Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F97EC03C318011F097F139ACDAE4EC9C.roa
File: F97EC03C318011F097F139ACDAE4EC9C.roa (raw, json)
Hash identifier: BVamlCLubZExh3p4bvYAFyXf3/x0abbDpNi6bqTeopc=
Subject key identifier: 94:7C:07:D7:8F:C0:35:B6:02:3C:FE:C1:39:32:D3:4B:07:51:AB:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F97EC03C318011F097F139ACDAE4EC9C.roa
Signing time: Thu 15 May 2025 11:37:26 +0000
ROA not before: Thu 15 May 2025 11:36:50 +0000
ROA not after: Fri 13 Jun 2025 11:36:50 +0000
asID: 398823
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87215 (0x154af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 11:36:50 2025 GMT
Not After : Jun 13 11:36:50 2025 GMT
Subject: CN=6825d1f6-fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0f:d0:12:0a:91:ec:20:f6:54:cb:7e:0d:f7:
a1:82:4f:f0:4d:17:eb:1e:1d:64:9a:7e:49:2b:37:
41:0f:c4:95:63:af:31:48:31:ad:ca:ae:f0:9f:f6:
83:19:6e:cd:c5:70:e5:73:13:c5:03:0e:47:e6:ca:
a8:8d:85:b2:ef:ce:d0:01:f4:67:8b:ce:82:15:a8:
39:fb:f5:20:f1:17:c7:ad:1d:91:41:d4:69:f1:fa:
12:5c:6e:eb:ea:a5:d0:77:2f:9f:f6:6f:fa:a8:cf:
01:b1:56:4e:dc:09:a6:72:97:8a:b3:b9:6f:98:7a:
ab:f6:48:08:25:3b:de:e0:45:b0:72:82:22:23:fe:
1f:a6:ea:d3:4e:3e:2b:0a:a4:19:76:28:08:cc:23:
5b:53:1a:87:4a:0d:ba:8e:6c:99:d2:fe:15:79:3f:
08:1a:3d:38:92:01:c0:c2:58:09:a7:ad:dd:76:47:
15:ce:50:fe:2b:df:e9:15:0d:c3:e5:88:f2:15:02:
c1:e3:05:44:6f:58:29:99:75:23:86:25:67:f6:40:
a7:e3:7d:f2:f7:3c:1b:d6:74:7e:d8:e5:e4:69:12:
3c:bd:03:bb:07:32:c8:3f:b0:16:2c:4d:3a:48:e7:
2d:aa:0d:b8:f1:ae:ef:3c:1f:6d:53:53:25:52:75:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:07:D7:8F:C0:35:B6:02:3C:FE:C1:39:32:D3:4B:07:51:AB:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F97EC03C318011F097F139ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
10:b9:8c:70:8c:98:32:e7:2a:cc:9f:d1:ad:74:dc:02:a5:cc:
f2:cf:58:0d:51:37:e5:e5:ed:39:73:70:27:25:56:24:c1:8f:
03:86:d0:fb:c5:f3:4a:56:f9:a6:92:4e:34:85:9b:cb:96:e7:
05:40:f7:50:27:e8:c3:87:47:c6:52:ee:d2:41:6d:24:1b:6a:
5f:08:d0:80:79:7f:96:22:cc:ef:43:6e:4a:aa:4e:54:df:7b:
cf:5a:32:21:aa:c7:66:9b:e2:f8:51:9f:b1:df:a8:9c:92:4a:
ce:25:7d:a4:88:05:2e:1d:36:da:91:de:c2:31:5f:73:29:3c:
17:38:39:03:3a:14:c9:67:ea:db:46:7c:0b:28:d2:1c:eb:48:
49:98:87:70:c6:44:73:05:d3:59:53:00:d6:65:5f:d4:6d:e7:
95:67:62:bb:14:ea:e8:05:2d:2f:fa:19:e4:c4:bb:85:90:5d:
97:5c:95:ad:77:87:4c:0d:ab:da:2b:6f:6c:9e:a2:b2:00:97:
66:64:73:98:66:29:cf:8a:f3:bf:45:c3:ca:db:2d:1a:57:97:
a2:55:fc:79:12:ff:78:b3:13:bf:46:f1:fd:e4:25:7f:e4:d5:
8f:07:69:d5:ac:88:76:cc:43:02:63:1d:aa:b0:ed:1e:fb:ee:
db:0a:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:58:52 2025 by rpki-client