Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C75CF47E6B11F0B88C52F3DAE4EC9C.roa
File: C4C75CF47E6B11F0B88C52F3DAE4EC9C.roa (raw, json)
Hash identifier: tyyT67DNkKhsXXRtlnp3GERfPbQgLhqerv5dDfeiU0k=
Subject key identifier: 2A:BA:DA:FE:C5:BF:DD:50:07:D9:99:DC:16:43:BC:76:88:7F:40:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C75CF47E6B11F0B88C52F3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:49:38 +0000
ROA not before: Thu 21 Aug 2025 08:49:33 +0000
ROA not after: Sat 01 Nov 2025 08:49:33 +0000
asID: 150706
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93645 (0x16dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:49:33 2025 GMT
Not After : Nov 1 08:49:33 2025 GMT
Subject: CN=68a6dda2-a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:21:ec:8e:a4:62:5e:05:78:26:15:89:09:
8e:45:47:f2:36:59:15:1d:c5:a0:b0:08:89:e7:bc:
00:b1:94:c6:d2:9c:12:1b:8e:90:23:cd:11:73:57:
94:09:a4:66:ae:4c:a1:d8:1c:d6:19:7e:58:ba:eb:
2e:f1:fa:03:f8:02:9d:d5:41:b1:90:0a:ce:2b:e5:
db:07:63:f1:58:47:ea:6a:7e:70:56:00:66:f0:30:
0a:cb:e5:f4:98:7b:3b:63:c5:6f:eb:54:3f:c1:45:
8c:32:c3:84:84:e3:61:36:c6:ad:1e:22:a4:6e:a5:
4f:ea:bd:0a:37:d5:05:2e:14:ad:dc:94:11:58:be:
ac:b6:ef:82:e0:43:62:22:78:fe:8a:50:8a:ac:31:
ae:54:e0:ce:0d:a2:06:e2:89:7c:07:74:6d:8e:5d:
08:d9:61:95:3f:ae:f0:28:92:b1:a5:81:23:f4:1a:
e0:ad:a7:62:9f:16:ee:2c:40:6d:6b:a9:d2:32:bf:
49:80:b0:ee:09:43:35:71:0d:57:22:e0:e4:6e:4f:
e8:11:fc:38:cc:08:b1:82:a4:37:0f:40:2e:63:d1:
21:fd:88:b8:43:ee:97:9f:a4:0e:9c:05:91:95:21:
3b:b3:96:ec:05:45:80:03:19:da:3d:6e:9d:d1:67:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:DA:FE:C5:BF:DD:50:07:D9:99:DC:16:43:BC:76:88:7F:40:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C75CF47E6B11F0B88C52F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.116.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:ab:77:7e:d4:bf:bf:7e:c3:01:b1:85:74:6d:23:73:40:11:
50:c5:c1:6d:07:e3:eb:41:3f:a8:ad:47:83:74:7e:e4:cd:08:
48:0f:6d:b4:ac:c0:65:6f:42:e0:61:20:69:bf:cb:16:da:e7:
05:ce:06:c0:3b:54:04:8e:6a:f7:9e:1d:2e:59:de:79:79:0b:
39:ef:a9:71:39:e0:6d:1a:d4:59:0d:89:4b:01:53:00:8c:a5:
0f:80:ea:61:c9:f7:32:d6:56:a5:66:8f:92:bd:f5:d0:c1:3a:
e7:e5:30:14:e9:15:74:c6:ac:1c:ee:4c:a3:17:23:2f:52:2d:
0f:2e:4a:d7:88:ad:f9:4d:33:81:76:d3:b3:21:76:6f:58:4a:
cd:b9:0c:fd:5e:78:10:f1:08:cd:e7:13:94:99:ca:a2:b9:64:
88:7a:ad:60:77:d3:6e:17:7a:cc:34:2a:fb:82:2d:ac:46:0d:
0d:9a:18:64:1d:26:8b:a6:32:5d:ef:39:c9:07:e0:a3:bd:6d:
80:02:d2:40:79:5e:67:f4:68:2c:6e:92:7b:66:10:57:0c:1a:
a5:b1:16:db:67:db:3d:58:a3:79:a2:c9:3b:e7:6d:e3:f9:f8:
eb:d4:7b:69:5d:e0:37:1e:60:98:60:00:f2:f9:f8:cb:71:4c:
66:28:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:51 2025 by rpki-client