Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B8BB2566911F08C453BDCDAE4EC9C.roa
File: A00B8BB2566911F08C453BDCDAE4EC9C.roa (raw, json)
Hash identifier: l3wkpVxBbFl+ESpI+2OpujefV9ctFtAbl2KgUx04XDs=
Subject key identifier: AD:54:22:B4:78:C3:81:58:90:05:6F:AA:42:A4:F5:C6:9E:E5:65:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B8BB2566911F08C453BDCDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 10:53:31 +0000
ROA not before: Tue 01 Jul 2025 10:53:26 +0000
ROA not after: Sat 09 Aug 2025 10:53:26 +0000
asID: 200373
IP address blocks: 156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.240.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90060 (0x15fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 10:53:26 2025 GMT
Not After : Aug 9 10:53:26 2025 GMT
Subject: CN=6863be2b-3e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:54:4d:c1:55:d4:76:99:42:ab:86:97:b6:
22:6b:47:3f:d5:23:c8:9b:61:2f:bc:e9:49:28:c8:
96:2a:5d:a3:68:5e:1b:c1:f9:c1:8a:cc:31:43:43:
0e:3c:a1:f1:ed:26:06:f7:b7:66:eb:b6:79:08:11:
2e:7c:13:ab:65:28:2d:82:52:9b:2a:57:da:d9:2d:
8a:75:f9:d6:72:88:be:94:e4:76:fb:76:d7:83:56:
54:fb:c7:50:e7:71:c0:40:67:1d:f1:f7:1a:65:7d:
69:aa:ac:5b:64:2d:e4:a0:64:b2:bc:df:21:f0:c9:
27:b5:dd:2a:a7:ed:fc:5e:d5:fb:3e:75:b7:86:b3:
4c:42:fa:ad:92:fe:5b:b4:66:8d:8a:58:43:63:43:
b2:1c:03:ca:66:e7:78:19:86:8d:70:33:ab:4e:ed:
39:d4:3d:f4:d3:5b:70:5f:e3:bd:8f:97:10:80:83:
5f:7f:8a:cc:45:51:3a:d0:25:fe:19:36:8d:d8:bc:
e3:28:d8:e1:d6:3d:03:37:29:56:15:1e:e2:0e:37:
a9:97:71:98:3d:c3:f6:8d:5e:6c:6b:1c:4e:72:cb:
fa:71:b6:51:5e:7e:32:9a:ce:63:38:6e:f6:99:d9:
7f:cf:5d:2a:1f:63:0b:86:9a:b4:05:cf:1c:3c:c2:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:22:B4:78:C3:81:58:90:05:6F:AA:42:A4:F5:C6:9E:E5:65:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B8BB2566911F08C453BDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.90.0-156.233.95.255
156.239.156.0/23
156.239.192.0/19
156.240.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:13:47:b6:05:59:f4:b5:ca:49:dd:6d:2d:3b:2f:ac:35:22:
57:0f:7f:61:51:f0:6a:01:18:f2:0b:e3:c0:93:42:9b:dc:c0:
cb:c3:d7:2a:c9:78:e7:17:bd:12:0a:7f:10:1f:a0:7b:2d:3f:
59:42:5d:b2:b6:1b:6c:12:c1:36:41:be:8f:27:1e:06:71:bc:
00:fc:f5:b3:4d:9f:57:ba:c2:f4:42:c4:bd:98:06:81:9f:ea:
b7:e8:47:d3:72:e6:df:a8:a1:2c:b2:c9:da:71:ea:9e:63:8e:
96:f4:3a:ad:f8:ea:d1:fb:ea:07:52:a6:23:9f:4c:17:7d:6d:
52:a8:ad:87:cd:b2:1d:b2:61:e3:b1:6a:0b:a2:da:2e:c2:db:
af:39:79:c8:55:9b:74:9d:9f:5c:cd:c4:b6:da:cd:96:2e:04:
41:e1:49:55:63:ff:7a:5c:4c:7e:09:85:88:94:2e:a3:52:84:
5f:fd:33:83:07:e8:43:95:a8:65:52:23:69:75:1d:7f:83:cb:
8a:d0:ef:8c:0b:a0:d1:42:72:aa:4b:a2:c1:3c:4d:0e:50:90:
3a:69:c5:82:4d:fc:d2:56:12:de:49:f9:03:80:4f:a8:e4:ba:
49:8b:16:02:6d:94:6f:5b:cb:3f:78:79:eb:4c:cc:57:40:a9:
c8:ac:85:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:27:10 2025 by rpki-client