Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91E9DCA565E11F0B2FAD998DAE4EC9C.roa
File: B91E9DCA565E11F0B2FAD998DAE4EC9C.roa (raw, json)
Hash identifier: NtYxvU9qfROa89TrcSbWKWO4DyzEiTRwtrl8ikTdXNM=
Subject key identifier: 59:FA:2E:6A:54:F8:D2:4D:AC:AF:AC:64:14:81:7F:8F:F8:E6:75:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91E9DCA565E11F0B2FAD998DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 09:35:28 +0000
ROA not before: Tue 01 Jul 2025 09:35:23 +0000
ROA not after: Thu 07 Aug 2025 09:35:23 +0000
asID: 200373
IP address blocks: 156.228.117.0/24 maxlen: 24
156.228.118.0/24 maxlen: 24
156.228.119.0/24 maxlen: 24
156.228.124.0/24 maxlen: 24
156.228.125.0/24 maxlen: 24
156.228.171.0/24 maxlen: 24
156.228.174.0/24 maxlen: 24
156.228.175.0/24 maxlen: 24
156.228.176.0/24 maxlen: 24
156.228.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90046 (0x15fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 09:35:23 2025 GMT
Not After : Aug 7 09:35:23 2025 GMT
Subject: CN=6863abe0-6138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:62:60:16:39:4c:db:24:96:3c:b8:74:e2:
b2:a8:ed:10:d3:2e:d5:1a:ed:54:12:68:5a:89:8b:
1d:35:69:0e:94:23:a2:45:53:61:96:c3:73:87:af:
87:9a:68:f9:8c:fd:0e:34:5f:6a:34:ca:98:a6:eb:
47:5b:d9:c2:43:40:40:9d:16:17:61:65:f9:cb:78:
0e:9e:0c:3e:5e:74:bb:85:13:06:e1:d9:51:b5:3f:
ce:a6:c2:33:ab:fd:c1:e5:9b:99:89:08:10:fd:d4:
c9:0a:c5:03:e4:ea:22:2a:e3:39:42:7f:ce:05:d5:
c1:d5:3e:f7:d5:e0:a7:b2:cd:46:a7:df:73:ce:24:
74:a9:3a:26:8b:4f:77:fe:29:e5:88:97:4d:18:84:
0f:75:b6:2b:2e:13:45:ef:ea:70:ea:35:7c:66:1c:
f2:06:b5:1e:fa:43:75:0e:dc:92:4b:56:8b:fe:1d:
8c:72:3b:8f:27:ba:56:ef:dd:8b:67:b6:c2:bb:48:
03:ca:63:0a:4c:9f:c8:68:d3:62:1e:6d:a9:32:32:
46:75:b2:01:b3:83:50:c1:b1:42:2e:04:d1:fc:2b:
05:09:5a:0a:46:3f:15:88:b8:60:e3:73:d9:27:3f:
46:6e:ca:f3:7e:45:74:2f:af:92:89:0f:55:03:ba:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:2E:6A:54:F8:D2:4D:AC:AF:AC:64:14:81:7F:8F:F8:E6:75:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91E9DCA565E11F0B2FAD998DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.117.0-156.228.119.255
156.228.124.0/23
156.228.171.0/24
156.228.174.0-156.228.177.255
Signature Algorithm: sha256WithRSAEncryption
90:9a:5b:b7:8d:da:f8:75:79:12:08:b2:0e:22:9a:8a:2e:79:
83:90:57:8b:c6:cd:50:76:c2:15:ab:4b:a1:dc:4c:3b:f5:bc:
fe:df:74:ad:a3:8b:e1:e7:8b:22:c9:8c:29:26:7b:ee:55:42:
9b:d9:5d:81:3f:1b:91:3a:34:46:38:86:3e:9e:cb:e9:e1:f4:
35:59:bf:9c:52:29:89:44:1a:cf:52:41:3a:a4:56:5e:23:32:
c3:17:c9:1f:d7:ef:d3:e5:50:7e:b9:1b:30:0b:09:e4:c9:e7:
87:a8:b9:70:3b:39:1e:84:18:63:35:64:f5:be:7e:c1:08:90:
0e:86:3a:1d:df:20:90:60:bc:da:be:f3:53:d9:ff:75:4e:51:
85:f8:12:10:26:07:50:ec:6f:1e:b6:fc:57:b0:87:4f:20:f2:
0e:8f:6e:5c:d1:8a:60:1f:33:9d:1b:76:19:21:bd:c5:10:64:
80:ee:83:97:49:27:08:c5:6e:07:19:80:0c:e8:05:7d:43:56:
f8:42:83:1c:cd:c9:d6:9f:15:76:eb:89:64:07:d8:88:10:b1:
63:7a:8b:c8:79:4c:87:6d:24:ce:f4:b7:9f:5b:41:82:8c:77:
11:ce:b3:28:24:93:ef:bf:ca:92:30:9d:8b:91:ba:db:b7:8f:
de:f5:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:13 2025 by rpki-client