Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD8226A42CA11F0AD244D9FDAE4EC9C.roa
File: 3CD8226A42CA11F0AD244D9FDAE4EC9C.roa (raw, json)
Hash identifier: Nsqv8pRKqu5LNZUfOlTq8r7Ze68CUmr3ANEHE/iu0JU=
Subject key identifier: F6:FE:11:B0:AE:D6:07:E0:BA:F6:DB:35:9A:36:BB:98:04:B3:F5:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD8226A42CA11F0AD244D9FDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 11:34:42 +0000
ROA not before: Fri 06 Jun 2025 11:34:37 +0000
ROA not after: Sun 31 Aug 2025 11:34:37 +0000
asID: 399077
IP address blocks: 156.240.192.0/24 maxlen: 24
156.240.193.0/24 maxlen: 24
156.240.194.0/24 maxlen: 24
156.240.244.0/24 maxlen: 24
156.251.31.0/24 maxlen: 24
156.251.32.0/24 maxlen: 24
156.251.33.0/24 maxlen: 24
156.251.34.0/24 maxlen: 24
156.251.35.0/24 maxlen: 24
156.251.36.0/24 maxlen: 24
156.251.37.0/24 maxlen: 24
156.251.38.0/24 maxlen: 24
156.251.39.0/24 maxlen: 24
156.251.40.0/24 maxlen: 24
156.251.41.0/24 maxlen: 24
156.251.42.0/24 maxlen: 24
156.251.43.0/24 maxlen: 24
156.251.44.0/24 maxlen: 24
156.251.45.0/24 maxlen: 24
156.251.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88568 (0x159f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 11:34:37 2025 GMT
Not After : Aug 31 11:34:37 2025 GMT
Subject: CN=6842d252-d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:ab:e8:6e:be:98:73:41:12:24:bc:57:1e:
1a:88:6d:69:c5:11:48:bd:53:43:2b:ba:ed:93:59:
4a:8a:b0:1b:92:4c:6e:41:d0:29:29:84:58:04:d2:
b4:0d:86:37:8f:48:a5:86:d3:e0:b5:35:82:4e:85:
98:68:0c:f7:8e:a2:f6:c2:1c:ea:d4:65:35:bc:ec:
f1:02:e2:cd:55:d0:fb:a5:cc:8d:1c:99:fc:67:1a:
17:bb:bc:6f:79:e1:7f:18:a4:4e:ac:85:35:a3:02:
d7:e9:81:f6:da:b8:99:e7:46:a5:46:1e:0d:4a:7d:
98:94:00:ef:af:04:b7:3a:3f:93:93:11:17:92:4f:
de:f8:13:58:4b:e4:99:dd:7d:04:57:0a:be:7d:b0:
d3:16:04:08:48:cb:7e:4b:b2:02:b8:cb:c2:98:7b:
db:ef:8c:88:0b:89:fa:9b:1c:d6:fb:ac:f6:b7:0b:
18:09:01:c6:3d:0c:a5:90:d2:e4:e5:36:70:48:8c:
c8:26:44:90:c2:4b:b7:f0:a7:e8:fd:75:25:72:ae:
ca:ec:a6:51:f4:f9:9d:5e:b7:7b:c4:fd:db:63:40:
16:2a:44:84:3e:dd:b4:fc:35:2a:77:dd:f7:5e:ce:
17:75:48:1a:46:c3:94:ae:7d:c5:b8:92:7e:b5:98:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:11:B0:AE:D6:07:E0:BA:F6:DB:35:9A:36:BB:98:04:B3:F5:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD8226A42CA11F0AD244D9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.192.0-156.240.194.255
156.240.244.0/24
156.251.31.0-156.251.46.255
Signature Algorithm: sha256WithRSAEncryption
78:a4:8f:64:5d:4f:0e:1d:ab:b7:0e:ab:2a:20:cd:55:e5:ce:
ec:df:a7:bc:47:3a:65:d6:1d:84:3f:f2:4e:ca:f7:c1:56:bb:
3e:f9:5e:bc:38:42:48:7f:c5:3c:1f:e0:27:c9:36:8b:ef:55:
9a:ae:cf:a6:40:90:f1:72:8e:49:4f:8c:be:c8:49:dc:a2:41:
8e:97:4a:27:f3:0d:95:91:ff:de:db:ed:39:8a:f6:e3:c8:f6:
97:cb:9f:6c:68:13:07:0a:70:3e:ce:d5:f2:6a:60:27:68:81:
89:98:7a:48:9e:4b:2e:67:05:2b:aa:da:82:32:4d:f8:47:fa:
20:77:bc:e8:3e:6d:31:a1:b2:e8:3c:06:2d:87:51:1f:47:9f:
26:7b:de:55:75:d3:7a:12:0a:f1:ca:f7:56:cc:53:9b:08:b3:
5a:89:45:e4:30:f1:52:b8:70:64:9b:a4:fc:1f:01:5a:9e:02:
6a:ac:f8:e0:2d:cb:ae:e6:f6:b5:be:92:ba:03:ce:92:2a:33:
c5:28:87:22:07:e5:d1:42:9e:cb:33:8e:c4:36:5e:58:78:b1:
e0:06:f9:e9:b4:88:a5:b4:aa:ac:71:a6:c0:5a:76:a8:de:cf:
7f:1b:6d:d3:ca:a9:fb:6a:fb:1a:7a:44:7c:08:81:75:f7:85:
de:bc:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:50:06 2025 by rpki-client