Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C212A10781711F0A18ACC9FDAE4EC9C.roa
File: 3C212A10781711F0A18ACC9FDAE4EC9C.roa (raw, json)
Hash identifier: fsOkm+5xHLrXuXZAwAzOHVJv2E3dxo8/8VGxSrnTi0Y=
Subject key identifier: 8D:06:1B:75:99:E2:70:04:F5:3B:5C:4D:9B:43:AB:93:AF:67:4E:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C212A10781711F0A18ACC9FDAE4EC9C.roa
Signing time: Wed 13 Aug 2025 07:29:24 +0000
ROA not before: Wed 13 Aug 2025 07:29:19 +0000
ROA not after: Sat 04 Oct 2025 07:29:19 +0000
asID: 203020
IP address blocks: 156.243.247.0/24 maxlen: 24
156.253.136.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.180.0/23 maxlen: 24
156.253.182.0/23 maxlen: 24
156.253.192.0/23 maxlen: 24
156.253.194.0/23 maxlen: 24
156.253.196.0/23 maxlen: 24
156.253.198.0/23 maxlen: 24
156.253.200.0/23 maxlen: 24
156.253.202.0/23 maxlen: 24
156.253.204.0/23 maxlen: 24
156.253.206.0/23 maxlen: 24
156.253.208.0/23 maxlen: 24
156.253.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92823 (0x16a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 07:29:19 2025 GMT
Not After : Oct 4 07:29:19 2025 GMT
Subject: CN=689c3ed4-89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:05:79:fc:33:26:91:fd:b5:2d:e9:b3:c1:
5b:9f:b5:5b:04:3b:f8:77:3e:84:d0:51:38:80:67:
55:e8:af:e1:61:c0:20:74:b3:3b:20:a1:5c:42:7a:
d6:38:0a:7a:7e:96:e9:a0:53:7f:2f:85:b6:12:b0:
62:ca:30:7b:d1:83:a5:05:f1:c5:f4:42:96:21:96:
78:f0:65:c6:ee:d6:b8:04:85:e5:cd:46:74:df:49:
93:b9:e9:86:f9:3e:9e:a5:30:bc:82:9c:f1:4c:04:
7d:94:85:4a:05:7c:17:22:b6:01:28:0f:07:81:e5:
cb:0d:bb:3d:a8:96:d9:c2:b6:f5:88:38:6f:04:cb:
c4:c3:d8:9d:9d:55:55:e8:c6:f8:ac:59:4e:f6:f8:
d1:24:b9:82:11:da:8b:34:7f:5b:e0:a8:d1:97:f9:
c8:ec:c5:ab:27:11:c4:8e:97:eb:da:61:03:a5:bd:
a9:ac:93:90:15:d1:04:a6:af:50:28:f1:c3:d7:21:
77:73:6b:05:42:b0:ff:7e:46:6b:e1:2b:11:2b:3a:
b0:11:9f:a5:76:77:72:d6:c2:dd:b7:1a:15:ba:e9:
c3:7b:53:18:b4:96:e6:b1:06:c7:69:7c:41:6d:08:
87:1a:69:39:06:fa:7e:b7:c1:e5:b4:9e:f7:52:1f:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:1B:75:99:E2:70:04:F5:3B:5C:4D:9B:43:AB:93:AF:67:4E:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C212A10781711F0A18ACC9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.247.0/24
156.253.136.0/24
156.253.163.0/24
156.253.180.0/22
156.253.192.0-156.253.211.255
Signature Algorithm: sha256WithRSAEncryption
b4:43:9c:bc:10:a0:e6:90:6d:52:a4:df:42:e1:9e:2e:58:1c:
1b:64:27:00:ec:d5:d0:15:18:52:d1:78:32:15:a8:fe:dd:31:
be:b5:df:d4:50:92:2e:9c:9d:25:52:ba:d7:4d:98:ff:89:2e:
98:ce:1d:ec:27:50:8b:14:91:94:58:74:38:00:ac:b8:c5:f4:
95:bd:9b:6f:2b:c4:18:9a:f4:79:10:53:a4:b9:fa:cd:95:6e:
82:a7:a7:a2:9e:e8:a8:7a:76:a0:b3:54:f4:1d:d9:a5:30:2d:
e7:4c:4c:0b:88:3f:f9:bb:e6:ec:3d:6f:73:11:81:f7:0e:d2:
ce:12:44:fd:c3:62:8d:42:0c:c1:b3:fd:92:91:4f:c6:73:31:
cd:62:67:17:91:91:0c:9b:59:e5:47:33:de:ee:ec:54:4e:43:
ed:17:e6:e8:1a:80:2e:2c:ba:5d:2e:99:40:36:c9:be:84:d9:
fb:04:d8:19:fd:b9:79:04:2d:42:7e:a7:07:93:dd:18:8c:99:
74:43:bb:dc:06:7d:10:49:61:8f:17:9d:73:c0:29:3c:62:79:
2e:fe:96:1e:aa:2d:2f:d4:f2:0d:e6:4c:26:46:d0:f2:31:e7:
63:cf:82:47:3f:7f:99:7d:cf:68:c9:57:9f:5d:1e:fa:1f:8f:
32:8e:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:57 2025 by rpki-client