Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF1D2AF02BEB11F09F1559D4DAE4EC9C.roa
File: FF1D2AF02BEB11F09F1559D4DAE4EC9C.roa (raw, json)
Hash identifier: oPG+vDGIgoeT0K6+LYpJ7Jl30yH/HjYXDsMfgPtq9ac=
Subject key identifier: 4E:F7:0E:1A:FC:D2:17:CB:DA:F4:0B:E0:EC:BB:D6:14:B7:84:D7:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF1D2AF02BEB11F09F1559D4DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:08:25 +0000
ROA not before: Thu 08 May 2025 09:08:20 +0000
ROA not after: Mon 09 Jun 2025 09:08:20 +0000
asID: 200373
IP address blocks: 156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
156.233.85.0/24 maxlen: 24
156.233.86.0/24 maxlen: 24
156.233.87.0/24 maxlen: 24
156.233.88.0/24 maxlen: 24
156.233.89.0/24 maxlen: 24
156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.240.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86731 (0x152cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 09:08:20 2025 GMT
Not After : Jun 9 09:08:20 2025 GMT
Subject: CN=681c7489-c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:92:a3:81:29:ad:51:60:00:fe:2e:d5:54:
60:52:8a:b7:37:fe:82:6f:e3:36:21:c9:15:15:a9:
6d:d4:5e:a5:74:57:c9:94:56:e5:67:49:ae:dd:0c:
d8:40:b6:4e:f5:37:92:3a:40:54:15:f4:58:68:e5:
a8:72:0c:1f:06:56:50:83:0b:d9:fe:80:2a:99:ad:
8e:b2:6b:91:72:98:8c:f5:53:77:00:52:25:79:24:
96:34:e8:e1:66:ad:12:17:a1:ce:af:4b:a2:18:7f:
47:0a:3a:51:5a:d1:d3:8a:fa:c4:0a:b7:9f:53:8f:
76:97:18:40:e4:14:1e:59:9d:0c:da:fe:9c:ff:91:
60:f9:e6:d4:11:92:85:29:0e:35:59:84:56:87:2b:
7c:df:76:95:e0:7d:f0:27:8a:3d:59:51:b7:56:ca:
65:c7:19:2b:fd:02:6e:62:0b:d4:0d:b6:d5:ea:ee:
fc:75:11:7b:8e:5e:2e:d5:d0:7f:ea:27:bf:f6:09:
51:61:50:ca:52:fd:62:ea:26:7d:f5:28:a3:ef:9e:
e0:cd:6e:19:45:75:54:ba:d1:08:27:0c:0b:1f:90:
12:18:ce:5f:b1:71:79:bf:52:88:b5:83:fd:7b:e5:
c9:79:e3:58:d4:6f:6b:10:d6:72:78:43:4b:00:b7:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:0E:1A:FC:D2:17:CB:DA:F4:0B:E0:EC:BB:D6:14:B7:84:D7:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF1D2AF02BEB11F09F1559D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.72.0/22
156.233.84.0-156.233.95.255
156.239.156.0/23
156.239.192.0/19
156.240.99.0/24
Signature Algorithm: sha256WithRSAEncryption
af:47:aa:83:6b:ea:36:83:33:3c:45:cb:af:3c:51:7b:be:1a:
07:a3:f6:e3:99:80:3a:95:92:be:89:dc:df:84:d5:1c:62:70:
54:5c:78:6e:71:1d:b9:57:db:6b:c5:05:2e:e1:f7:8d:6a:27:
a5:5d:38:de:4d:9e:a3:df:51:e3:ca:75:09:ec:ad:7f:a8:ff:
49:30:a0:82:a8:2d:ca:17:b0:8a:f9:51:bb:8d:c6:c8:bd:e9:
98:d1:19:0d:a9:d7:cd:69:1f:40:ee:1e:51:f0:10:df:d1:f3:
6d:24:15:5c:c1:d3:53:d1:fd:ca:03:5c:3b:79:4f:0e:b1:15:
be:b9:6a:04:34:c3:1a:69:ea:93:c5:9f:87:82:3b:f2:29:f2:
02:dd:e4:80:07:2f:79:3f:3c:fe:2e:f5:53:92:ef:93:16:fd:
11:f9:b5:e0:6d:e4:c2:b9:58:9c:7c:c3:2a:cc:96:a1:5d:84:
a9:db:3d:1a:e3:85:f0:33:87:a6:75:58:ad:97:fa:c5:a6:ec:
c0:b6:a5:19:3c:fc:6a:04:ad:05:e8:24:fe:c1:84:d6:86:4b:
58:e0:22:11:81:bf:79:b2:3c:54:6a:2d:2f:f0:f8:7e:c2:eb:
53:11:5d:06:bf:01:fb:34:21:f5:d7:9e:5d:1a:05:fa:9c:06:
b9:19:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:28 2025 by rpki-client