Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD668625F311F09AF2ACD9DAE4EC9C.roa
File: D9DD668625F311F09AF2ACD9DAE4EC9C.roa (raw, json)
Hash identifier: //KjjiPnKFRvSXP9CNd4znJa13pVCFxWXZkRxnziRmk=
Subject key identifier: B5:BF:B4:66:A7:11:D7:D3:00:C6:95:30:07:2B:62:8B:A2:9E:F0:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD668625F311F09AF2ACD9DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 18:49:31 +0000
ROA not before: Wed 30 Apr 2025 18:49:27 +0000
ROA not after: Wed 26 Apr 2028 18:49:27 +0000
asID: 17561
IP address blocks: 156.226.11.0/24 maxlen: 24
156.229.0.0/24 maxlen: 24
156.229.4.0/24 maxlen: 24
156.229.5.0/24 maxlen: 24
156.229.6.0/24 maxlen: 24
156.245.91.0/24 maxlen: 24
156.245.92.0/24 maxlen: 24
156.245.93.0/24 maxlen: 24
156.245.94.0/24 maxlen: 24
156.245.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86207 (0x150bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 18:49:27 2025 GMT
Not After : Apr 26 18:49:27 2028 GMT
Subject: CN=681270bb-b4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:8a:f5:15:ea:5a:92:3a:b6:a3:48:01:a1:
25:db:de:1d:14:3a:06:13:c8:b3:2e:27:64:2f:e1:
2d:8d:ed:bc:be:54:54:c5:37:c4:ea:4f:ad:a7:56:
d3:68:b7:55:a5:69:d7:62:2c:c2:9e:d1:6e:26:bc:
6b:9e:cd:8d:3f:b1:f4:2c:6f:1e:9f:dd:11:2d:a5:
fe:ed:fc:d5:e6:a2:a4:ec:26:75:f0:0d:99:e3:f1:
f3:1e:69:8b:a3:c5:9f:2b:da:a1:5a:72:66:93:bb:
7a:f3:84:18:da:1a:9f:c2:71:6d:8f:80:92:dd:f1:
9e:6e:b3:75:a1:98:15:a3:e8:6a:4c:1f:46:2d:c7:
3a:0f:38:88:cc:c5:3b:0f:b0:e6:dc:4a:c5:4e:3e:
84:0e:3b:79:df:b5:87:ae:a7:56:fe:97:e8:83:ef:
60:a5:0e:14:86:08:d5:a9:78:34:58:39:d7:9f:05:
ae:f5:5a:f1:43:d8:8f:25:f4:b4:2c:25:c8:e7:7e:
d5:2d:63:8d:46:26:23:df:14:5b:56:e7:ca:2d:8e:
6a:21:5e:30:76:34:b3:2b:9a:4f:30:65:f5:ad:6a:
ab:5e:08:58:10:81:9e:6a:0b:37:7e:6e:0c:66:df:
cf:51:07:27:74:7f:1f:bc:c6:5f:e8:0a:cc:af:e8:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:B4:66:A7:11:D7:D3:00:C6:95:30:07:2B:62:8B:A2:9E:F0:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD668625F311F09AF2ACD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.11.0/24
156.229.0.0/24
156.229.4.0-156.229.6.255
156.245.91.0-156.245.95.255
Signature Algorithm: sha256WithRSAEncryption
a0:df:7d:a4:0e:49:16:58:a7:cb:da:59:2c:3e:71:93:90:62:
31:f4:c1:2c:5a:21:b2:23:e4:12:40:0b:35:bd:c1:ac:3f:92:
10:cc:eb:d7:02:74:ce:1f:fd:ae:d7:0d:8d:ac:34:4a:20:23:
7e:1e:0c:b3:f0:c7:1b:bc:60:f2:11:d5:7e:67:6c:2e:a0:50:
68:d6:8b:5f:cc:73:89:b7:c0:c1:6c:f0:b8:e4:26:6d:51:f5:
9b:7d:ea:20:ed:4e:5d:72:c4:a6:1f:c4:75:c9:af:59:39:bf:
59:b9:1e:88:93:7a:21:3e:9e:c4:94:54:32:19:bc:21:77:f8:
8e:a2:b0:82:eb:fa:61:b6:6e:8c:95:14:b1:45:46:3e:12:59:
f2:e9:86:91:c1:66:af:0c:63:83:98:0f:ab:49:3a:77:b7:ee:
8c:c7:2b:56:ca:70:72:c8:99:a5:99:a1:b5:6e:28:34:91:1d:
92:7b:53:96:f9:29:20:56:89:56:03:6d:f7:41:5a:13:fc:ce:
66:52:14:d2:27:c2:4c:00:38:3a:e9:ca:72:ee:6a:9e:42:25:
6e:75:fe:e4:c4:7e:2b:45:7f:8a:e4:78:21:89:82:3b:dd:e9:
b5:cb:23:c4:b1:96:e5:c8:59:38:81:be:3c:f3:e2:cd:b7:35:
a7:13:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:57 2025 by rpki-client