Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/142610CE412711F09EE1327CDAE4EC9C.roa
File: 142610CE412711F09EE1327CDAE4EC9C.roa (raw, json)
Hash identifier: BtFdHsje5RnJXKpWMwSL4o4V/SgldDZA8PGGa2KtaxA=
Subject key identifier: 89:D4:C2:68:71:E6:1C:5A:AB:A7:27:81:88:D1:53:B9:96:E3:5E:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01599B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/142610CE412711F09EE1327CDAE4EC9C.roa
Signing time: Wed 04 Jun 2025 09:34:15 +0000
ROA not before: Wed 04 Jun 2025 09:34:09 +0000
ROA not after: Tue 08 Jul 2025 09:34:09 +0000
asID: 200373
IP address blocks: 156.228.97.0/24 maxlen: 24
156.228.98.0/24 maxlen: 24
156.228.99.0/24 maxlen: 24
156.228.100.0/24 maxlen: 24
156.228.101.0/24 maxlen: 24
156.228.102.0/24 maxlen: 24
156.228.103.0/24 maxlen: 24
156.228.104.0/24 maxlen: 24
156.228.105.0/24 maxlen: 24
156.228.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88475 (0x1599b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 09:34:09 2025 GMT
Not After : Jul 8 09:34:09 2025 GMT
Subject: CN=68401317-0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:ea:07:68:94:e3:49:c7:60:e0:41:89:78:
a0:d8:36:ba:ca:a2:ac:55:5c:18:18:00:c4:f0:d0:
20:12:43:65:9a:a2:b2:e4:3f:a2:db:a5:d2:9a:db:
eb:04:5f:5b:23:12:98:f6:43:c2:1d:ac:19:3e:59:
fa:86:31:83:da:07:9b:53:5f:a8:5a:c8:57:da:ed:
9f:73:47:15:e4:4e:f2:db:0f:2d:39:8c:2f:97:63:
c7:ec:e6:e7:fb:c1:3d:e3:fd:ea:47:f7:09:e9:fe:
26:12:d1:85:43:74:2e:3f:b0:04:f0:eb:90:9f:57:
98:86:8a:17:25:d6:0d:fb:fd:c4:8c:be:e2:89:9d:
27:c7:be:26:c7:98:c5:8c:f6:8d:aa:61:53:4f:99:
ec:1f:29:67:0b:e3:70:5c:13:91:9e:c2:a4:fd:bc:
d8:84:a5:a5:e1:db:c2:a6:51:29:a0:01:1b:02:cd:
9f:6c:61:8b:68:68:9e:e5:ea:97:5d:e7:b5:e3:68:
24:e2:2d:94:6b:32:b9:6b:fa:c4:86:5c:e4:b9:f7:
e3:6d:5d:93:47:21:08:88:d0:37:56:c6:a6:63:2e:
76:4a:af:51:12:50:61:fe:8a:1d:a4:ff:f0:8f:3f:
e9:15:7c:6e:d9:ae:fd:23:f7:3b:19:7b:ea:60:e8:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D4:C2:68:71:E6:1C:5A:AB:A7:27:81:88:D1:53:B9:96:E3:5E:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/142610CE412711F09EE1327CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.97.0-156.228.106.255
Signature Algorithm: sha256WithRSAEncryption
5b:47:f2:a1:ed:19:1d:ab:ed:a7:7a:6e:4e:bc:9d:2f:ad:68:
a8:ce:a1:f3:21:71:d8:2d:29:bb:45:b7:7e:9b:97:e1:62:e5:
b8:19:97:cc:c0:ab:5d:fd:11:e9:a8:17:91:0c:1e:2f:59:87:
d7:f9:55:3a:df:d5:80:5d:de:39:89:31:9b:28:bf:3f:db:de:
76:95:f7:fd:7f:fb:4f:bb:c5:e6:86:a6:f3:d1:79:e8:1b:58:
ec:96:63:52:84:bd:d2:90:0b:10:ed:e1:53:ad:c7:b1:5c:50:
76:17:68:3d:30:aa:6d:0f:fb:cb:5d:fa:db:0f:f4:8a:4f:71:
10:cb:14:0d:49:f3:36:f8:7e:15:56:81:45:c3:89:f0:2c:57:
35:d6:b4:5e:97:0e:45:e8:97:99:6b:ac:b9:f7:ac:61:c2:c7:
13:56:a2:39:e5:77:4c:62:56:da:a6:94:19:9a:e9:9f:2c:03:
e6:fd:c2:86:4d:e6:17:74:4e:cc:32:e2:fa:b3:f4:ff:de:fb:
ce:32:e1:8f:0e:ee:77:4d:a8:c9:73:6e:10:a8:0d:61:95:6f:
d2:47:b7:cc:c6:9e:8c:9a:41:33:9b:bf:f9:26:e7:2b:cb:5f:
65:3e:39:81:fa:40:0a:6b:80:3a:a5:ae:c3:6d:0a:0e:53:ae:
e2:f9:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:16:18 2025 by rpki-client