Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1019ECA572F11F0B803D3E7DAE4EC9C.roa
File: D1019ECA572F11F0B803D3E7DAE4EC9C.roa (raw, json)
Hash identifier: PJTjy0n5C37fbloE+VU8q+IRpc+o92OPI77ajbzhkc8=
Subject key identifier: E8:FD:F3:6C:FA:D1:98:01:57:9B:D7:60:9D:43:4E:06:02:0E:47:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01600A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1019ECA572F11F0B803D3E7DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 10:32:13 +0000
ROA not before: Wed 02 Jul 2025 10:32:08 +0000
ROA not after: Thu 07 Aug 2025 10:32:08 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90122 (0x1600a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:32:08 2025 GMT
Not After : Aug 7 10:32:08 2025 GMT
Subject: CN=68650aad-2610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:a7:6d:2b:f4:97:36:9f:20:0c:4a:d1:b5:
a8:7e:1c:38:49:03:82:db:8b:94:71:e6:8c:c0:87:
b4:72:26:e3:d5:51:f0:d1:b0:53:3b:39:dc:aa:cc:
f3:3f:0c:cd:4f:bf:2c:4c:22:e7:d7:53:4a:19:03:
13:36:2e:52:74:4b:78:80:aa:ee:f4:a1:84:70:0f:
11:25:96:8f:20:69:83:f4:3c:a7:7e:aa:c4:86:30:
47:5c:f8:b1:41:01:94:db:d1:7e:c5:36:26:59:e0:
19:44:63:5e:a2:d7:1d:30:d0:6c:4c:ce:b2:53:c2:
b4:ea:f6:8b:bb:37:b4:74:da:52:b1:9d:5b:1c:ca:
ed:c2:6e:2d:35:6d:a1:9b:41:25:d3:a5:8f:5b:83:
18:d9:c9:50:75:4e:ca:c0:0f:26:1a:08:c8:d4:ca:
f6:16:81:47:67:50:5f:38:8b:24:85:b2:24:36:aa:
74:1f:3d:6e:58:b5:63:a4:03:58:15:dc:0d:0a:4b:
55:40:06:a6:a7:66:53:74:93:23:a9:43:bf:95:ad:
c8:ec:bb:b2:3c:9c:11:6c:3e:70:4c:10:21:93:46:
de:e1:c2:21:5d:b8:63:b6:ee:4c:95:ba:9d:7a:80:
b4:96:92:a9:38:23:b6:ae:56:1b:3b:5a:ad:e5:33:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:F3:6C:FA:D1:98:01:57:9B:D7:60:9D:43:4E:06:02:0E:47:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1019ECA572F11F0B803D3E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.249.137.0-156.249.138.255
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
65:41:19:55:09:78:4b:b9:c4:d7:86:b0:3c:d3:36:23:51:75:
8e:76:41:55:bc:4b:07:3c:3b:db:de:ce:9c:1e:a7:36:80:eb:
f0:a5:c5:e3:64:05:88:28:9e:51:5f:3d:81:87:c0:06:e3:85:
bd:52:7e:3b:61:e1:81:ff:fb:49:d3:e5:38:38:26:30:d1:80:
89:cc:f4:53:bd:54:1c:d8:8c:4f:17:e0:25:7b:a9:51:b5:61:
b5:2c:65:45:dc:41:b5:9c:2c:31:7a:40:ec:04:42:47:0c:c8:
2c:b9:0c:dd:8f:5a:a2:68:dd:68:d5:63:33:de:fa:4d:01:86:
28:16:72:88:9b:cd:7e:7d:f7:3c:3b:77:1a:fc:c3:3e:0b:6c:
fd:9e:d2:ad:17:fa:a9:f6:6c:a8:62:18:f8:ba:64:cf:c5:e9:
aa:07:13:35:c1:4a:ec:99:26:e5:b8:6d:83:bf:7a:b4:52:b9:
43:9e:2a:5f:eb:7b:ee:54:71:5f:85:21:8b:b5:ac:48:e2:61:
e4:90:73:dd:20:47:c7:3c:0d:60:4c:7b:2a:77:b8:28:4d:1f:
89:5c:44:b3:7a:a5:30:28:64:f4:2d:02:18:b0:75:ad:7d:76:
97:9a:bc:14:5c:2c:37:71:c8:a1:ec:6f:42:a8:64:7d:d4:34:
99:92:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:34:01 2025 by rpki-client