Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304047BA754411F096C5AFA9DAE4EC9C.roa
File: 304047BA754411F096C5AFA9DAE4EC9C.roa (raw, json)
Hash identifier: WSG4C+JlWcaT+P5+/rXney/8IyfDnCJ1ongp9XLWRXI=
Subject key identifier: 00:C7:18:A2:0F:DD:D0:A5:D1:B8:CB:08:B3:AA:2B:35:28:DD:6D:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304047BA754411F096C5AFA9DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 17:13:38 +0000
ROA not before: Sat 09 Aug 2025 17:13:32 +0000
ROA not after: Sat 04 Oct 2025 17:13:32 +0000
asID: 203020
IP address blocks: 156.225.6.0/24 maxlen: 24
156.225.69.0/24 maxlen: 24
156.226.7.0/24 maxlen: 24
156.230.63.0/24 maxlen: 24
156.232.4.0/24 maxlen: 24
156.232.5.0/24 maxlen: 24
156.232.108.0/22 maxlen: 24
156.232.112.0/20 maxlen: 24
156.233.2.0/23 maxlen: 24
156.233.4.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.235.0.0/24 maxlen: 24
156.235.24.0/22 maxlen: 24
156.235.30.0/23 maxlen: 24
156.235.32.0/20 maxlen: 24
156.235.64.0/22 maxlen: 24
156.235.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92682 (0x16a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 17:13:32 2025 GMT
Not After : Oct 4 17:13:32 2025 GMT
Subject: CN=689781c2-7a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ae:59:2d:b6:4c:c0:67:7e:e9:9c:2a:49:26:
b2:ef:f1:9d:43:dc:34:34:d3:2c:44:22:04:43:e9:
a0:f1:3b:0c:90:6c:f6:c0:ea:68:dc:eb:f2:82:d8:
70:7c:9c:66:ef:47:05:51:fa:16:bb:87:1c:a9:86:
14:68:ca:c1:25:56:95:1b:6b:b8:57:d0:6a:40:ec:
c9:f3:03:c5:22:a1:0b:c5:75:0f:3d:9d:7e:d9:91:
a6:60:75:5c:f9:fb:de:30:cd:5c:20:75:e9:de:51:
70:67:cf:cf:a2:38:90:05:51:6b:4e:1a:c0:7a:37:
15:6f:2c:23:cb:5a:4b:b9:b0:e8:93:eb:9f:c3:b7:
db:af:1b:a9:04:c4:6a:e7:ca:2b:ed:ce:14:7c:e9:
0f:df:54:7e:81:b9:84:ec:3d:08:5a:63:0b:b1:b0:
4a:79:84:53:e6:46:87:c5:ec:e3:54:0f:78:d6:ef:
e6:c3:c1:be:25:8d:cd:90:d3:b8:2e:d4:60:31:b5:
e0:7b:a3:18:2e:4b:94:1b:36:f0:cc:1c:dc:41:25:
1b:46:a3:b1:83:db:8c:80:c8:ab:ea:bd:cb:95:f1:
c5:4f:9c:4c:de:ff:75:55:e8:05:25:63:3b:18:3e:
e5:0a:86:a7:20:3b:71:29:0c:ce:b0:e2:90:5c:6b:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:18:A2:0F:DD:D0:A5:D1:B8:CB:08:B3:AA:2B:35:28:DD:6D:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304047BA754411F096C5AFA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
156.225.69.0/24
156.226.7.0/24
156.230.63.0/24
156.232.4.0/23
156.232.108.0-156.232.127.255
156.233.2.0-156.233.7.255
156.233.24.0/22
156.235.0.0/24
156.235.24.0/22
156.235.30.0-156.235.47.255
156.235.64.0-156.235.69.255
Signature Algorithm: sha256WithRSAEncryption
1b:87:91:3f:7a:f2:f7:58:7c:ce:29:ee:06:a6:5d:0e:66:fa:
27:f1:84:f5:ec:c1:6d:e9:a5:68:8e:eb:7f:7e:04:6f:98:b2:
fd:80:f0:e4:da:c1:38:6b:d9:c8:26:d4:60:c4:16:4c:e3:7f:
fa:db:b3:71:42:6b:41:02:8b:21:a9:0b:be:0c:86:28:17:3d:
4e:7b:69:44:62:a7:16:b5:a3:93:85:de:ce:2a:3a:15:61:69:
1b:a4:12:a0:3b:a6:ef:23:00:64:0a:3c:d5:3f:e6:29:74:fb:
53:11:7e:20:37:c9:eb:a7:fa:5a:6f:bd:b0:47:34:d1:17:9f:
7c:b0:38:32:00:7a:ac:3c:87:92:3f:5e:7e:76:62:b0:40:f0:
5d:1c:15:41:2c:89:0d:68:72:df:36:72:2e:8b:0d:95:84:4b:
98:80:96:01:b3:8e:23:aa:66:79:b2:3e:79:4d:cb:a1:b1:5a:
3a:70:f9:22:9d:ac:f3:31:88:87:a1:06:66:46:39:fa:6f:1f:
da:d4:a2:a3:d3:ca:4a:89:ac:aa:b5:db:e4:b5:bb:66:74:9b:
ed:18:18:99:7a:ec:f8:24:c2:0d:80:35:bb:25:e3:2c:8b:90:
92:19:b5:a5:90:a8:60:da:8c:3c:df:af:30:59:48:9f:e3:be:
e7:10:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:34 2025 by rpki-client