Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3F6156566311F0A3179FB7DAE4EC9C.roa
File: FD3F6156566311F0A3179FB7DAE4EC9C.roa (raw, json)
Hash identifier: LU91HEe52L7hNumlF80INsULgtxC8jdDIdZDQC9wgCM=
Subject key identifier: F2:1D:13:F2:B2:CB:98:C2:71:D0:E2:F2:8F:2B:CC:9F:6A:9D:B8:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3F6156566311F0A3179FB7DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 10:13:11 +0000
ROA not before: Tue 01 Jul 2025 10:13:03 +0000
ROA not after: Thu 07 Aug 2025 10:13:03 +0000
asID: 200373
IP address blocks: 156.228.0.0/24 maxlen: 24
156.228.76.0/24 maxlen: 24
156.228.77.0/24 maxlen: 24
156.228.78.0/24 maxlen: 24
156.228.79.0/24 maxlen: 24
156.228.80.0/24 maxlen: 24
156.228.81.0/24 maxlen: 24
156.228.82.0/24 maxlen: 24
156.228.83.0/24 maxlen: 24
156.228.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90050 (0x15fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 10:13:03 2025 GMT
Not After : Aug 7 10:13:03 2025 GMT
Subject: CN=6863b4b7-51d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:ae:f0:05:6b:4d:ff:21:62:ef:9b:ad:e0:
81:41:31:78:c8:4e:cf:e0:0d:4b:a0:3f:e9:d7:82:
3b:bf:76:23:fd:23:4b:6c:9f:70:10:66:a4:90:1d:
42:2a:bc:06:b2:ac:45:a6:97:cd:9e:c4:44:25:9f:
60:51:7e:0e:f9:92:ee:4b:b2:5b:ed:2f:09:ac:12:
ed:a3:39:a0:18:13:33:41:19:fb:19:8e:81:e8:98:
53:0e:b3:a5:72:e0:d7:60:5f:f2:72:37:0d:29:68:
6e:7c:e7:6f:93:c4:f1:17:ee:5d:9c:b1:77:cd:6f:
bf:2d:62:8a:28:59:76:4d:cc:b8:ff:c4:f7:8e:14:
d4:61:e9:56:34:68:18:53:29:b2:94:48:bf:68:0e:
ec:b3:5e:35:73:02:13:2c:c3:e2:bc:ed:94:58:9d:
03:12:3c:1b:9c:a1:f0:e8:6f:ee:fe:95:1a:9d:b9:
0e:fc:87:13:42:f8:18:bb:df:84:e0:71:b6:5b:56:
06:db:05:f8:21:58:ea:c2:76:75:6c:dc:47:22:43:
3a:cd:64:4a:e5:e6:c4:6b:7b:2d:6f:f9:51:b2:c8:
8a:42:1c:e4:97:c7:92:ca:4a:d2:a8:68:ce:8c:bd:
8f:b5:6f:b9:9e:a7:47:95:db:dd:64:67:f6:0d:f5:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1D:13:F2:B2:CB:98:C2:71:D0:E2:F2:8F:2B:CC:9F:6A:9D:B8:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3F6156566311F0A3179FB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.0.0/24
156.228.76.0-156.228.84.255
Signature Algorithm: sha256WithRSAEncryption
9f:fa:06:2f:9e:92:38:ca:05:f0:e0:16:e2:10:4e:8a:d0:89:
37:0c:94:4c:6b:d1:71:ee:05:e7:51:83:e6:eb:35:d6:24:c5:
20:9e:2e:b7:01:35:ca:86:bd:0f:ee:5b:2a:74:d0:ec:d6:ca:
fe:98:3a:48:3f:53:fa:5b:31:7e:f6:7a:bf:63:eb:e5:03:0d:
d0:53:80:ea:84:95:6b:31:af:1c:25:35:c7:82:0e:75:60:2c:
87:49:21:f8:f8:c1:c8:65:81:28:84:4b:7e:19:81:a1:6a:19:
2b:27:4c:7a:26:20:19:35:30:5f:7b:3a:6a:76:1a:bb:fd:76:
e6:37:a5:6b:dc:aa:ce:bc:3c:f0:52:8b:83:8a:a4:dc:b7:65:
52:df:cc:37:5d:10:bc:71:c9:7a:20:6c:6d:a9:53:5e:7e:c1:
58:72:5b:ed:e8:f1:52:b8:39:ba:bb:89:f3:b6:c9:a7:44:c5:
09:1f:c2:fa:39:6b:60:e1:f6:0f:73:fa:96:a9:dd:23:45:b3:
eb:62:6d:1d:40:06:e1:93:57:f3:d8:47:82:fa:08:f1:5a:ca:
4c:86:bd:e1:97:84:45:67:31:50:9c:10:a9:0d:dc:0e:87:62:
fb:3c:44:50:4e:64:4b:c7:83:da:95:a8:2c:9d:21:04:d6:11:
14:59:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:37 2025 by rpki-client