Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC16960A438211F08C1D94CFDAE4EC9C.roa
File: DC16960A438211F08C1D94CFDAE4EC9C.roa (raw, json)
Hash identifier: o4+Vy9V9Hs+tZ7HZIt3i9u5hyl3XH47aEJcXlgkkHT4=
Subject key identifier: 74:66:81:14:00:D3:7B:10:A3:89:C5:8A:91:90:D4:C0:BE:97:44:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC16960A438211F08C1D94CFDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 09:36:17 +0000
ROA not before: Sat 07 Jun 2025 09:36:12 +0000
ROA not after: Sun 31 Aug 2025 09:36:12 +0000
asID: 399077
IP address blocks: 156.251.0.0/24 maxlen: 24
156.251.5.0/24 maxlen: 24
156.251.10.0/24 maxlen: 24
156.251.27.0/24 maxlen: 24
156.251.48.0/23 maxlen: 24
156.251.59.0/24 maxlen: 24
156.251.60.0/24 maxlen: 24
156.251.61.0/24 maxlen: 24
156.251.62.0/24 maxlen: 24
156.251.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88618 (0x15a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 09:36:12 2025 GMT
Not After : Aug 31 09:36:12 2025 GMT
Subject: CN=68440811-94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:c4:ac:2b:66:b2:af:2f:46:14:9c:c4:f3:92:
26:29:dd:0c:cc:18:11:62:4d:e3:6e:29:79:80:96:
43:6b:0c:8a:31:22:1e:eb:18:71:83:e6:02:4f:b0:
bf:8d:41:19:40:a4:6e:8d:e3:43:ec:f5:ce:c7:02:
1d:87:45:a6:4f:cd:24:b8:b3:dc:5f:4d:4b:9e:23:
8c:da:ae:b6:75:ea:9a:6d:af:17:41:a8:78:df:56:
ac:a2:16:8f:0d:b7:68:7c:67:4d:86:a8:5b:0f:3e:
b9:05:6d:85:81:0c:42:68:25:cd:0c:15:17:00:a8:
9d:1a:6b:1e:d6:9e:fb:28:69:63:b2:cb:34:83:82:
ac:b6:a7:84:27:1c:cb:ac:9d:70:36:f6:5f:b8:77:
47:d1:dd:83:9a:c5:65:20:9f:48:9e:fa:88:eb:3a:
7f:e9:46:a4:40:2e:7d:46:6f:12:4c:fb:bc:2c:96:
dc:e6:86:8c:f3:be:ec:5b:ef:59:90:f3:1e:64:2a:
77:eb:07:83:83:8c:b2:c2:da:bf:e9:5a:0f:c8:42:
ed:ba:09:d2:3e:da:60:4c:79:4b:29:57:75:62:c0:
74:ec:26:fc:c8:42:4e:0a:fe:dc:58:3f:a8:59:26:
99:74:15:a3:70:14:db:c4:31:d1:db:77:34:c9:ad:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:81:14:00:D3:7B:10:A3:89:C5:8A:91:90:D4:C0:BE:97:44:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC16960A438211F08C1D94CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.0.0/24
156.251.5.0/24
156.251.10.0/24
156.251.27.0/24
156.251.48.0/23
156.251.59.0-156.251.63.255
Signature Algorithm: sha256WithRSAEncryption
0b:f1:8e:b9:12:37:db:59:51:8c:bb:08:90:de:5b:94:84:80:
3d:4d:87:cf:82:cc:be:f9:90:cb:3b:b2:53:be:93:72:31:27:
53:08:64:3e:a5:24:cf:f9:bd:7d:0c:40:5b:25:3a:26:ea:c9:
d7:bd:6b:f7:5b:48:78:b4:8d:0c:36:ef:34:92:f5:b7:46:2a:
d5:ad:8f:6f:98:f4:48:af:df:f9:83:f3:9d:7c:b3:37:f6:b0:
0e:e4:ad:c1:da:8b:8f:19:15:47:b1:28:a8:17:d2:36:9a:15:
7a:96:c7:0a:0e:28:9f:d1:ab:a3:7b:b4:bf:8c:29:e6:ca:9f:
ed:1e:fa:e3:ce:ae:29:84:97:51:7b:00:d1:b0:d3:91:d1:6f:
6a:2c:64:51:a8:e0:fa:e0:da:8b:da:06:85:11:6d:6b:28:a2:
f1:0b:31:df:42:26:a1:f3:7c:51:1a:6c:08:1f:f6:05:0e:f3:
f9:98:0e:1d:7d:2a:45:f8:61:2e:96:06:5b:d6:8a:25:64:7c:
bf:5a:62:4f:73:0d:b5:b2:a0:68:06:d1:be:1b:e5:c0:06:18:
ab:49:26:d2:34:be:24:a1:73:63:75:c9:6d:1e:21:c2:79:87:
18:33:ae:64:50:28:9e:4e:ad:61:2c:92:96:4c:3b:2a:6a:e6:
1b:41:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:19:32 2025 by rpki-client