Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411EE9FC575711F0A9963BDEDAE4EC9C.roa
File: 411EE9FC575711F0A9963BDEDAE4EC9C.roa (raw, json)
Hash identifier: aEu5m8NyIJgwkvqEYiv/S+Uc6pFJxgFxX9Yj7Wf/yGU=
Subject key identifier: 2F:4F:43:B4:DC:00:D5:85:96:11:D5:77:43:33:39:58:45:06:25:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01602C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411EE9FC575711F0A9963BDEDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:14:32 +0000
ROA not before: Wed 02 Jul 2025 15:14:27 +0000
ROA not after: Wed 13 Aug 2025 15:14:27 +0000
asID: 398823
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90156 (0x1602c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 15:14:27 2025 GMT
Not After : Aug 13 15:14:27 2025 GMT
Subject: CN=68654cd8-bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:ae:bf:4e:87:e7:d9:59:e1:9b:f7:1c:3d:
df:53:7f:f2:87:88:23:38:82:41:6c:1e:39:c4:42:
78:55:35:b1:f4:8a:ac:0f:44:9b:76:1a:76:a6:78:
b6:1b:4c:d8:e4:36:8e:fd:87:0d:87:b1:4b:31:2a:
67:b1:69:8c:6a:ed:8f:ee:ac:a8:48:56:36:7a:5b:
40:9b:c1:bb:24:a9:d7:0b:f1:bf:26:78:9b:85:f4:
74:f1:03:7a:70:b1:95:aa:3d:01:2c:d6:86:db:9b:
4b:c1:c9:5f:b8:63:1a:1a:23:44:f6:4a:78:28:68:
8c:9d:0d:ff:a9:08:a1:6b:c8:52:79:af:ab:e1:aa:
ce:75:f1:eb:ce:78:e0:ce:03:d1:8a:a8:cc:7b:e4:
b6:10:d5:f2:32:34:84:85:0c:67:5e:c7:d1:f9:56:
c7:52:e1:e5:8f:a2:27:c4:2a:fc:5a:6f:5f:d7:62:
7b:02:e0:4c:ec:3e:d2:74:ed:39:fa:c8:c5:3e:72:
df:3b:00:a8:5a:4a:fe:63:3b:da:93:b3:8b:8e:49:
88:8b:57:03:46:d0:43:3c:1d:41:08:40:2c:2b:1c:
25:eb:c6:73:bd:3c:be:90:29:4a:b9:ba:c5:39:54:
bf:ac:ca:12:d7:85:9f:76:16:49:82:4e:a5:2d:40:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:43:B4:DC:00:D5:85:96:11:D5:77:43:33:39:58:45:06:25:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411EE9FC575711F0A9963BDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
1c:d2:0f:7f:16:43:ce:d1:15:35:9d:be:b2:74:e5:fb:35:00:
e0:76:69:3c:f7:5e:fc:ba:99:27:6d:66:e7:09:09:de:28:f9:
95:72:9a:ad:bf:9d:fc:8b:ff:f8:43:e7:6f:c5:50:ed:7c:a1:
67:52:52:91:e4:1d:79:48:b2:3e:cb:d1:86:61:64:f3:10:a3:
f2:1b:de:e5:56:8e:6c:ab:7d:7a:b6:34:33:45:9e:f9:b5:ce:
37:3a:f5:f9:59:a5:00:f7:9d:1d:12:dd:f3:96:3f:6b:a1:aa:
e7:98:ec:55:40:f3:82:1e:af:ae:f6:33:af:6c:60:a6:60:f4:
4d:ef:b1:f6:94:dc:3f:29:40:71:74:f8:c8:f5:9b:69:6f:ce:
d3:d4:a6:d3:71:3c:9a:34:2e:fa:18:da:7c:06:f5:2d:2b:ef:
0e:7a:55:fd:3d:d4:34:a7:2b:90:b3:2c:7b:4f:95:c5:dd:8c:
61:08:49:b6:67:56:7b:cb:85:77:d0:68:96:08:b7:59:99:29:
48:27:aa:1a:ea:ae:12:f4:54:a6:07:ce:5e:f8:99:0d:4d:23:
73:8e:a2:31:3f:50:e5:9e:89:89:9a:0d:9c:e0:0e:c5:60:7e:
cd:dc:0e:ea:43:d1:b1:5e:81:81:b5:66:f8:76:cc:1d:b8:db:
94:21:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:27:37 2025 by rpki-client