Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C3491C5AFE11F0A7E2AEB2DAE4EC9C.roa
File: 13C3491C5AFE11F0A7E2AEB2DAE4EC9C.roa (raw, json)
Hash identifier: QuLNpz6XsXt2q2rr+vNjWIfWLhx4qLB/mICbP+3cMvI=
Subject key identifier: DA:18:8B:2F:96:0B:45:05:01:20:EB:DD:F9:D6:0C:BD:95:4A:61:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C3491C5AFE11F0A7E2AEB2DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 06:46:15 +0000
ROA not before: Mon 07 Jul 2025 06:46:10 +0000
ROA not after: Fri 25 Jul 2025 06:46:10 +0000
asID: 203020
IP address blocks: 156.229.240.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.241.8.0/21 maxlen: 24
156.241.44.0/22 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.120.0/21 maxlen: 24
156.243.152.0/22 maxlen: 24
156.243.208.0/21 maxlen: 24
156.243.236.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.200.0/22 maxlen: 24
156.244.212.0/22 maxlen: 24
156.244.216.0/21 maxlen: 24
156.248.16.0/22 maxlen: 24
156.248.96.0/22 maxlen: 24
156.249.68.0/22 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.84.0/22 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90784 (0x162a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 06:46:10 2025 GMT
Not After : Jul 25 06:46:10 2025 GMT
Subject: CN=686b6d37-e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:d4:35:e3:56:cc:d2:75:9a:19:8c:d1:66:
6d:bd:16:0c:31:47:08:e0:e7:35:1a:ee:e6:70:cd:
d6:07:13:c0:45:4c:5e:6c:3e:1a:5f:b5:ed:75:8d:
f4:bc:11:c3:2c:d2:d1:d1:d3:14:68:d1:5d:5d:bc:
33:15:82:81:a4:9e:2d:db:dd:77:9b:d7:26:e6:ab:
a8:59:c1:2d:f0:c4:7b:12:e8:dd:43:c8:59:b1:e3:
45:4d:05:82:22:69:d4:42:03:5a:c9:98:eb:f1:55:
fd:99:8b:60:99:3e:cf:c1:9c:6c:59:dd:77:8d:9a:
3d:0c:40:5e:a0:21:20:3d:9f:b4:62:85:61:de:ab:
43:d9:19:fa:39:ff:cb:88:22:ff:ac:6a:84:15:72:
f0:7d:4d:a5:4c:51:96:2e:8c:b4:6b:62:fa:32:8f:
f0:74:cb:06:b7:d1:ef:91:d6:a4:19:fe:01:ae:66:
ad:a2:c7:4b:26:dd:d8:0a:66:80:f6:97:ce:ba:46:
e7:cd:6c:b0:a6:01:f9:21:46:ef:e7:05:f5:e0:65:
cd:43:02:a0:15:24:fb:76:82:c0:00:50:56:c7:db:
f2:2c:56:1d:e3:fc:60:70:1d:24:4d:c2:d4:db:44:
fc:fd:16:88:e3:31:69:97:24:8f:ed:3e:43:3c:44:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:18:8B:2F:96:0B:45:05:01:20:EB:DD:F9:D6:0C:BD:95:4A:61:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C3491C5AFE11F0A7E2AEB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.240.0/22
156.238.184.0/22
156.241.8.0/21
156.241.44.0/22
156.243.40.0/21
156.243.120.0/21
156.243.152.0/22
156.243.208.0/21
156.243.236.0/22
156.244.192.0-156.244.203.255
156.244.212.0-156.244.223.255
156.248.16.0/22
156.248.96.0/22
156.249.68.0-156.249.79.255
156.249.84.0-156.249.95.255
156.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
08:73:e2:c0:fa:8b:62:6b:69:7a:40:49:c9:42:7f:9e:38:ed:
19:df:ed:23:a0:8b:2d:d2:e1:1e:aa:80:5b:53:d7:27:4d:e4:
95:d4:8d:8c:d2:50:57:ef:b1:2b:e4:95:25:81:25:09:d9:b2:
50:01:30:04:93:31:6e:82:ea:f7:15:12:f7:25:4e:d6:df:c1:
8b:07:47:22:51:cd:b2:97:12:e4:7e:c1:e0:0d:d8:e4:ee:70:
a4:83:72:cb:3b:9a:98:73:ea:12:0e:4d:d7:8d:4e:b8:d5:2f:
96:4c:1a:59:f0:1b:65:a4:e0:23:fb:84:df:d1:e1:28:93:82:
a4:ea:3c:8e:81:d4:aa:90:62:60:8f:b7:4c:54:f3:c9:1a:c4:
bb:ca:db:14:a4:6a:a6:da:3f:0d:5d:8f:81:fe:f9:1d:af:35:
bb:f3:c3:2b:2f:d1:36:44:f2:c6:45:08:7f:da:9a:bb:01:1f:
35:22:5e:1b:9c:bb:10:bf:22:4c:00:15:62:57:9f:56:a7:d0:
33:37:08:38:6f:b5:15:71:8f:74:0f:42:26:50:3f:68:48:49:
f6:76:d8:52:53:d3:70:21:e2:ac:b5:6c:65:1d:37:b5:82:79:
86:af:35:98:4a:c1:34:1a:db:1e:1b:e3:91:a9:03:f3:23:96:
e6:bc:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:09 2025 by rpki-client