Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCEF5DC333411F087B05489DAE4EC9C.roa
File: 4BCEF5DC333411F087B05489DAE4EC9C.roa (raw, json)
Hash identifier: JFyeKwNl5wCe+AxMq8cyI8ySUwSt1PKh0tA4EkOwDz8=
Subject key identifier: BD:A6:EF:9E:F7:68:25:E6:2C:7A:B0:51:C9:5F:F6:0E:1C:A4:13:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01559B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCEF5DC333411F087B05489DAE4EC9C.roa
Signing time: Sat 17 May 2025 15:33:35 +0000
ROA not before: Sat 17 May 2025 15:33:30 +0000
ROA not after: Tue 16 Jun 2026 15:33:30 +0000
asID: 984
IP address blocks: 156.231.31.0/24 maxlen: 24
156.231.33.0/24 maxlen: 24
156.231.34.0/24 maxlen: 24
156.231.35.0/24 maxlen: 24
156.231.36.0/24 maxlen: 24
156.231.37.0/24 maxlen: 24
156.231.38.0/24 maxlen: 24
156.231.39.0/24 maxlen: 24
156.231.40.0/24 maxlen: 24
156.231.42.0/24 maxlen: 24
156.231.43.0/24 maxlen: 24
156.231.44.0/24 maxlen: 24
156.231.45.0/24 maxlen: 24
156.231.46.0/24 maxlen: 24
156.231.47.0/24 maxlen: 24
156.231.48.0/24 maxlen: 24
156.231.49.0/24 maxlen: 24
156.231.58.0/24 maxlen: 24
156.231.59.0/24 maxlen: 24
156.231.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87451 (0x1559b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 15:33:30 2025 GMT
Not After : Jun 16 15:33:30 2026 GMT
Subject: CN=6828ac4f-bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:e0:84:c5:38:31:92:65:d5:d8:2d:ec:55:
e9:c0:a5:84:76:57:47:bb:70:13:68:20:ec:fe:4e:
e5:bc:af:ee:ca:f1:5d:72:66:f3:a2:20:f1:29:68:
87:85:62:d3:2e:aa:ec:b6:2e:18:52:b9:3b:ca:99:
2d:05:6f:3e:44:e0:82:00:67:8c:70:ee:28:ef:91:
01:54:ec:55:d2:bc:34:b4:0c:e9:0f:08:11:a0:6c:
8d:75:b7:87:9c:13:e5:8d:71:53:a3:fb:19:21:18:
52:28:48:65:2c:e1:a8:e5:48:63:c2:52:c1:a3:f6:
1c:c1:55:6a:3f:1b:5e:f5:6f:e0:fe:05:d2:09:32:
1c:bf:c3:51:6c:7c:25:4b:61:db:d3:b0:1b:34:d7:
e6:9f:c7:bc:38:a7:bc:a8:0a:c7:5f:92:ab:37:c6:
13:17:0e:12:0e:2c:4c:c3:7d:09:de:95:09:bb:4a:
7c:4c:b3:47:26:52:9d:56:1a:f4:fc:31:a9:2c:7c:
f2:36:33:e1:3c:c5:1a:bb:45:c0:7c:1e:26:12:4e:
eb:7a:22:e3:1a:02:ba:f9:c1:52:0e:57:c6:63:72:
82:99:46:7b:a3:f3:82:b7:2f:ae:4a:85:89:f3:d2:
5e:84:07:c7:3b:a3:ec:57:93:e2:e6:c8:a2:e4:fd:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:EF:9E:F7:68:25:E6:2C:7A:B0:51:C9:5F:F6:0E:1C:A4:13:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCEF5DC333411F087B05489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.31.0/24
156.231.33.0-156.231.40.255
156.231.42.0-156.231.49.255
156.231.58.0/23
156.231.64.0/24
Signature Algorithm: sha256WithRSAEncryption
23:45:15:ba:f7:4b:ea:bf:d6:bf:5b:ac:b8:b3:b7:e4:a1:7d:
da:36:46:5a:34:a9:21:33:74:f8:cf:38:cb:1d:d7:b8:0c:fd:
a6:3f:41:b2:5a:b6:04:6e:56:8f:da:48:49:27:ba:72:a5:0a:
5b:b5:d3:3f:b7:f3:1b:06:2e:30:28:1e:49:ae:a7:d3:4c:28:
58:9d:9d:db:0c:d4:50:f8:3c:3a:c7:2c:f9:a4:95:d0:41:70:
b6:c8:15:44:f9:ba:6e:76:a3:27:64:90:a7:29:b6:0e:a9:6b:
ef:f0:e3:49:60:c1:69:e9:31:af:03:fd:38:16:ef:b6:31:0f:
34:74:ff:9f:ad:c7:87:68:0a:e8:af:82:64:c6:db:a3:18:23:
05:a8:be:b3:61:41:57:2c:6b:17:18:b8:68:78:ba:d7:63:83:
14:16:86:19:8a:95:fa:55:b9:15:c8:00:92:8e:6b:c2:35:6f:
9d:5a:63:1e:b4:15:38:e9:21:33:a9:43:b4:7a:f5:58:4a:b8:
a3:b4:d3:d8:a3:61:c8:d8:3c:25:0f:bf:8e:51:76:87:ee:f3:
b6:92:cb:e3:d4:af:74:bd:f0:3f:de:0f:94:ff:c7:65:6a:12:
3c:93:3c:83:0b:0e:6c:2c:7e:f9:10:18:09:13:df:64:50:e2:
4e:ec:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:09 2025 by rpki-client