Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5033840C329011F0A35AFAB9DAE4EC9C.roa
File: 5033840C329011F0A35AFAB9DAE4EC9C.roa (raw, json)
Hash identifier: w7M4Q9jFJ9tdh7wdTpJTEEjHPCHsxXKxrvxWPz+aMFA=
Subject key identifier: 49:E5:7F:04:73:7A:AC:B8:E9:1C:4B:D5:EA:48:FA:20:AD:9B:14:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015524
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5033840C329011F0A35AFAB9DAE4EC9C.roa
Signing time: Fri 16 May 2025 19:59:46 +0000
ROA not before: Fri 16 May 2025 19:59:41 +0000
ROA not after: Mon 15 Jun 2026 19:59:41 +0000
asID: 984
IP address blocks: 156.227.131.0/24 maxlen: 24
156.233.102.0/24 maxlen: 24
156.253.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87332 (0x15524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 19:59:41 2025 GMT
Not After : Jun 15 19:59:41 2026 GMT
Subject: CN=68279932-8f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:43:78:14:4b:11:ba:fc:da:fa:62:5a:1d:
17:2d:e4:5a:2f:e9:a9:3d:0a:0c:fc:df:bc:75:3b:
b7:e4:b1:ae:ed:47:b1:ce:35:7a:a5:02:cd:c0:58:
c8:90:71:26:ff:22:36:de:08:82:6f:76:8d:12:17:
4d:62:7f:e3:fd:f0:6a:d1:63:e8:c5:c5:cb:32:5b:
60:f2:2f:ec:cb:b7:b9:1f:81:5c:e0:bc:17:49:84:
00:08:2f:7f:7f:e2:10:2a:4f:30:52:ca:10:75:d7:
94:b5:40:29:09:53:2f:0d:9f:00:34:88:dd:1b:de:
ce:49:90:ac:3e:fa:f1:4d:9f:80:d8:35:26:e4:dc:
41:e0:56:67:c3:f2:b9:56:62:9f:18:ad:d7:cb:c2:
67:a8:35:57:cd:d6:15:5d:20:e9:be:79:43:13:89:
09:63:eb:76:e0:1a:28:1a:3a:f4:3c:e0:d4:aa:9d:
82:f3:0e:cf:76:f9:5d:33:46:b1:f5:c9:db:27:ac:
81:dc:63:7c:60:c4:69:65:e8:c6:7f:43:e1:f8:9c:
61:00:5e:89:2a:2a:0d:21:a9:b9:dc:9e:36:88:b8:
90:37:36:76:55:cb:fb:0a:54:56:65:ae:b2:21:8e:
6b:49:31:77:61:9a:2f:18:a6:77:14:57:9c:7c:d0:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:7F:04:73:7A:AC:B8:E9:1C:4B:D5:EA:48:FA:20:AD:9B:14:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5033840C329011F0A35AFAB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.131.0/24
156.233.102.0/24
156.253.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b8:b6:f3:df:2b:e7:94:ff:e7:90:75:30:f3:74:40:19:53:
17:7c:91:cb:fe:ba:a6:8d:8e:80:6f:db:58:63:69:25:19:01:
11:68:c9:9e:1a:92:d5:c1:27:95:ee:6e:85:5d:e3:40:28:03:
33:01:46:6c:3a:c7:40:df:ca:fe:27:b3:1c:79:82:f7:ba:de:
75:6a:96:0a:c1:f0:96:27:ed:69:8f:7b:db:be:d2:4b:4d:9c:
6c:3f:c7:1c:04:4a:3a:9a:57:a7:f7:ad:51:77:be:51:fa:06:
bb:d0:4b:c3:bc:a1:d0:29:76:01:fa:52:fb:f0:dd:a8:0c:22:
16:a5:44:b7:23:fa:94:a7:d1:1c:5c:43:fe:1b:3d:b6:3c:dc:
64:95:29:5e:05:3b:95:fd:f2:45:a2:53:2a:b3:c3:13:6f:c9:
37:2e:19:9b:69:fd:38:7c:c6:c5:63:62:84:75:40:c2:fa:a2:
cd:40:66:bd:d4:92:2e:75:9c:a0:fb:c8:6a:6b:2c:b9:cf:27:
e1:72:98:02:8f:fc:d4:8b:89:ef:c1:42:32:b6:43:cb:39:21:
d7:a7:40:f6:8d:78:7a:89:51:2a:2d:d3:f7:4e:78:e3:af:f0:
6c:fa:c4:15:9b:df:c1:ae:fe:23:bc:7c:50:f8:0e:1b:ed:cd:
6c:e3:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:25 2025 by rpki-client