Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/987F46B25CA011F0ABC5C2D7DAE4EC9C.roa
File: 987F46B25CA011F0ABC5C2D7DAE4EC9C.roa (raw, json)
Hash identifier: oisrgUKrULuEuXqU1/7vi3gq5U7OHks210bhK0zfo0Y=
Subject key identifier: 47:08:64:41:58:EF:F3:D0:EA:9D:4E:3E:7B:74:D4:BC:21:5F:4B:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01637D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/987F46B25CA011F0ABC5C2D7DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 08:42:08 +0000
ROA not before: Wed 09 Jul 2025 08:42:02 +0000
ROA not after: Thu 21 Aug 2025 08:42:02 +0000
asID: 203020
IP address blocks: 156.233.12.0/22 maxlen: 24
156.233.36.0/22 maxlen: 24
156.233.76.0/22 maxlen: 24
156.233.112.0/22 maxlen: 24
156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.32.0/21 maxlen: 24
156.241.60.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.244.132.0/22 maxlen: 24
156.244.136.0/21 maxlen: 24
156.248.32.0/19 maxlen: 24
156.251.96.0/20 maxlen: 24
156.251.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91005 (0x1637d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 08:42:02 2025 GMT
Not After : Aug 21 08:42:02 2025 GMT
Subject: CN=686e2b5f-2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:72:14:91:bd:b4:35:5e:54:7b:d6:96:1f:
c5:79:ed:0d:73:91:7d:91:f5:24:0c:f5:40:2f:58:
11:8e:ab:e0:5e:7c:0d:c2:71:90:8e:cd:ff:10:6b:
da:81:cc:3b:f8:98:88:b4:bf:07:6b:fe:39:bf:1c:
6f:54:b7:3a:10:4a:23:97:56:b8:93:e8:05:6d:8c:
68:98:4c:9e:a4:98:31:17:f4:35:12:07:88:f6:9d:
12:ba:9f:00:6d:c1:a7:7e:a3:ae:e7:68:48:08:29:
ae:3e:29:91:f9:17:b0:4b:6f:2a:ce:b5:a0:24:bc:
29:66:fa:23:9e:ee:b9:17:7c:bb:8c:56:20:ab:c5:
7c:e0:71:f7:f2:06:23:d5:b6:e4:d5:6e:c5:39:c0:
57:61:6c:54:54:6d:7e:45:0c:7c:48:e6:5e:8c:f5:
5f:29:b4:c4:07:45:4a:9a:b9:84:17:e6:14:37:f7:
cf:ab:6b:28:aa:3b:eb:2a:fc:e4:6d:d7:9c:f4:4f:
87:29:2e:ac:97:b1:72:9e:c7:c2:83:37:05:f6:24:
24:71:c9:d2:d1:97:80:80:d6:7b:80:ab:5d:38:3f:
25:85:93:5c:71:18:7f:b2:3c:cc:c3:c4:35:cf:31:
3f:21:ff:9a:c0:a6:b0:35:15:f1:53:12:9c:5b:75:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:64:41:58:EF:F3:D0:EA:9D:4E:3E:7B:74:D4:BC:21:5F:4B:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/987F46B25CA011F0ABC5C2D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/22
156.233.36.0/22
156.233.76.0/22
156.233.112.0/22
156.233.180.0-156.233.192.255
156.241.16.0-156.241.39.255
156.241.60.0/22
156.243.140.0/22
156.244.132.0-156.244.143.255
156.248.32.0/19
156.251.96.0-156.251.119.255
Signature Algorithm: sha256WithRSAEncryption
a9:ad:4c:b5:8b:e7:cb:a7:ff:ad:3c:dc:39:4a:d8:f0:c7:9c:
e3:0a:0b:70:94:2a:f1:da:1f:9b:34:64:3c:7c:dc:75:95:7c:
32:38:d3:f5:1f:22:66:c7:0e:14:a2:2d:2d:21:e0:3c:5f:ba:
fd:d2:5d:3e:c3:4f:42:53:65:65:2b:ba:6c:5f:7e:16:78:db:
a4:5a:13:61:fd:e6:28:7a:55:e7:b0:72:02:7c:c4:af:14:3a:
68:37:4a:2c:52:c2:00:83:8b:91:d1:31:fa:73:b4:a6:88:c8:
2a:d8:e1:53:6b:2d:d2:4a:11:6e:a3:3e:5e:4c:dd:a7:b9:ab:
fb:45:fb:66:98:ca:35:c1:61:8c:28:9c:65:ed:e8:fc:1a:d0:
fc:7d:de:77:da:8e:1c:b8:c2:02:d6:44:ac:79:f2:c7:e4:1b:
8f:17:d8:38:66:cc:37:07:c3:88:24:2b:3e:ab:46:07:79:d6:
a7:15:2d:52:35:2b:93:4a:5c:5b:b2:45:4f:d9:6f:88:ce:44:
15:5e:76:00:eb:0d:3d:48:00:70:08:65:ad:65:1c:3c:5f:e4:
f7:f5:7c:56:6e:c9:ba:33:4f:2f:0c:65:f2:45:a6:dd:14:20:
d2:61:fc:b5:6e:f3:c5:6e:a8:83:b7:9a:17:0b:98:34:4e:c3:
e1:b5:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:15:29 2025 by rpki-client