Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F410DA9A42CE11F0B4A400BCDAE4EC9C.roa
File: F410DA9A42CE11F0B4A400BCDAE4EC9C.roa (raw, json)
Hash identifier: PCxAvkaKuA0dNTYxRpWE7oOCkz1uDZGofSGQND/yFMg=
Subject key identifier: 26:03:32:90:7B:97:65:9C:D7:A4:9B:C2:03:A6:64:C5:0E:2F:35:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F410DA9A42CE11F0B4A400BCDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:08:28 +0000
ROA not before: Fri 06 Jun 2025 12:08:22 +0000
ROA not after: Sun 31 Aug 2025 12:08:22 +0000
asID: 399077
IP address blocks: 156.240.202.0/24 maxlen: 24
156.240.203.0/24 maxlen: 24
156.240.204.0/24 maxlen: 24
156.240.205.0/24 maxlen: 24
156.240.206.0/24 maxlen: 24
156.240.207.0/24 maxlen: 24
156.240.208.0/24 maxlen: 24
156.240.209.0/24 maxlen: 24
156.240.210.0/24 maxlen: 24
156.240.211.0/24 maxlen: 24
156.240.212.0/24 maxlen: 24
156.240.213.0/24 maxlen: 24
156.240.214.0/24 maxlen: 24
156.240.215.0/24 maxlen: 24
156.240.216.0/24 maxlen: 24
156.240.217.0/24 maxlen: 24
156.240.218.0/24 maxlen: 24
156.240.219.0/24 maxlen: 24
156.240.220.0/24 maxlen: 24
156.240.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88576 (0x15a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 12:08:22 2025 GMT
Not After : Aug 31 12:08:22 2025 GMT
Subject: CN=6842da3c-4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:be:7f:af:d0:76:ab:00:0d:3d:47:90:59:
ce:12:a4:61:43:03:71:b7:e7:ed:ca:33:d2:39:6f:
ab:f8:aa:bf:28:2d:e6:cc:42:b1:ef:f5:33:fb:6d:
e4:ad:02:35:69:25:0c:de:81:2b:03:98:d0:74:08:
5d:db:80:e6:63:46:5f:56:b7:f8:34:bb:b9:89:5d:
d7:c7:46:f6:63:80:32:6d:91:26:2e:b6:6c:8c:91:
c3:31:d0:1b:b3:6a:aa:24:9b:92:b7:24:20:23:c1:
d1:a9:e5:cb:32:20:a3:df:17:88:a1:52:ff:35:76:
9e:27:89:4a:06:a2:f3:07:ff:f2:e4:a9:67:07:20:
0e:51:9a:80:71:e7:10:a3:6f:34:4b:a7:a1:6f:1b:
13:ea:25:cf:93:90:e7:ae:83:b5:36:99:70:47:7f:
84:9c:e9:14:4d:d5:dd:02:22:e7:37:0a:d9:aa:02:
31:40:f5:9a:58:05:2f:23:8b:79:56:9e:7c:ff:6a:
dc:1e:2f:ef:af:54:60:1c:82:b1:f3:05:de:1c:4e:
91:c6:63:db:2a:c9:1e:e4:ff:ac:3d:06:81:9d:f8:
45:db:44:40:b9:f3:28:8e:09:f0:a2:1b:95:af:9e:
ed:57:79:7a:1f:63:bc:de:fd:f7:0f:db:3d:f0:39:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:32:90:7B:97:65:9C:D7:A4:9B:C2:03:A6:64:C5:0E:2F:35:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F410DA9A42CE11F0B4A400BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.202.0-156.240.221.255
Signature Algorithm: sha256WithRSAEncryption
60:01:ab:45:ab:d3:52:b5:3c:17:ba:a3:6f:05:12:05:89:f2:
e5:48:b3:5d:9d:7f:ad:b9:fc:10:d5:f7:e0:84:6f:66:b1:b7:
48:6c:ef:c7:9e:4c:23:a2:fc:23:98:8a:bc:51:6f:41:01:90:
39:ca:eb:03:79:be:e0:d9:55:3b:66:09:a4:ac:73:2e:9a:02:
05:13:41:fb:fc:7d:6c:79:71:3d:e2:76:0b:fa:81:da:ad:ae:
7f:28:97:a4:3c:d3:f8:c2:6d:b7:35:56:ca:9b:dc:8c:93:8c:
28:3e:5e:39:78:5e:da:87:b1:2e:0c:7c:33:26:ea:98:23:c0:
93:17:d5:aa:5a:58:c5:41:a7:22:e7:45:30:49:f6:d8:14:25:
06:15:86:42:e8:03:97:dd:c8:a8:e8:17:86:83:b4:b6:f0:83:
06:ae:2f:2a:f5:a9:7e:d1:77:29:64:87:e6:f3:1a:21:c5:c2:
b8:f5:a6:06:da:19:b7:4c:22:18:e3:60:7c:f6:fc:42:a1:ad:
e3:5c:3f:cf:0d:ee:bc:16:ca:29:01:8b:16:78:75:a4:67:20:
a2:ec:e1:71:96:22:e6:ec:2b:c6:d3:fd:81:90:ae:16:f3:2a:
e2:30:49:02:50:3e:86:90:df:74:03:db:6c:56:d7:64:ec:39:
02:60:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:02:18 2025 by rpki-client