Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E8F95C76BE11F09FBC0AC7DAE4EC9C.roa
File: 03E8F95C76BE11F09FBC0AC7DAE4EC9C.roa (raw, json)
Hash identifier: vT4eF7jYntk+KL7TiTaC65KhVXbWf2EHyDkj6bcdJyk=
Subject key identifier: 26:31:2B:48:C3:D5:96:6D:DF:5F:C6:E1:C8:3F:FD:E9:3B:6A:04:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E8F95C76BE11F09FBC0AC7DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 14:18:13 +0000
ROA not before: Mon 11 Aug 2025 14:18:08 +0000
ROA not after: Tue 16 Sep 2025 14:18:08 +0000
asID: 22773
IP address blocks: 156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
156.243.193.0/24 maxlen: 24
156.243.194.0/24 maxlen: 24
156.243.195.0/24 maxlen: 24
156.243.196.0/24 maxlen: 24
156.243.197.0/24 maxlen: 24
156.243.198.0/24 maxlen: 24
156.243.199.0/24 maxlen: 24
156.243.200.0/24 maxlen: 24
156.243.201.0/24 maxlen: 24
156.243.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92730 (0x16a3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:18:08 2025 GMT
Not After : Sep 16 14:18:08 2025 GMT
Subject: CN=6899fba5-0659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:69:fa:df:fc:49:4f:54:67:58:90:29:3b:
16:b2:3b:2d:b5:e9:84:5f:c5:bd:e7:f9:1d:b7:4c:
b2:3e:cb:d9:e3:f4:88:02:c2:11:b6:88:0e:1d:a8:
e5:df:86:01:ee:b6:4b:ad:39:15:db:e0:52:39:8a:
b2:f3:51:5d:4c:b0:5d:a8:ef:4f:48:a6:39:20:ef:
2a:55:26:16:c8:66:de:c6:ec:71:fc:4a:f6:05:fb:
df:de:7e:dd:57:df:82:76:3c:34:5e:d1:1a:0b:79:
9a:cb:cf:1f:e9:5c:92:69:95:b5:ad:69:00:ac:b6:
ee:18:69:84:9b:50:cf:fe:f4:e6:80:eb:b3:c0:e1:
a1:09:f3:dc:a9:9e:04:8f:20:4d:f2:74:3f:a8:29:
08:05:e2:56:2f:a7:e1:84:d7:b1:7c:37:b7:b1:6e:
06:e4:8f:40:76:f9:59:d1:4b:07:fe:76:fc:9a:cc:
19:f6:27:db:ae:1f:ec:90:3f:70:17:82:cd:5c:65:
e4:48:c3:1c:de:c6:1b:09:79:12:0c:40:fc:57:f7:
d0:cc:05:34:62:17:aa:74:1c:7f:13:02:a2:8f:d8:
54:1e:de:6a:31:bb:58:dc:c3:53:ca:40:ed:2a:fd:
2f:d5:ad:02:25:ab:eb:65:cb:bc:94:ec:a6:67:ff:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:2B:48:C3:D5:96:6D:DF:5F:C6:E1:C8:3F:FD:E9:3B:6A:04:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E8F95C76BE11F09FBC0AC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.23.0/24
156.242.28.0/22
156.242.48.0-156.242.50.255
156.242.52.0/23
156.243.193.0-156.243.202.255
Signature Algorithm: sha256WithRSAEncryption
45:31:04:38:3d:c1:93:d4:af:6a:c1:63:2c:2c:c8:33:dd:cf:
ae:f8:22:c2:8a:ef:70:3e:7a:e3:93:4e:2a:34:51:12:03:d3:
3a:e4:47:be:7c:e6:90:1d:ca:b8:ec:dc:60:dc:25:db:8b:48:
bb:c9:15:7c:3d:26:80:ab:90:b1:0a:cd:08:f4:fe:36:6e:dc:
0f:b8:24:50:27:d3:07:12:67:1d:1d:41:56:6a:ea:6c:ec:75:
f0:3e:25:e1:e9:02:1f:db:d1:3f:89:c4:95:bd:ec:d2:18:c2:
71:21:ab:b8:19:80:95:c7:db:39:d9:28:9c:9d:f5:7c:78:9d:
9b:b5:3a:9f:94:19:64:4a:6f:9b:c2:0a:56:19:94:f0:11:d4:
89:94:7c:24:b1:05:ab:a3:d3:55:41:36:62:ef:64:3b:63:e6:
19:82:08:48:b8:17:26:41:46:63:25:1b:69:03:2e:c4:ab:a1:
d2:5c:58:55:2b:13:7f:0e:1a:e9:a3:1c:c4:50:7a:51:df:88:
43:9b:5d:b7:7a:bc:93:81:c5:ef:f0:98:90:4b:03:92:bc:28:
62:50:3f:d3:ef:b2:ec:a7:de:b2:e0:ce:dd:d0:f6:a2:75:ea:
48:de:e5:52:cc:7b:da:1d:a2:02:c4:d8:ec:3d:54:ed:fb:57:
e1:6b:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:45 2025 by rpki-client