Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97726A48631B11F0A3D5B2E2DAE4EC9C.roa
File: 97726A48631B11F0A3D5B2E2DAE4EC9C.roa (raw, json)
Hash identifier: UrOr4dNCv/kyKRF9zEEfiacIFtzMMgYRC1J3epQ1vAw=
Subject key identifier: 9A:8B:DC:86:39:11:77:D0:9E:E7:78:DD:16:BE:55:4F:DF:7D:6E:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97726A48631B11F0A3D5B2E2DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 14:37:41 +0000
ROA not before: Thu 17 Jul 2025 14:37:36 +0000
ROA not after: Sun 31 Aug 2025 14:37:36 +0000
asID: 44559
IP address blocks: 156.233.8.0/24 maxlen: 24
156.233.9.0/24 maxlen: 24
156.233.32.0/24 maxlen: 24
156.233.33.0/24 maxlen: 24
156.233.35.0/24 maxlen: 24
156.233.40.0/24 maxlen: 24
156.233.43.0/24 maxlen: 24
156.233.46.0/24 maxlen: 24
156.233.49.0/24 maxlen: 24
156.233.50.0/24 maxlen: 24
156.233.52.0/24 maxlen: 24
156.233.53.0/24 maxlen: 24
156.233.55.0/24 maxlen: 24
156.233.57.0/24 maxlen: 24
156.233.59.0/24 maxlen: 24
156.233.62.0/24 maxlen: 24
156.233.67.0/24 maxlen: 24
156.233.81.0/24 maxlen: 24
156.243.228.0/24 maxlen: 24
156.249.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91624 (0x165e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 14:37:36 2025 GMT
Not After : Aug 31 14:37:36 2025 GMT
Subject: CN=68790ab5-53b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:8a:3e:62:f6:07:90:e2:e3:3c:b9:60:e0:
9e:a6:00:1b:a2:5f:be:41:4a:e6:46:c7:1a:68:c1:
1b:87:cf:f1:63:e5:72:63:7d:04:33:d5:2e:a8:df:
86:08:30:4f:f9:73:2e:b5:5c:0e:1a:9b:96:b1:bd:
b0:37:cd:15:ca:9a:ec:55:2b:69:d7:0b:d9:96:ca:
42:e7:bc:e8:fb:96:69:20:22:41:ca:be:e3:77:92:
07:4f:1a:e6:28:c4:16:41:02:53:11:d6:39:67:6f:
30:53:16:4a:f3:53:a8:04:fa:c8:e0:52:c9:1f:20:
b5:42:1e:c3:7d:09:31:b3:af:8e:c6:b3:59:31:54:
89:24:5a:1d:8c:23:de:ed:f7:4b:92:42:7f:15:c6:
69:6d:04:41:58:14:49:14:26:af:64:6a:a7:70:c2:
1d:51:d7:ab:3b:02:24:b1:8b:18:47:bf:5a:b9:3c:
6f:2f:02:9f:db:df:30:ea:28:64:bf:d5:63:4e:5d:
71:25:03:af:f9:44:7d:19:dd:5d:f5:8f:f5:f5:9f:
a6:09:b7:ac:58:3c:d0:ce:be:6c:13:7c:7d:44:06:
ed:ad:c2:f5:7a:fa:b0:ea:be:b3:f6:ab:86:fb:70:
48:00:78:ef:b4:07:db:33:46:18:2c:56:80:6f:76:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:DC:86:39:11:77:D0:9E:E7:78:DD:16:BE:55:4F:DF:7D:6E:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97726A48631B11F0A3D5B2E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/23
156.233.32.0/23
156.233.35.0/24
156.233.40.0/24
