Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4767EBE333011F08E710CF1DAE4EC9C.roa
File: C4767EBE333011F08E710CF1DAE4EC9C.roa (raw, json)
Hash identifier: 4eViU9WbfBajIjPrhG4pAMQcFJOuk5n2omyWxslyd5Y=
Subject key identifier: 0C:70:49:3D:41:46:05:93:22:D5:EC:A3:D3:F7:6B:FA:D0:9F:91:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015595
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4767EBE333011F08E710CF1DAE4EC9C.roa
Signing time: Sat 17 May 2025 15:08:20 +0000
ROA not before: Sat 17 May 2025 15:08:15 +0000
ROA not after: Tue 16 Jun 2026 15:08:15 +0000
asID: 984
IP address blocks: 156.227.128.0/24 maxlen: 24
156.227.137.0/24 maxlen: 24
156.227.138.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.141.0/24 maxlen: 24
156.227.142.0/24 maxlen: 24
156.227.158.0/24 maxlen: 24
156.228.1.0/24 maxlen: 24
156.228.2.0/24 maxlen: 24
156.228.8.0/24 maxlen: 24
156.228.10.0/24 maxlen: 24
156.228.128.0/24 maxlen: 24
156.228.129.0/24 maxlen: 24
156.228.138.0/24 maxlen: 24
156.228.139.0/24 maxlen: 24
156.228.140.0/24 maxlen: 24
156.228.141.0/24 maxlen: 24
156.249.203.0/24 maxlen: 24
156.249.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87445 (0x15595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 15:08:15 2025 GMT
Not After : Jun 16 15:08:15 2026 GMT
Subject: CN=6828a664-6cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:f9:d0:fb:1d:74:8b:a8:77:4d:85:f3:4c:
59:40:3d:40:da:a1:b0:e5:02:e8:33:0c:89:40:86:
87:f5:39:5f:92:57:50:54:1f:ec:6b:4e:af:09:f0:
42:e7:5b:c1:80:fe:28:eb:d5:73:a8:ac:39:d1:62:
03:a5:39:16:ee:98:f8:15:be:70:04:83:ea:e5:ed:
68:f2:ea:0e:f0:be:74:02:ad:86:24:1c:81:70:2f:
7f:5a:fa:12:84:30:17:4e:09:79:54:f6:a4:5d:b9:
b9:60:56:92:71:a2:16:4f:55:95:6b:f2:01:df:69:
2e:98:d4:f4:70:a9:9b:20:b6:e9:db:6a:5c:5e:9d:
93:78:b2:a9:83:76:63:85:60:c5:ac:4e:d2:e3:12:
c3:7e:f8:3f:28:8c:b3:be:a3:c7:68:dd:9a:eb:19:
bf:04:54:cc:77:3d:7b:0a:49:d6:4a:ba:5a:42:56:
e3:df:a6:d5:8a:42:f1:06:ac:46:47:52:15:dd:37:
4a:9a:16:51:3b:9a:47:e6:b8:cf:42:6c:fc:5b:9b:
ca:98:24:8e:be:a5:7f:f6:dc:22:04:a8:82:96:60:
18:8d:67:9c:99:2c:22:db:07:02:85:d9:62:46:82:
88:3a:87:69:95:3d:8d:90:1a:25:1b:3c:e9:3d:bd:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:49:3D:41:46:05:93:22:D5:EC:A3:D3:F7:6B:FA:D0:9F:91:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4767EBE333011F08E710CF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.128.0/24
156.227.137.0-156.227.142.255
156.227.158.0/24
156.228.1.0-156.228.2.255
156.228.8.0/24
156.228.10.0/24
156.228.128.0/23
156.228.138.0-156.228.141.255
156.249.203.0/24
156.249.209.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:84:53:d2:4e:de:78:13:3f:34:e2:ab:46:95:c7:69:c6:
e4:62:98:82:31:08:1d:16:7c:3d:1d:19:c6:90:3e:4b:76:30:
7e:17:3b:ea:b8:d4:77:dd:7e:c4:a0:be:8f:ea:45:ac:34:28:
61:b3:4b:73:18:4b:56:32:dd:62:91:f7:46:d7:14:22:9a:a6:
74:93:a6:f6:0a:b0:f8:5c:57:60:2f:8b:f3:92:79:b7:b2:8d:
30:2c:69:c1:46:40:cc:95:34:fa:0d:66:f1:fe:35:5d:82:5d:
bb:b4:4b:3f:61:1a:63:34:71:f3:4c:6f:ea:8e:45:ee:85:b4:
3b:db:43:2b:02:e0:b4:cb:96:58:55:5f:26:23:71:dd:1d:5a:
06:f9:2e:01:47:71:1c:36:58:dc:62:34:7d:0c:4a:dc:a1:84:
70:ec:ad:c2:5e:36:45:a9:70:4a:6a:d5:e3:90:2b:4c:05:53:
ea:15:3e:08:7a:fb:3b:f9:cd:37:86:c0:1b:aa:20:13:e2:6d:
0a:b1:b2:2e:90:ed:d5:84:14:88:bd:dd:04:18:3d:45:1a:13:
4b:20:fc:2d:78:c3:ba:7b:55:a3:d7:56:57:f8:20:1d:b4:da:
21:4b:29:06:5c:b1:7a:d9:72:2a:db:2b:fc:c0:fd:8e:f8:13:
5c:2a:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:53 2025 by rpki-client