Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFE22BA076BB11F0A2269CB9DAE4EC9C.roa
File: AFE22BA076BB11F0A2269CB9DAE4EC9C.roa (raw, json)
Hash identifier: UpQPSQ6gQJOcEkoQSHrS3EB4UF4Dp3XXEKfyNfkXCyo=
Subject key identifier: 38:83:DF:6F:C7:2E:CE:E6:5B:61:A8:CC:20:3B:D3:8B:F9:E3:4A:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFE22BA076BB11F0A2269CB9DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 14:01:33 +0000
ROA not before: Mon 11 Aug 2025 14:01:28 +0000
ROA not after: Tue 16 Sep 2025 14:01:28 +0000
asID: 22773
IP address blocks: 156.238.143.0/24 maxlen: 24
156.238.145.0/24 maxlen: 24
156.238.146.0/24 maxlen: 24
156.238.147.0/24 maxlen: 24
156.238.148.0/24 maxlen: 24
156.238.149.0/24 maxlen: 24
156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.153.0/24 maxlen: 24
156.238.161.0/24 maxlen: 24
156.238.163.0/24 maxlen: 24
156.238.164.0/24 maxlen: 24
156.238.165.0/24 maxlen: 24
156.238.166.0/24 maxlen: 24
156.238.167.0/24 maxlen: 24
156.238.168.0/24 maxlen: 24
156.238.169.0/24 maxlen: 24
156.238.170.0/24 maxlen: 24
156.242.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92726 (0x16a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:01:28 2025 GMT
Not After : Sep 16 14:01:28 2025 GMT
Subject: CN=6899f7bd-4ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:2b:4c:b2:80:16:79:c2:34:3d:c0:a3:63:
c6:cb:8e:2f:bf:5e:98:0d:8b:ca:bc:59:1d:1d:db:
9d:ed:7c:de:09:d4:ce:1a:de:0a:c7:8d:37:f2:96:
58:c9:d9:74:ad:c5:5a:69:8b:07:06:8a:c7:34:00:
34:a5:e1:cd:49:d9:14:30:06:b7:c0:c2:39:87:5e:
46:93:bb:20:7d:8c:cc:58:5c:13:fb:dc:7e:2f:0c:
04:46:b6:f2:02:52:2e:af:d0:6d:b8:38:28:e9:85:
1d:f2:3b:a4:12:0b:c3:f4:2a:c3:df:f8:ae:05:7a:
a9:f0:93:40:d1:0a:59:94:b0:e2:c2:67:55:b0:d9:
68:62:5a:ba:89:6e:a3:b0:fb:60:ea:f1:8d:16:65:
77:a8:8a:60:ea:8f:ea:d3:65:72:c3:c1:69:b9:eb:
f7:c5:93:24:6f:99:b6:b8:0e:39:8a:d4:8f:18:19:
dc:8f:d3:2b:03:a2:6a:79:c2:16:d0:6a:9d:51:f9:
05:17:a8:aa:61:ba:c1:e6:21:6a:6d:3f:9e:98:d7:
ee:d4:26:30:4c:e0:78:f4:a7:75:1d:07:3e:71:4e:
1e:61:47:68:d4:2f:74:a4:25:dc:c4:5c:d2:19:77:
7a:ec:2f:3f:de:b5:90:48:9c:84:de:32:48:45:33:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:DF:6F:C7:2E:CE:E6:5B:61:A8:CC:20:3B:D3:8B:F9:E3:4A:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFE22BA076BB11F0A2269CB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.143.0/24
156.238.145.0-156.238.153.255
156.238.161.0/24
156.238.163.0-156.238.170.255
156.242.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f9:9f:e7:3c:f0:3a:a3:98:1f:c9:d5:d4:fd:df:18:af:d5:
54:0f:20:b9:47:e5:12:23:45:4c:a1:50:44:a0:c0:f8:c8:c3:
31:25:28:68:e4:c8:ab:e1:41:51:c5:a1:af:37:50:c1:2e:b8:
4e:e4:cf:03:f7:cf:f0:61:0b:55:ea:f2:9d:ea:05:06:0b:49:
1c:ba:5d:4e:25:92:86:f8:42:7f:8a:35:bb:6f:94:16:b2:36:
0a:f7:e7:42:34:14:51:56:04:11:02:ff:77:1a:13:72:b5:6f:
9e:29:66:de:90:02:ab:16:64:6d:cc:0c:31:4f:44:f6:ee:4a:
92:03:dd:e0:dd:ca:5e:07:cd:e7:65:05:1a:39:44:64:78:59:
2c:cc:a7:fb:6c:72:22:f9:5b:bd:a3:a0:d6:a9:04:c4:0a:05:
be:9b:61:11:1b:9c:38:f8:b2:05:e6:79:d3:d0:bd:45:fa:df:
40:25:67:be:da:5b:9b:9f:eb:e8:55:56:b9:74:8b:03:77:7c:
fc:c0:e9:ef:3e:a8:d3:38:ef:ea:18:fa:35:57:f8:47:4a:98:
f6:c2:ae:e1:2d:6d:59:5b:9c:f5:89:93:df:dc:bf:82:9b:11:
80:a5:7a:0b:fe:71:98:d9:b1:cb:1e:38:94:9d:8a:11:e2:61:
ab:c7:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:09 2025 by rpki-client