Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/968D79CA2CE211F09AA4D5C0DAE4EC9C.roa
File: 968D79CA2CE211F09AA4D5C0DAE4EC9C.roa (raw, json)
Hash identifier: R2NnsOxguG+92PsFAdTWDbYpOSVdMxk1ns4tHVh+2cc=
Subject key identifier: BD:FB:CD:67:8F:95:8A:28:D5:FC:1F:7F:26:11:EC:60:C0:29:F6:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01532F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/968D79CA2CE211F09AA4D5C0DAE4EC9C.roa
Signing time: Fri 09 May 2025 14:33:35 +0000
ROA not before: Fri 09 May 2025 14:33:30 +0000
ROA not after: Mon 16 Jun 2025 14:33:30 +0000
asID: 395793
IP address blocks: 156.228.15.0/24 maxlen: 24
156.236.14.0/23 maxlen: 24
156.243.223.0/24 maxlen: 24
156.243.230.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86831 (0x1532f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 14:33:30 2025 GMT
Not After : Jun 16 14:33:30 2025 GMT
Subject: CN=681e123f-4bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:8f:29:94:89:08:c0:2f:07:03:c4:82:e5:
90:9a:2b:f8:13:fc:f8:43:d0:3b:c1:09:31:90:f0:
fa:45:58:53:52:d6:43:11:15:aa:09:61:1c:87:63:
01:39:aa:cc:bb:bc:f7:21:5e:af:f6:b9:65:28:9f:
f3:2a:d5:83:45:1d:48:8c:b4:e8:53:c6:75:fa:50:
95:8b:90:27:b8:aa:19:be:ba:84:f9:25:cc:ec:2f:
e5:be:c4:5c:ff:b7:7c:e8:79:53:f5:57:a5:58:7d:
3c:75:7f:2f:e3:72:b3:6b:0d:c9:fa:c9:db:3b:00:
5b:74:72:16:3e:de:33:77:c5:22:93:95:ae:db:c2:
5d:be:c6:da:e9:b1:64:73:6f:9a:00:c2:5c:87:13:
75:2a:56:8a:0d:b8:d5:f9:01:34:fc:31:b7:98:74:
c7:2c:a4:bb:fd:05:9f:c1:35:1f:63:dc:b0:d3:37:
7b:22:5b:5a:dc:76:d5:f8:cc:af:02:44:d7:40:96:
f8:46:21:2f:4b:5e:fc:ec:31:24:33:ca:91:32:ff:
83:c0:02:9a:4d:8b:39:55:d4:6a:df:61:67:63:a8:
14:45:2e:42:01:1f:a1:5e:d8:d5:94:04:dc:01:94:
39:60:20:75:51:f0:d9:ed:e9:5a:e7:de:d8:d4:af:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:CD:67:8F:95:8A:28:D5:FC:1F:7F:26:11:EC:60:C0:29:F6:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/968D79CA2CE211F09AA4D5C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.15.0/24
156.236.14.0/23
156.243.223.0/24
156.243.230.0/24
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
ad:ee:2c:8b:60:b8:b4:6c:3a:59:cc:6f:62:c0:1c:14:28:de:
52:6b:a8:e8:45:e9:22:6d:20:08:ef:2d:91:74:0b:cc:63:c0:
f3:9e:d2:01:4b:7e:79:bd:2a:c0:ff:e4:2b:97:7e:b8:a3:9d:
17:46:e1:78:59:e2:2b:87:6d:e7:21:78:97:e5:70:c9:51:4e:
62:de:f4:1b:72:07:34:42:ea:f4:41:a9:8e:e8:89:ab:eb:57:
79:60:52:01:c3:88:6a:aa:57:51:35:83:68:91:ad:f6:e0:04:
4a:f4:cb:92:3a:38:b0:bc:4b:8d:53:33:98:b7:c5:e5:1a:c9:
3c:d2:df:54:35:70:60:3f:01:93:66:c5:31:ea:e3:97:d8:f3:
c2:6f:21:f7:be:87:1c:8b:38:6c:e7:f2:ed:bb:d3:a3:a8:0e:
c4:0d:04:af:03:32:35:75:86:38:63:83:e7:c1:50:fb:b8:c3:
74:e7:96:ca:1e:26:19:3c:08:8d:c2:cf:56:bb:a7:89:32:bb:
63:b4:77:78:72:02:89:47:95:6d:08:8c:91:34:65:82:ac:af:
b5:c3:f3:f7:b7:73:4b:d1:db:ec:a8:81:7b:42:1e:80:b2:98:
8f:26:77:db:55:4c:9e:b8:04:12:46:be:fc:64:a9:af:f8:06:
2b:d9:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:27:06 2025 by rpki-client