Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2E28B678E511F09E80ECDDDAE4EC9C.roa
File: BB2E28B678E511F09E80ECDDDAE4EC9C.roa (raw, json)
Hash identifier: jti1rg14bAKTy51eSJX+LoGw5YMisr7/xaH7gQhybkU=
Subject key identifier: CE:15:C8:6F:EF:39:22:24:13:A6:A5:9B:78:9A:43:3F:FA:90:8B:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016ADC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2E28B678E511F09E80ECDDDAE4EC9C.roa
Signing time: Thu 14 Aug 2025 08:07:33 +0000
ROA not before: Thu 14 Aug 2025 08:07:27 +0000
ROA not after: Sun 24 Aug 2025 08:07:27 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 08:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92892 (0x16adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 08:07:27 2025 GMT
Not After : Aug 24 08:07:27 2025 GMT
Subject: CN=689d9945-32d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:8b:da:bc:0a:88:c1:47:dc:93:4d:55:17:
95:e8:b4:f0:11:d5:c3:0d:28:94:e4:92:3b:ec:3c:
45:b1:00:01:0d:06:83:56:5d:ac:6c:a4:8c:ab:b1:
64:da:23:b5:8e:23:64:da:5f:90:6b:12:42:e9:b1:
39:d9:1d:55:62:1c:39:fb:44:19:7a:b5:d2:43:3a:
55:ab:4e:cc:6f:e0:33:98:6d:3a:9e:8e:0a:40:e5:
cc:b6:54:13:c6:c1:48:bb:7f:ec:ed:60:88:75:df:
56:14:26:0c:eb:50:88:39:f3:90:77:49:62:30:3a:
28:e0:7e:c0:29:58:22:c1:54:54:1c:54:ce:a3:f8:
12:75:82:95:29:d6:1d:c3:2d:01:cd:3f:a9:85:ed:
4f:75:c2:96:e9:1f:9b:18:80:c7:6d:97:77:cb:fe:
1e:84:e9:11:5f:52:8b:26:6f:1b:36:b3:53:88:bb:
62:16:1f:a2:52:e1:aa:69:56:ad:5d:6c:32:80:c3:
63:0d:b1:84:e1:bd:54:a7:4d:9e:9c:ee:dc:ef:56:
99:de:75:b4:99:28:6f:03:02:f7:2e:fe:62:77:b5:
94:54:a9:b4:ac:91:9e:50:47:d9:5d:cc:f1:50:0f:
06:3d:9f:bb:7a:d3:4c:3c:42:c2:4a:47:cf:25:5e:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:C8:6F:EF:39:22:24:13:A6:A5:9B:78:9A:43:3F:FA:90:8B:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2E28B678E511F09E80ECDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.51.255
Signature Algorithm: sha256WithRSAEncryption
15:fe:8d:cd:1f:5c:af:06:44:71:84:c6:af:17:de:32:61:7b:
23:6b:df:fc:fb:96:23:6d:88:ab:52:d2:66:27:10:f0:b0:e9:
71:48:66:33:60:5e:5f:89:e0:24:c8:50:f4:08:c3:10:7a:1e:
2d:7e:72:52:60:ba:1a:c3:ab:26:db:0f:25:c8:ce:5e:d6:3b:
97:9c:65:1d:ab:d0:38:9a:9e:88:c3:90:0b:7d:70:cd:5a:3c:
c4:77:8b:02:48:40:70:0a:4f:9e:1c:c9:7c:44:65:b5:dc:b9:
15:22:ac:85:56:f6:12:15:7c:ad:72:d6:01:25:54:9f:fa:03:
03:f3:91:c0:66:80:5a:d0:4b:70:1c:dd:90:98:a1:5c:70:ce:
84:74:bc:c5:70:e8:6c:c5:9f:df:34:0b:1f:e3:47:45:73:78:
9a:43:3a:de:95:42:73:38:86:87:fb:1d:9d:05:b7:2d:f0:c5:
7f:de:e2:7c:54:4f:c8:0b:87:de:8a:e7:75:37:43:76:f9:a9:
17:23:4c:f8:cb:a2:29:3d:ef:6e:87:b2:fa:4b:f7:3d:47:39:
87:31:fe:03:73:da:ab:90:c2:65:b4:da:45:87:41:17:70:9c:
5c:c0:43:fa:b2:5a:13:e4:59:93:22:ef:33:9b:b2:63:92:86:
6d:15:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:17 2025 by rpki-client