Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D894CA737011F0AA656DC9DAE4EC9C.roa
File: 33D894CA737011F0AA656DC9DAE4EC9C.roa (raw, json)
Hash identifier: rCo03sDYlhhIJ+OO1vEcB9kR0EKWaDJu2smudZ0QQfQ=
Subject key identifier: 2F:2B:B9:95:11:03:03:55:82:73:33:83:53:B7:45:03:23:BD:AF:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01699D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D894CA737011F0AA656DC9DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 09:23:40 +0000
ROA not before: Thu 07 Aug 2025 09:23:35 +0000
ROA not after: Thu 11 Sep 2025 09:23:35 +0000
asID: 203020
IP address blocks: 156.237.74.0/24 maxlen: 24
156.237.75.0/24 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92573 (0x1699d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 7 09:23:35 2025 GMT
Not After : Sep 11 09:23:35 2025 GMT
Subject: CN=6894709b-f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:22:cd:0d:20:85:43:d9:68:fb:59:f9:7d:
55:2f:b7:29:89:0d:a6:8e:b2:20:04:9a:fb:5d:63:
6c:75:ab:5b:a1:f1:10:0b:bb:00:1c:ea:13:b8:8f:
10:45:36:16:5c:1a:15:75:a7:77:9a:c3:44:43:0d:
c7:36:bb:fd:84:1f:02:dd:8b:49:f5:98:3e:31:28:
4f:06:dd:7c:a8:ce:5d:79:7f:2d:f6:79:24:98:5f:
39:d1:b7:ec:5f:70:83:4f:03:9a:f9:dd:e8:32:32:
cd:dc:82:f7:7c:c8:97:bb:e5:27:36:a9:06:b2:16:
8d:ae:53:a0:26:59:c8:c6:f2:5f:fe:28:0a:4f:9f:
f9:00:85:6a:7d:30:8f:cd:18:e7:04:eb:6f:af:10:
a5:6d:24:99:1c:dc:37:36:d1:a9:7a:36:cd:28:5b:
56:60:5e:1b:37:68:20:b6:b8:5e:2a:86:9c:67:07:
6e:4b:66:2c:2c:91:a3:06:4e:f8:c8:f2:ba:1c:51:
b6:08:5e:87:fb:29:18:7c:1f:ff:cc:ee:6c:1c:b1:
6c:af:b1:14:bc:a7:39:2b:bd:86:70:d3:e0:54:0d:
ea:e0:08:fb:dd:9d:8f:d4:4a:01:65:2a:4c:2e:f8:
4c:3c:4d:16:1d:c3:92:84:2a:85:b8:fd:fc:fb:c8:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:B9:95:11:03:03:55:82:73:33:83:53:B7:45:03:23:BD:AF:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D894CA737011F0AA656DC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.74.0/23
156.241.16.0/20
156.241.60.0/22
Signature Algorithm: sha256WithRSAEncryption
28:a2:52:ab:46:c0:94:d9:18:75:90:00:5f:90:78:88:b9:50:
fc:c7:50:33:a8:27:c3:34:a6:95:cf:3f:fe:8c:fd:9a:b5:bf:
c1:64:23:33:b8:a4:6d:00:76:c5:a9:6e:1f:a3:fd:63:79:0a:
12:1b:47:46:66:3a:93:3e:54:2e:1b:0d:87:36:bd:17:da:ca:
b5:66:a8:26:ad:d1:0e:c3:ee:16:0b:7f:b5:04:74:a5:c4:49:
c8:2f:26:66:2f:80:fe:c5:16:f9:1d:be:d1:26:46:e2:69:55:
1f:55:59:35:be:5f:99:34:f4:a5:61:68:04:63:59:b6:a4:f1:
5b:f0:60:86:3d:9e:21:b8:aa:96:42:a8:53:36:85:fc:8b:f7:
c3:ed:31:8d:2b:6f:33:66:03:73:88:4e:8e:d6:42:6d:15:12:
d1:25:15:04:82:a1:72:d8:de:18:2f:50:e6:df:f8:09:e8:43:
69:8e:b2:5b:e5:59:71:ee:5c:1f:07:6c:27:fd:2c:8b:36:3c:
92:32:fb:2d:09:1b:ea:3b:11:92:32:76:e5:66:dc:86:97:9c:
4e:cc:00:73:5e:2e:33:2d:84:80:2a:5a:41:b5:aa:94:a2:be:
f0:94:06:91:60:b9:8d:a0:4b:d0:78:9c:7c:45:16:ea:24:e9:
e5:7f:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:35 2025 by rpki-client