156.233.43.0/24
156.233.46.0/24
156.233.49.0-156.233.50.255
156.233.52.0/23
156.233.55.0/24
156.233.57.0/24
156.233.59.0/24
156.233.62.0/24
156.233.67.0/24
156.233.81.0/24
156.243.228.0/24
156.249.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:69:08:d7:2c:e7:de:14:11:c4:3a:72:e6:fc:e7:16:5b:70:
6a:b7:e5:57:59:0c:30:fa:a0:20:c0:8c:0d:57:b8:7a:9e:67:
5e:e7:f6:cc:15:a4:dc:f2:8e:7c:47:ca:2f:c2:72:4b:5a:cc:
1a:28:29:47:26:74:67:da:9a:1c:ee:43:08:c1:27:7e:22:3e:
17:8c:32:0d:62:37:cc:e3:d1:60:30:9c:18:98:52:48:bd:4f:
fb:b9:6a:fc:8d:ba:5f:5e:f0:d9:65:7e:5e:9b:22:1b:6f:ae:
15:91:f4:c7:a3:b1:da:7b:8a:79:bb:e1:d3:4b:99:b7:f9:9d:
48:81:63:95:8f:ee:36:2f:68:5b:d1:26:8a:10:3e:ad:0c:7d:
4e:1f:b4:1d:bd:03:a6:1d:23:ed:4d:e3:54:e3:0c:2e:ed:c0:
ca:e6:6d:81:2c:0f:8f:42:8c:c7:53:09:2e:84:4f:fe:64:bb:
69:8c:b2:03:92:e8:03:36:a7:9f:3b:d3:73:70:09:d2:6d:fc:
7a:9d:c1:2c:02:c7:bb:05:b8:3e:be:41:cb:3f:48:55:78:3a:
bc:ac:98:48:f5:a8:07:78:c3:4f:4f:ca:a3:56:85:19:47:99:
d6:08:3a:30:cb:8f:d9:fd:6d:6d:ec:2a:e1:8f:af:3e:b9:b6:
0a:55:6c:96
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgIDAWXoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE3MTQzNzM2WhcNMjUwODMxMTQzNzM2WjAYMRYw
FAYDVQQDEw02ODc5MGFiNS01M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqbGKPmL2B5Di4zy5YOCepgAbol++QUrmRscaaMEbh8/xY+VyY30EM9Uu
qN+GCDBP+XMutVwOGpuWsb2wN80VyprsVStp1wvZlspC57zo+5ZpICJByr7jd5IH
TxrmKMQWQQJTEdY5Z28wUxZK81OoBPrI4FLJHyC1Qh7DfQkxs6+OxrNZMVSJJFod
jCPe7fdLkkJ/FcZpbQRBWBRJFCavZGqncMIdUderOwIksYsYR79auTxvLwKf298w
6ihkv9VjTl1xJQOv+UR9Gd1d9Y/19Z+mCbesWDzQzr5sE3x9RAbtrcL1evqw6r6z
9quG+3BIAHjvtAfbM0YYLFaAb3aH7QIDAQABo4IDBTCCAwEwHQYDVR0OBBYEFJqL
3IY5EXfQnud43Ra+VU/ffW44MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzcyNkE0ODYzMUIxMUYwQTNENUIyRTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAZzpCAMEAZzpIAMEAJzpIwME
AJzpKAMEAJzpKwMEAJzpLjAMAwQAnOkxAwQAnOkyAwQBnOk0AwQAnOk3AwQAnOk5
AwQAnOk7AwQAnOk+AwQAnOlDAwQAnOlRAwQAnPPkAwQAnPlmMA0GCSqGSIb3DQEB
CwUAA4IBAQA6aQjXLOfeFBHEOnLm/OcWW3Bqt+VXWQww+qAgwIwNV7h6nmde5/bM
FaTc8o58R8ovwnJLWswaKClHJnRn2poc7kMIwSd+Ij4XjDINYjfM49FgMJwYmFJI
vU/7uWr8jbpfXvDZZX5emyIbb64VkfTHo7Hae4p5u+HTS5m3+Z1IgWOVj+42L2hb
0SaKED6tDH1OH7QdvQOmHSPtTeNU4wwu7cDK5m2BLA+PQozHUwkuhE/+ZLtpjLID
kugDNqefO9NzcAnSbfx6ncEsAse7Bbg+vkHLP0hVeDq8rJhI9agHeMNPT8qjVoUZ
R5nWCDowy4/Z/W1t7Crhj68+ubYKVWyW
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:45:46 2025 by rpki-client