Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D674FCA02BEA11F0BB92CACDDAE4EC9C.roa
File: D674FCA02BEA11F0BB92CACDDAE4EC9C.roa (raw, json)
Hash identifier: XhxHn02plQ5Ila8NdzbG2F/XSOkwPO1Q2L17k5HVTK0=
Subject key identifier: C5:F9:50:90:AF:5D:02:7A:E2:7B:BC:E3:8C:D2:8F:10:E7:AD:8F:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D674FCA02BEA11F0BB92CACDDAE4EC9C.roa
Signing time: Thu 08 May 2025 09:00:07 +0000
ROA not before: Thu 08 May 2025 09:00:02 +0000
ROA not after: Sun 08 Jun 2025 09:00:02 +0000
asID: 200373
IP address blocks: 156.228.117.0/24 maxlen: 24
156.228.118.0/24 maxlen: 24
156.228.119.0/24 maxlen: 24
156.228.124.0/24 maxlen: 24
156.228.125.0/24 maxlen: 24
156.228.171.0/24 maxlen: 24
156.228.174.0/24 maxlen: 24
156.228.175.0/24 maxlen: 24
156.228.176.0/24 maxlen: 24
156.228.177.0/24 maxlen: 24
156.228.178.0/24 maxlen: 24
156.228.179.0/24 maxlen: 24
156.228.180.0/24 maxlen: 24
156.228.181.0/24 maxlen: 24
156.228.182.0/24 maxlen: 24
156.228.183.0/24 maxlen: 24
156.228.184.0/24 maxlen: 24
156.228.185.0/24 maxlen: 24
156.228.189.0/24 maxlen: 24
156.228.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 12:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86727 (0x152c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 09:00:02 2025 GMT
Not After : Jun 8 09:00:02 2025 GMT
Subject: CN=681c7297-6652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:87:32:fb:b2:e3:53:55:41:df:fd:3b:ff:
99:28:80:a1:21:8a:7c:25:c0:2f:18:29:d8:a6:80:
d5:12:66:05:41:fd:cb:75:e5:cc:5a:fa:4b:b7:13:
73:5f:67:8f:95:03:1d:35:7d:08:56:dd:0b:19:58:
49:af:49:17:7d:4b:be:af:9b:d8:9d:56:f8:9e:4e:
0f:96:a6:81:41:2a:65:d0:f1:f5:30:ef:20:1a:c7:
bb:aa:34:b6:d6:bb:89:c5:56:a2:4f:ac:7f:04:8e:
3a:dd:12:b2:72:a9:42:6a:6b:57:eb:44:51:81:1e:
47:cf:97:5e:ac:96:6e:5f:3b:46:93:15:2a:b4:39:
20:30:a0:43:5b:e2:dd:21:61:d1:d0:6c:45:18:fe:
9f:4c:dc:c3:3d:ab:6e:ff:52:d8:c4:81:05:39:31:
f0:38:88:94:e9:f2:78:d8:04:e2:1d:9a:52:43:06:
85:f5:ed:76:0e:e4:c3:b1:11:9d:c7:b4:ab:8e:de:
17:da:4c:a8:6f:23:ee:00:c1:b5:34:e2:11:f6:08:
26:4b:1d:6d:03:2a:67:eb:c0:96:ac:55:40:75:03:
e5:c4:05:3c:f3:3d:3c:5f:24:cd:b0:53:d6:b8:a7:
af:31:79:60:a9:ae:7e:f3:f4:0f:16:d0:53:68:a7:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:50:90:AF:5D:02:7A:E2:7B:BC:E3:8C:D2:8F:10:E7:AD:8F:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D674FCA02BEA11F0BB92CACDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.117.0-156.228.119.255
