Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594743847F4411F0B93EDA86DAE4EC9C.roa
File: 594743847F4411F0B93EDA86DAE4EC9C.roa (raw, json)
Hash identifier: YJ8u3ywTwH+o9GEPNAIzgZ4L7M3ElW+WHui7VCEohUE=
Subject key identifier: 0E:4D:E2:67:E4:2C:ED:0A:C2:22:1C:27:ED:19:FD:82:F6:50:71:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594743847F4411F0B93EDA86DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:39:58 +0000
ROA not before: Fri 22 Aug 2025 10:39:51 +0000
ROA not after: Thu 25 Sep 2025 10:39:51 +0000
asID: 203020
IP address blocks: 156.229.122.0/23 maxlen: 24
156.233.16.0/21 maxlen: 24
156.233.196.0/22 maxlen: 24
156.238.172.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.243.88.0/21 maxlen: 24
156.243.140.0/22 maxlen: 24
156.244.132.0/22 maxlen: 24
156.244.136.0/21 maxlen: 24
156.249.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93872 (0x16eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 10:39:51 2025 GMT
Not After : Sep 25 10:39:51 2025 GMT
Subject: CN=68a848fe-c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:44:e2:a0:32:9c:72:4d:65:9c:60:a5:1e:
8e:2d:d9:77:28:ab:83:f7:47:65:0f:ea:24:06:0e:
e4:fc:6e:e9:fd:6d:3c:35:75:a8:30:30:d0:7c:9a:
78:4a:c7:20:e0:9a:6d:34:df:8b:c8:a2:8e:e3:f3:
80:05:4a:b5:0c:ae:04:20:78:dd:8a:ad:71:e3:41:
ec:3d:fa:e8:47:91:a9:07:fb:c0:b1:20:69:ab:0f:
17:1d:e8:bf:66:7c:d4:f0:f0:e2:a2:00:61:e9:d6:
bc:09:fb:49:02:d2:b1:4f:06:b1:b0:d8:d3:05:e6:
10:72:81:f1:28:55:7d:24:6d:6d:e5:14:1c:30:3d:
d6:eb:0a:f5:71:7f:cc:f5:e1:eb:f5:2b:d2:fb:3c:
fe:73:f0:e1:1a:21:00:13:75:72:06:1c:e2:e5:a0:
7a:56:04:1b:2c:48:50:43:42:45:07:41:20:13:81:
d8:36:4f:c9:0d:12:b1:d8:a1:1e:5b:04:80:83:ec:
84:51:41:40:fc:45:e1:3a:b5:95:e9:05:89:6f:0d:
1f:3c:14:3b:80:c7:8e:7c:b8:ac:93:cf:d6:17:f6:
97:81:d1:c5:4c:2d:20:57:aa:81:e7:f2:95:fc:23:
27:85:61:db:d0:2c:5b:57:58:87:55:e5:0c:f7:d2:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4D:E2:67:E4:2C:ED:0A:C2:22:1C:27:ED:19:FD:82:F6:50:71:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594743847F4411F0B93EDA86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.122.0/23
156.233.16.0/21
156.233.196.0/22
156.238.172.0/22
156.239.136.0/22
156.243.88.0/21
156.243.140.0/22
156.244.132.0-156.244.143.255
156.249.104.0/21
Signature Algorithm: sha256WithRSAEncryption
50:15:f7:2c:0d:da:e1:8e:6f:08:b5:c0:4d:01:e8:34:86:60:
4c:b6:f3:ef:27:dc:3d:d9:e7:f6:b7:92:6b:ca:7f:58:d0:f5:
32:b6:bf:b7:0d:ff:2a:ed:57:38:12:ab:51:f1:9f:e5:70:31:
8f:30:ea:e7:db:e0:c4:5f:e0:af:ea:43:49:b7:66:91:03:4f:
3d:ea:f8:ef:c4:c4:7b:67:b1:97:16:af:cd:6d:6f:16:2b:ce:
36:65:3a:c5:46:2f:e7:6b:82:22:23:00:23:60:1f:64:84:12:
6c:3e:fa:04:fa:41:ec:e5:2b:cc:db:b1:fc:5c:71:24:76:e1:
d7:41:2c:46:eb:d0:8b:48:1a:29:21:2d:56:3a:5e:f5:4f:0d:
3b:7a:00:64:0a:58:d7:78:45:c0:f1:1c:85:34:3a:74:57:6b:
fc:2a:25:74:62:8c:3b:7a:b4:18:94:a9:ae:bb:28:b1:e4:14:
cb:e8:ca:85:41:21:86:ff:85:e5:d9:9e:52:96:5f:f9:d6:e2:
31:8e:d6:bf:14:c9:8a:4c:84:0c:8d:33:f5:64:97:9a:a6:9a:
a8:15:5e:e9:20:2d:77:f0:f0:a6:05:cd:18:f9:d5:a9:3a:96:
6c:4a:c1:69:bc:e2:70:d0:7a:40:f8:80:3a:53:3a:2e:13:99:
f9:b2:39:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:04:15 2025 by rpki-client