Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0F0D64575811F09BF59CE7DAE4EC9C.roa
File: 2E0F0D64575811F09BF59CE7DAE4EC9C.roa (raw, json)
Hash identifier: 9bVDgobfqlrn7x21HUaLN+KshycyfIVPMqS2IOzXadU=
Subject key identifier: 6B:3E:E6:7B:29:98:D0:26:8C:10:BA:90:78:83:5B:31:C0:16:37:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01602E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0F0D64575811F09BF59CE7DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:21:09 +0000
ROA not before: Wed 02 Jul 2025 15:21:04 +0000
ROA not after: Wed 13 Aug 2025 15:21:04 +0000
asID: 398478
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90158 (0x1602e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 15:21:04 2025 GMT
Not After : Aug 13 15:21:04 2025 GMT
Subject: CN=68654e65-bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:9f:2f:1e:19:a6:1c:23:8b:6f:31:53:6d:
e4:ae:c1:f9:b2:48:12:87:e2:f8:b9:28:50:71:c0:
32:79:09:49:24:3b:fd:75:e8:b4:d0:98:78:68:ae:
9f:6c:d3:21:0e:80:bc:1c:67:48:ad:ab:bd:94:61:
7e:f8:c5:87:f1:87:b2:74:d5:b8:fa:39:e5:ad:fb:
c6:1e:2a:2b:47:70:fa:42:bb:74:41:a2:cc:8c:09:
c4:c5:7a:4f:da:79:c6:00:53:cd:a4:09:a0:a5:56:
dc:7e:65:bd:ab:e5:14:c0:93:63:ac:8d:5a:9b:d3:
33:e9:1b:92:a8:af:c2:21:fe:54:8b:cb:e6:31:15:
e4:50:bd:4f:1d:5f:38:0d:8a:80:8e:55:1e:e7:fc:
03:6d:1c:c6:de:20:74:12:93:bb:85:d7:7c:1a:fe:
56:ef:56:df:15:4f:95:93:a5:16:34:6d:9c:29:bf:
60:09:cd:61:06:a4:03:d8:c9:d3:e2:67:63:21:1f:
6f:41:f5:d5:ab:29:60:4b:2c:fa:bb:22:2f:af:ed:
21:f0:65:25:1e:c7:5f:78:d6:cb:c5:3e:08:13:aa:
91:72:0c:a9:ad:72:33:45:1d:d3:ef:09:82:1a:59:
48:e8:80:4c:41:26:0c:f5:d9:6c:32:f7:3f:12:cf:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:E6:7B:29:98:D0:26:8C:10:BA:90:78:83:5B:31:C0:16:37:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0F0D64575811F09BF59CE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
a2:de:4a:b5:44:82:66:6c:cc:00:d3:7b:23:29:16:e0:ee:e1:
53:7e:b2:20:6a:02:e8:65:58:72:e0:7e:a9:d9:37:12:60:19:
59:5a:fa:39:8c:22:43:7e:f4:41:95:73:b2:50:bc:a5:8b:5c:
78:f3:92:85:59:e6:8b:9a:c2:fd:43:57:b3:01:94:de:bc:37:
95:23:36:50:58:e9:c2:b9:9b:8d:21:11:d8:7b:73:81:c8:cd:
60:02:18:9a:2d:b7:6e:c7:ea:19:28:29:d5:85:ae:2d:9f:2a:
fb:90:e2:c9:28:3e:65:cb:fc:83:9f:94:a1:42:69:e5:ba:3d:
f3:37:59:04:65:19:77:6b:54:10:46:a9:4b:f6:09:1e:ff:89:
bc:d5:6b:5f:32:19:35:73:d5:12:fc:c8:27:23:3b:5f:36:35:
1a:5c:f6:8a:48:7b:0c:b3:d6:ca:2d:dd:76:92:2c:5f:c8:ee:
17:34:04:6e:fd:79:06:a8:4b:13:44:b8:79:ad:0f:18:5a:c0:
07:bc:d0:78:29:a2:44:01:d4:f1:27:ce:e2:6c:52:09:b0:db:
93:1c:28:8f:dc:cc:1a:e0:16:38:45:87:53:6d:6b:80:5c:35:
e4:f6:60:41:29:00:f9:8b:39:bb:1e:d2:cf:20:ad:9a:32:0e:
f7:72:29:97
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAWAuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAyMTUyMTA0WhcNMjUwODEzMTUyMTA0WjAYMRYw
FAYDVQQDEw02ODY1NGU2NS1iZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIWfLx4Zphwji28xU23krsH5skgSh+L4uShQccAyeQlJJDv9dei00Jh4
aK6fbNMhDoC8HGdIrau9lGF++MWH8YeydNW4+jnlrfvGHiorR3D6Qrt0QaLMjAnE
xXpP2nnGAFPNpAmgpVbcfmW9q+UUwJNjrI1am9Mz6RuSqK/CIf5Ui8vmMRXkUL1P
HV84DYqAjlUe5/wDbRzG3iB0EpO7hdd8Gv5W71bfFU+Vk6UWNG2cKb9gCc1hBqQD
2MnT4mdjIR9vQfXVqylgSyz6uyIvr+0h8GUlHsdfeNbLxT4IE6qRcgyprXIzRR3T
7wmCGllI6IBMQSYM9dlsMvc/Es934wIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFGs+
5nspmNAmjBC6kHiDWzHAFjcYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTBGMEQ2NDU3NTgxMUYwOUJGNTlDRTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQFnOOgMAwDBASc5bADBAWc5cAD
BAWc/GAwDAMEBJz8kAMEBJz8oDANBgkqhkiG9w0BAQsFAAOCAQEAot5KtUSCZmzM
ANN7IykW4O7hU36yIGoC6GVYcuB+qdk3EmAZWVr6OYwiQ370QZVzslC8pYtcePOS
hVnmi5rC/UNXswGU3rw3lSM2UFjpwrmbjSER2HtzgcjNYAIYmi23bsfqGSgp1YWu
LZ8q+5DiySg+Zcv8g5+UoUJp5bo98zdZBGUZd2tUEEapS/YJHv+JvNVrXzIZNXPV
EvzIJyM7XzY1Glz2ikh7DLPWyi3ddpIsX8juFzQEbv15BqhLE0S4ea0PGFrAB7zQ
eCmiRAHU8SfO4mxSCbDbkxwoj9zMGuAWOEWHU21rgFw15PZgQSkA+Ys5ux7SzyCt
mjIO93Iplw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:54 2025 by rpki-client