Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71EE6D0356D11F0A9BCB5EEDAE4EC9C.roa
File: C71EE6D0356D11F0A9BCB5EEDAE4EC9C.roa (raw, json)
Hash identifier: Y0sGW2amurJEgGWmGr3Mqlt6QOPCdYQeTjMXB0AIMzI=
Subject key identifier: BF:D4:B9:CE:0C:00:43:AC:56:47:55:0A:0E:2F:03:D2:E6:DA:82:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015644
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71EE6D0356D11F0A9BCB5EEDAE4EC9C.roa
Signing time: Tue 20 May 2025 11:30:06 +0000
ROA not before: Tue 20 May 2025 11:30:01 +0000
ROA not after: Fri 27 Jun 2025 11:30:01 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87620 (0x15644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:30:01 2025 GMT
Not After : Jun 27 11:30:01 2025 GMT
Subject: CN=682c67be-a623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:c2:a9:8b:fe:57:9b:3e:28:6c:c6:ed:7b:
e2:a5:cd:f5:10:9f:05:f0:39:8e:56:c1:12:11:49:
0e:80:a2:dc:29:9a:4a:1c:45:fe:bb:95:b8:a9:8f:
4f:70:f5:16:8a:af:65:13:41:ac:51:53:70:78:b0:
5b:a4:80:5d:5c:38:fe:0b:94:73:ee:c1:15:d8:36:
a1:30:5c:4b:5f:6a:d2:1d:70:0e:59:63:7c:16:8b:
3a:73:75:33:d9:3f:5e:43:0e:f4:fc:79:52:19:22:
6f:3b:8a:04:2a:d9:d6:58:2f:e3:fa:c1:c2:df:a2:
5b:a3:de:db:ca:62:96:4b:a8:8e:e9:f6:c4:67:41:
a6:17:2f:a2:49:4d:cc:93:a5:5e:1e:fa:84:22:d0:
95:6d:e6:ad:2b:d2:5b:05:33:14:df:b1:7f:63:46:
a9:11:02:fe:2f:8d:9f:7d:11:9b:4e:41:28:69:eb:
10:a8:1a:f6:ff:55:19:b3:d7:58:20:41:8b:21:52:
82:cc:4c:f8:1a:67:fe:52:ba:16:a0:d4:86:1a:85:
30:c5:42:dd:e9:ac:6c:9d:70:d3:13:b3:7b:cd:21:
29:6b:7a:05:ab:cb:f7:c4:4d:4c:5c:50:99:52:78:
19:71:c7:f5:db:76:b1:c6:94:4b:8a:e0:06:fb:48:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:B9:CE:0C:00:43:AC:56:47:55:0A:0E:2F:03:D2:E6:DA:82:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71EE6D0356D11F0A9BCB5EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.139.255
156.246.142.0-156.246.149.255
Signature Algorithm: sha256WithRSAEncryption
50:01:ca:7d:49:76:65:1a:b3:d4:b7:58:c0:36:24:10:44:39:
f0:31:8f:83:ad:19:07:83:07:98:77:97:fb:13:6a:1a:0f:c9:
74:4d:d1:0f:ed:e0:4a:fa:56:90:e5:7e:0e:5b:00:f7:39:6f:
48:6f:81:b7:b2:29:ff:62:78:ff:99:ab:58:93:6e:b4:f7:65:
c8:00:10:4b:48:42:95:13:4d:87:c5:13:6b:c1:a7:78:cc:bd:
a1:c3:18:da:ed:f3:4d:1e:f0:9d:d0:c1:78:ae:4a:9f:56:9a:
16:2c:4b:6c:b9:eb:28:1a:db:64:65:b0:b6:35:79:86:e8:7a:
04:02:99:85:a4:7b:b4:ea:d0:d5:68:91:66:f1:04:dc:be:e0:
5c:58:b3:34:a5:f2:74:32:53:03:e5:aa:90:31:6c:bd:c3:0b:
b9:18:95:8f:86:fa:e9:a9:bd:50:c9:05:78:c9:1b:67:24:f4:
ef:3e:c5:bd:84:ed:75:32:69:06:ff:80:f5:c5:52:de:c9:de:
92:1b:49:aa:64:36:04:55:71:e6:4e:f7:06:eb:77:c7:d2:b0:
41:d6:31:88:a2:82:07:71:75:92:19:a9:c5:78:ff:53:9c:eb:
a7:2d:76:a3:68:db:e8:8c:08:09:4b:83:db:bd:e0:96:f0:19:
ef:8e:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:03:35 2025 by rpki-client