Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8085198412F11F083B62DB5DAE4EC9C.roa
File: D8085198412F11F083B62DB5DAE4EC9C.roa (raw, json)
Hash identifier: Iu1GtHa3NZIuGeYGdcdjjTVGoEHTrtlbQMtw3qA+61c=
Subject key identifier: 8F:CB:50:EF:2E:50:DA:25:D1:DC:20:FF:A8:6D:56:85:1A:54:25:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8085198412F11F083B62DB5DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 10:36:59 +0000
ROA not before: Wed 04 Jun 2025 10:36:55 +0000
ROA not after: Wed 09 Jul 2025 10:36:55 +0000
asID: 200373
IP address blocks: 156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.240.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88500 (0x159b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 10:36:55 2025 GMT
Not After : Jul 9 10:36:55 2025 GMT
Subject: CN=684021cb-3bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:03:91:b1:3f:c0:ac:45:d7:dc:0a:97:fc:
89:7a:0b:99:f1:ae:72:18:78:c5:fb:97:b4:53:c5:
ae:33:7b:2f:74:98:6a:b2:e7:bd:84:8d:1a:a2:b5:
1e:05:ad:54:75:35:34:87:81:96:0c:75:52:34:b7:
53:ea:43:8e:e6:9f:41:ed:76:fc:1d:98:aa:6b:e5:
17:e3:60:3c:ad:18:98:7a:bf:7f:07:18:96:65:f0:
44:ce:7d:c5:05:cd:f3:a0:16:55:69:bc:4c:cd:9e:
2b:85:ed:9e:2e:92:d4:03:52:e4:32:29:94:73:11:
93:1a:23:d8:d0:5a:d7:54:41:a0:ab:a3:70:03:af:
ef:34:fe:04:22:6e:12:47:2b:7f:dd:b7:0f:92:6b:
39:10:f1:6e:98:af:0f:b6:27:22:6e:d1:9a:1c:83:
39:6b:a5:3f:5e:b0:88:ee:a9:b1:d3:31:3c:f3:f1:
d7:01:3b:17:d1:47:64:f2:a8:1e:ed:55:ba:fb:c3:
4d:02:26:06:da:d7:05:9d:b0:8a:fa:28:23:6f:68:
c5:18:e3:72:f4:49:de:c8:ae:f4:87:2e:00:33:40:
20:49:bb:2a:d5:35:01:b2:73:64:ed:b0:eb:29:a9:
5b:f8:81:2a:64:cb:f7:9a:8b:54:a9:50:1f:09:96:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:50:EF:2E:50:DA:25:D1:DC:20:FF:A8:6D:56:85:1A:54:25:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8085198412F11F083B62DB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.90.0-156.233.95.255
156.239.156.0/23
156.239.192.0/19
156.240.99.0/24
Signature Algorithm: sha256WithRSAEncryption
43:67:a7:9c:d4:56:7b:41:94:26:e6:20:66:30:9f:16:f9:66:
36:dd:2b:d6:0f:74:db:19:e3:72:a6:fe:94:05:dd:44:cb:61:
44:98:77:8b:d4:31:2a:e0:fa:40:46:54:8a:85:c4:42:22:6a:
88:87:b5:41:1d:4e:16:ed:90:b6:99:33:60:db:b6:a9:2e:8b:
8c:b3:84:dd:8e:67:7b:7b:66:a8:7d:3e:9a:a4:ec:cb:5b:96:
01:6e:9d:6e:14:76:49:d3:24:20:d1:3d:1a:c9:71:c2:fa:f2:
e0:a8:51:7e:5a:3a:7c:64:1a:cb:f2:79:0e:b2:45:51:7b:27:
a1:b8:d4:fd:50:60:85:16:26:0f:26:47:d0:9a:45:32:11:a9:
36:40:9e:1c:4e:81:62:1b:46:0c:c1:5b:e2:4a:8b:66:71:fa:
50:32:54:7f:d3:77:0c:29:ed:83:d6:75:8d:d2:78:4b:f8:75:
ac:64:2d:8c:2e:59:ca:d3:ab:c9:17:26:38:d0:05:13:56:cc:
b4:b1:f3:8b:fc:83:e2:17:a4:6f:fc:e9:c8:45:b7:24:1d:ed:
d6:52:c5:22:2b:1f:e3:0c:1d:75:55:19:56:cd:4f:0f:4b:62:
73:fe:41:a6:dd:0f:66:ff:37:f1:0a:85:b2:4c:00:a5:c3:33:
3e:71:f7:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:08:58 2025 by rpki-client