:D2:CF:F2:6A:DF:C8:9E:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016541
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B25844617311F090018E8EDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:01:06 +0000
ROA not before: Tue 15 Jul 2025 12:01:01 +0000
ROA not after: Sat 16 Aug 2025 12:01:01 +0000
asID: 22773
IP address blocks: 156.229.52.0/23 maxlen: 24
156.229.55.0/24 maxlen: 24
156.229.61.0/24 maxlen: 24
156.229.63.0/24 maxlen: 24
156.239.141.0/24 maxlen: 24
156.242.231.0/24 maxlen: 24
156.242.232.0/24 maxlen: 24
156.242.233.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.48.0/20 maxlen: 24
156.243.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91457 (0x16541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 12:01:01 2025 GMT
Not After : Aug 16 12:01:01 2025 GMT
Subject: CN=68764302-7d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:df:43:3e:34:c3:36:00:77:c4:d5:2d:43:
d7:0f:90:fd:9e:37:ee:fb:a1:c1:dc:df:17:2f:5f:
a0:d0:bf:a5:47:27:33:f8:d3:d3:02:5a:b8:53:5c:
33:b2:09:8a:88:1d:77:8e:23:df:4b:07:14:8e:f9:
9e:4a:11:16:64:ad:46:ea:1f:96:7a:eb:49:2e:2c:
b7:28:8a:d1:4c:13:9b:95:4e:0d:36:c2:1e:f5:e2:
7b:04:da:55:02:06:83:e0:25:4f:03:eb:ea:da:e9:
6d:e9:05:f1:be:f6:0b:c9:87:a2:be:68:a9:3a:69:
ed:ea:c5:87:27:d5:6f:e9:ae:b1:2d:d5:3f:f5:f5:
0e:63:44:a2:5f:e2:c2:9a:61:9b:f0:83:71:de:fd:
4f:24:35:05:93:66:2a:c9:7c:f6:2e:f3:71:13:2e:
83:0b:60:58:ab:2e:4a:5a:74:8e:15:98:84:20:9f:
9d:7a:46:6e:72:a8:a1:59:e0:f3:9c:e3:f2:20:f8:
4e:6f:23:a0:10:89:60:c2:62:4d:28:f3:33:84:1f:
1b:4c:0f:0d:b7:b2:f2:d3:2d:2f:17:80:a8:1b:19:
b0:4c:11:25:af:81:51:24:5d:3e:65:8e:4e:eb:fd:
07:19:e6:7d:17:ce:6f:ae:6b:c2:03:26:7e:7a:ba:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:57:AE:81:59:E8:3C:7E:EA:3D:43:D2:CF:F2:6A:DF:C8:9E:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B25844617311F090018E8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
156.229.55.0/24
156.229.61.0/24
156.229.63.0/24
156.239.141.0/24
156.242.231.0-156.242.240.255
156.243.48.0-156.243.79.255
Signature Algorithm: sha256WithRSAEncryption
66:f6:e9:e7:c5:57:2a:9c:f7:ee:d3:05:1f:e5:0a:92:b6:1e:
13:20:09:1e:65:68:90:ac:68:61:65:1c:95:64:60:30:36:10:
57:c6:97:59:f8:c1:8e:e3:d6:a5:3c:c1:b2:c3:30:b5:08:28:
85:5f:27:f9:41:db:d7:bb:ec:1b:90:a4:60:33:74:a9:f8:88:
b9:91:7b:c2:e5:1a:f6:89:57:15:80:a4:36:8c:c2:29:a3:c6:
d1:da:7b:5f:2b:52:05:17:8e:bb:ee:be:93:89:de:aa:04:6d:
a6:48:f9:56:de:9c:75:15:e8:bf:52:1b:9a:a6:29:eb:a7:c7:
9e:ab:01:a7:ce:b5:14:70:cc:f5:b4:e9:35:f8:9a:68:68:aa:
a6:8a:41:cd:16:b2:9f:21:f9:5a:5b:f0:1e:87:8d:03:d1:56:
7b:85:2f:6e:77:5f:83:81:b6:d3:9d:4d:ea:df:01:6c:53:6d:
b4:2e:76:5d:bf:97:24:e0:ed:e9:28:97:95:54:49:44:fa:e4:
69:b7:c9:c0:f1:df:52:f3:5f:48:f8:73:1c:a6:55:53:8b:b4:
62:a8:d4:e5:2f:18:ba:b5:e7:e1:25:f3:33:e7:3e:03:95:eb:
f3:42:56:40:69:0d:43:3a:0f:ba:d4:27:ea:6e:a7:a3:c8:3c:
f2:3d:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:21 2025 by rpki-client