Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1166E5FC76B511F097D20192DAE4EC9C.roa
File: 1166E5FC76B511F097D20192DAE4EC9C.roa (raw, json)
Hash identifier: bkctsVWoOke6eHdCUWpzz8HbT/jTs5kPlTmgYDd9Ng0=
Subject key identifier: 95:AC:45:8C:6A:2E:D0:29:F6:FA:24:12:6E:B5:4E:56:DE:71:4F:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1166E5FC76B511F097D20192DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 13:14:10 +0000
ROA not before: Mon 11 Aug 2025 13:14:06 +0000
ROA not after: Mon 15 Sep 2025 13:14:06 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92716 (0x16a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 13:14:06 2025 GMT
Not After : Sep 15 13:14:06 2025 GMT
Subject: CN=6899eca2-ee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:c6:37:49:e4:0b:1c:85:15:f4:2d:80:db:
47:33:dd:91:a0:b7:45:0a:c1:89:21:bd:1f:c5:41:
d9:f3:99:80:d1:ff:db:a1:72:8e:e8:6d:69:8b:02:
a8:72:5f:4d:09:51:be:86:8f:ef:56:07:41:c1:c7:
ae:4e:d4:bb:2c:6f:d7:98:08:72:08:91:98:8a:28:
83:09:79:f6:75:ff:08:58:62:3e:fd:a0:58:3c:75:
9f:16:61:27:1e:3c:42:13:c0:81:3e:37:70:0a:d0:
f9:e5:dd:57:ea:27:1a:59:7f:04:d9:64:4e:87:cd:
8b:50:07:1a:3a:ca:b0:27:e1:31:77:7e:7f:44:74:
fe:90:5c:46:51:68:4b:59:41:6e:db:33:60:e4:ca:
bf:fa:33:dc:8e:ff:b3:74:8f:e4:71:66:c6:c1:57:
8b:19:9e:0d:d5:3b:8b:06:4c:de:c2:ce:b9:1f:09:
1d:a9:f5:71:64:71:db:2a:8b:f3:06:a8:72:a7:3b:
c6:2b:81:dc:09:dc:98:fa:c1:ab:a4:29:c3:d9:71:
b4:44:ac:83:1a:3b:14:62:74:33:51:b8:98:f6:b7:
39:b0:87:df:db:eb:9c:2d:59:91:64:db:8a:ce:d9:
4a:c9:a4:b3:c5:15:cb:6a:d9:81:5b:26:0e:c5:22:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:45:8C:6A:2E:D0:29:F6:FA:24:12:6E:B5:4E:56:DE:71:4F:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1166E5FC76B511F097D20192DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
56:6b:7c:a1:29:54:18:f5:e8:8f:e5:74:c0:6b:d4:c9:9b:8f:
9c:d0:4c:29:ff:cb:c0:f7:c7:5d:32:e9:fe:39:84:9e:e6:6d:
1f:05:92:3b:f5:8a:64:60:54:06:cb:3c:70:30:31:d3:cd:b3:
98:2b:c8:09:b0:f9:62:3c:48:89:13:95:b8:8c:01:8f:fa:1a:
ab:25:d4:60:9a:13:5d:d0:e1:7a:45:1d:00:32:00:f3:35:85:
7e:3a:29:b6:4c:4c:42:f0:e7:73:3a:56:35:96:1e:b4:9f:63:
0e:e3:d2:60:f2:a9:41:af:0c:78:b6:17:01:a1:2d:01:6d:c1:
35:47:ae:93:c1:7e:ac:1d:4d:78:39:9c:27:27:fc:db:22:b5:
5f:a0:8b:e9:3e:96:bc:fa:54:36:e0:aa:20:c6:d6:51:c4:3b:
c2:c8:82:7c:c9:85:35:31:d1:cf:5d:d4:2c:e4:9e:5b:92:4b:
78:f3:90:db:b3:6e:f7:85:e9:a8:18:2b:db:80:0b:eb:6b:9c:
6f:e7:f2:17:e9:c9:a0:d3:ee:3a:6b:f0:88:be:03:28:de:c0:
59:2b:c0:ee:55:ff:69:02:91:a2:9f:0b:a8:83:27:ba:78:07:
22:cc:fe:94:ea:a2:ec:d3:2c:e3:c9:8a:fa:90:b7:08:3d:e1:
1c:20:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:07 2025 by rpki-client