Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BFE138380511F08B6C998CDAE4EC9C.roa
File: 92BFE138380511F08B6C998CDAE4EC9C.roa (raw, json)
Hash identifier: Za/iDf0O/IBKkpdMG6O6n7j/cjzfdDzMED4hht9QhAY=
Subject key identifier: C4:B2:15:47:F8:DA:00:3E:D6:BF:DA:B4:41:9D:19:1D:11:0A:D2:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BFE138380511F08B6C998CDAE4EC9C.roa
Signing time: Fri 23 May 2025 18:41:44 +0000
ROA not before: Fri 23 May 2025 18:41:39 +0000
ROA not after: Thu 03 Jul 2025 18:41:39 +0000
asID: 203020
IP address blocks: 156.225.6.0/24 maxlen: 24
156.225.69.0/24 maxlen: 24
156.226.7.0/24 maxlen: 24
156.230.63.0/24 maxlen: 24
156.232.4.0/24 maxlen: 24
156.232.5.0/24 maxlen: 24
156.235.30.0/23 maxlen: 24
156.235.32.0/20 maxlen: 24
156.235.64.0/22 maxlen: 24
156.235.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87815 (0x15707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 18:41:39 2025 GMT
Not After : Jul 3 18:41:39 2025 GMT
Subject: CN=6830c168-1879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:0f:5d:db:ef:40:96:c4:54:18:73:54:40:
f1:ab:14:1d:98:12:bd:f6:54:c7:4b:62:f6:ef:ee:
e1:e3:e0:45:48:2c:38:d0:4f:47:00:ea:7f:e0:15:
bd:c1:82:84:92:a7:08:d7:60:cb:7f:c7:5f:d1:ee:
a3:85:15:d7:b3:4a:0b:90:70:33:ec:fc:a9:35:7c:
4c:62:57:88:02:30:6e:03:8d:02:43:9c:f2:e7:d8:
dd:33:90:df:5d:9c:98:28:d8:39:10:3a:da:94:a7:
ff:16:9a:38:4e:0a:03:50:a2:3d:81:91:5c:87:b6:
75:7e:84:41:15:37:9c:69:08:04:c0:89:cc:ac:c6:
ae:17:14:92:e5:55:33:30:79:c9:03:4e:54:5b:d2:
8d:de:74:bf:78:05:e7:59:4c:0c:c6:fb:ac:fd:3a:
1f:e3:57:53:9c:b4:bf:76:ec:23:9a:a4:4b:f1:65:
0f:48:29:1e:0a:06:3d:ac:a6:e5:95:00:7d:af:f8:
2e:56:f7:c7:52:df:1b:06:db:11:fc:b1:b6:7b:86:
51:68:64:25:2c:b1:82:2c:80:8d:c8:05:12:fa:83:
55:e1:74:63:f9:4a:d7:5d:7c:ba:7e:50:68:3d:ae:
8e:69:ee:02:d9:0e:12:5d:a4:33:e4:a1:ae:ca:8b:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:15:47:F8:DA:00:3E:D6:BF:DA:B4:41:9D:19:1D:11:0A:D2:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BFE138380511F08B6C998CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
156.225.69.0/24
156.226.7.0/24
156.230.63.0/24
156.232.4.0/23
156.235.30.0-156.235.47.255
156.235.64.0-156.235.69.255
Signature Algorithm: sha256WithRSAEncryption
57:3e:b6:c7:2c:bf:59:7e:38:9b:f9:42:a1:b8:72:06:7e:39:
46:bd:b0:99:09:77:40:c9:17:d1:b9:80:5a:9f:63:b9:3b:61:
52:3f:fb:11:2c:6d:2d:ed:af:2b:22:d1:57:5c:8b:22:8b:e7:
41:1c:69:90:52:f4:ab:f9:bd:ff:88:b0:82:10:3b:05:af:52:
0b:f1:37:dd:38:ff:8a:2a:5e:ee:92:f3:1b:19:90:1c:d3:08:
cb:f4:85:32:22:71:05:6a:16:31:63:2d:1b:5e:fd:e5:ae:a9:
e2:9c:01:d8:b5:e2:ec:8c:2d:cd:a2:c9:30:c3:d7:be:06:8f:
d7:a7:af:c7:0e:8c:08:d3:0a:5a:fd:2e:d0:dc:73:1a:55:3e:
c4:51:09:33:f8:a4:e0:c4:96:cc:30:ef:cc:23:25:34:51:47:
d2:a7:f8:d7:75:de:0d:ed:37:64:53:72:51:ca:f1:68:15:5c:
8a:5b:33:13:ae:17:16:1a:be:b6:cc:80:b4:8d:9f:18:6c:f5:
41:c4:d9:52:b3:99:2e:8d:89:f4:00:6f:eb:99:e1:0d:fe:1b:
4f:26:d7:83:9a:d9:77:dc:4f:74:e3:a3:1b:50:9a:8f:44:9e:
76:71:4d:cc:b7:96:ee:ac:f1:b4:4f:36:1b:c7:d2:b7:86:60:
97:f0:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:34:33 2025 by rpki-client