156.228.124.0/23
156.228.171.0/24
156.228.174.0-156.228.185.255
156.228.189.0-156.228.190.255
Signature Algorithm: sha256WithRSAEncryption
0a:73:7e:c0:72:97:3a:89:bb:21:06:19:54:15:9d:ca:21:ca:
9c:b7:ae:8d:c4:9f:d0:05:62:df:fa:c2:18:16:7c:c3:c6:d3:
89:12:d2:f9:cc:61:dc:71:ab:5d:29:e1:0c:a3:e2:ef:98:a4:
a4:13:71:cc:20:ac:0c:d6:53:fe:35:6f:73:06:4c:ac:52:2e:
42:6e:d0:8a:33:20:86:bd:90:f0:39:d1:d8:d6:81:0c:de:42:
a4:b8:bd:1c:ac:90:6d:02:96:d8:e7:d4:4d:4b:cb:cc:e1:a0:
ff:2b:51:f4:b5:55:49:cb:07:0f:ab:2c:bb:6c:94:5d:f9:1d:
e6:49:b6:d5:30:47:73:92:b9:a7:ba:30:50:bc:4e:32:d9:4d:
83:19:8f:af:bd:d5:59:b1:a3:35:a5:d0:1e:41:4f:29:0d:44:
72:4f:de:aa:a2:d4:5e:2a:da:36:e4:34:28:42:75:e2:ab:3a:
56:9a:a3:9f:4d:2f:7e:b2:72:df:4c:1a:c2:3a:ec:03:f5:99:
74:86:f7:78:fb:70:69:17:d0:9c:b6:5a:73:5c:3f:b3:8c:17:
22:70:a0:95:53:6f:18:1b:10:6d:4e:ee:42:bc:9c:40:62:84:
35:7c:74:f2:ba:2d:22:87:0b:c6:32:21:fa:57:92:8a:db:fe:
1a:14:31:b9
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAVLHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA4MDkwMDAyWhcNMjUwNjA4MDkwMDAyWjAYMRYw
FAYDVQQDEw02ODFjNzI5Ny02NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArg6HMvuy41NVQd/9O/+ZKIChIYp8JcAvGCnYpoDVEmYFQf3LdeXMWvpL
txNzX2ePlQMdNX0IVt0LGVhJr0kXfUu+r5vYnVb4nk4PlqaBQSpl0PH1MO8gGse7
qjS21ruJxVaiT6x/BI463RKycqlCamtX60RRgR5Hz5derJZuXztGkxUqtDkgMKBD
W+LdIWHR0GxFGP6fTNzDPatu/1LYxIEFOTHwOIiU6fJ42ATiHZpSQwaF9e12DuTD
sRGdx7Srjt4X2kyobyPuAMG1NOIR9ggmSx1tAypn68CWrFVAdQPlxAU88z08XyTN
sFPWuKevMXlgqa5+8/QPFtBTaKfNFwIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFMX5
UJCvXQJ64nu844zSjxDnrY/CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjc0RkNBMDJCRUExMUYwQkI5MkNBQ0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBACc5HUDBAOc5HADBAGc5HwD
BACc5KswDAMEAZzkrgMEAZzkuDAMAwQAnOS9AwQAnOS+MA0GCSqGSIb3DQEBCwUA
A4IBAQAKc37Acpc6ibshBhlUFZ3KIcqct66NxJ/QBWLf+sIYFnzDxtOJEtL5zGHc
catdKeEMo+LvmKSkE3HMIKwM1lP+NW9zBkysUi5CbtCKMyCGvZDwOdHY1oEM3kKk
uL0crJBtApbY59RNS8vM4aD/K1H0tVVJywcPqyy7bJRd+R3mSbbVMEdzkrmnujBQ
vE4y2U2DGY+vvdVZsaM1pdAeQU8pDURyT96qotReKto25DQoQnXiqzpWmqOfTS9+
snLfTBrCOuwD9Zl0hvd4+3BpF9CctlpzXD+zjBcicKCVU28YGxBtTu5CvJxAYoQ1
fHTyui0ihwvGMiH6V5KK2/4aFDG5
-----END CERTIFICATE-----
Generated at Thu Jun 5 02:07:46 2025 by rpki-client