Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890987707CD911F0940998A7DAE4EC9C.roa
File: 890987707CD911F0940998A7DAE4EC9C.roa (raw, json)
Hash identifier: WE1BXe0njxI8Vpu/5xSE/+ZYTZRHXlUpDvx0oM//qO0=
Subject key identifier: 74:C7:0A:35:6E:CF:6C:EE:61:00:84:72:3B:61:3F:09:27:DB:3E:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890987707CD911F0940998A7DAE4EC9C.roa
Signing time: Tue 19 Aug 2025 08:50:20 +0000
ROA not before: Tue 19 Aug 2025 08:50:15 +0000
ROA not after: Wed 24 Sep 2025 08:50:15 +0000
asID: 214413
IP address blocks: 156.229.56.0/22 maxlen: 24
156.233.216.0/22 maxlen: 24
156.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93182 (0x16bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 08:50:15 2025 GMT
Not After : Sep 24 08:50:15 2025 GMT
Subject: CN=68a43acc-dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:c5:a1:ea:8c:29:a6:01:3d:ec:71:a8:46:
20:b5:dc:e8:85:39:ae:67:dc:66:42:1b:7d:c2:71:
91:3e:a1:cd:94:f3:fa:66:90:48:12:14:88:b2:c5:
0f:31:8d:5d:94:ac:49:be:e0:e2:9d:31:ea:25:5f:
df:51:1e:f9:57:81:1c:43:29:25:fa:fe:ed:d2:b7:
13:37:9e:64:cf:a0:66:11:33:4b:53:96:e8:12:cd:
6a:33:77:d4:1d:06:66:ee:e9:e8:87:05:68:a5:6a:
c4:33:1c:4f:0f:8c:5a:30:1b:2e:0d:02:c8:a2:d6:
58:f9:00:4d:e2:39:87:34:97:d6:40:a6:86:cf:9f:
b1:2a:ec:3a:d3:c1:68:4f:45:fc:fc:20:44:41:c2:
b0:db:4c:15:cf:88:6f:40:c0:30:38:d2:ad:b6:6e:
5d:c5:8c:45:f6:55:26:dc:44:f0:21:c4:b5:c3:25:
24:91:ba:eb:6a:f7:26:ad:79:67:34:0f:fa:12:65:
14:cc:06:6d:6a:23:a6:c0:ba:be:66:09:24:f7:a8:
a2:87:12:57:86:26:df:16:a5:3c:77:7b:70:00:46:
76:23:3c:fc:56:fb:a5:85:ec:3b:9d:9d:83:d8:b5:
cc:99:f1:01:54:5a:64:85:7f:77:af:b4:3a:56:05:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:0A:35:6E:CF:6C:EE:61:00:84:72:3B:61:3F:09:27:DB:3E:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890987707CD911F0940998A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/22
156.233.216.0/22
156.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:4b:0f:aa:12:35:94:e4:12:42:aa:73:cd:74:f4:93:60:0f:
fd:b4:32:8c:ad:36:8c:27:f7:5d:b2:80:8e:c7:d4:a8:20:79:
ce:32:e9:9e:df:c7:67:f4:de:38:3c:f2:62:e3:ca:61:21:4f:
be:05:98:b1:fa:69:1a:79:0c:7f:d1:5b:1b:4e:ac:ea:fa:12:
c7:80:9a:a2:80:60:bf:6c:69:a0:ea:0f:86:ba:87:75:64:b4:
12:e4:3b:51:df:51:d2:42:17:d7:ba:5d:2e:01:e9:ed:b3:12:
24:2d:e8:83:14:b6:b4:a1:3c:33:9b:8d:b2:13:43:7d:cd:e4:
6a:70:23:ca:d2:0c:c5:90:9f:5e:ab:96:8c:9d:a3:af:a1:18:
35:91:6b:09:07:b9:5b:98:b9:39:1a:e0:84:63:d2:22:63:31:
6a:52:f3:ef:42:fb:d0:53:c5:c9:57:93:15:d2:b4:61:60:19:
93:e7:8f:47:b6:cb:d9:2d:41:d0:da:f9:4e:37:ef:3d:fb:39:
76:8e:ea:76:77:6e:6d:7b:9f:52:3f:75:53:a7:48:22:3f:f7:
ca:b7:8b:43:14:45:45:53:ba:17:61:61:aa:18:8f:6d:62:f8:
a2:fb:01:b8:1b:13:ba:64:ca:e5:ab:40:83:01:35:df:6f:31:
05:15:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:03 2025 by rpki-client