Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC787BD25A6311F08FB56FBCDAE4EC9C.roa
File: AC787BD25A6311F08FB56FBCDAE4EC9C.roa (raw, json)
Hash identifier: ZVSk1TkTf0pE/4H0ZJ/BSWranHILn/xD9SS440kzM9g=
Subject key identifier: 1C:F2:50:EB:84:E6:8F:14:EA:80:F3:5A:4E:50:AE:93:7A:21:43:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC787BD25A6311F08FB56FBCDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 12:20:59 +0000
ROA not before: Sun 06 Jul 2025 12:20:55 +0000
ROA not after: Fri 25 Jul 2025 12:20:55 +0000
asID: 203020
IP address blocks: 156.229.240.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.241.8.0/21 maxlen: 24
156.241.44.0/22 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.120.0/21 maxlen: 24
156.243.152.0/22 maxlen: 24
156.243.208.0/21 maxlen: 24
156.243.236.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.200.0/22 maxlen: 24
156.244.212.0/22 maxlen: 24
156.244.216.0/21 maxlen: 24
156.248.16.0/22 maxlen: 24
156.248.96.0/22 maxlen: 24
156.249.68.0/22 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.84.0/22 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90606 (0x161ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:20:55 2025 GMT
Not After : Jul 25 12:20:55 2025 GMT
Subject: CN=686a6a2b-adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:58:8b:e3:9d:db:fc:2b:c7:e8:53:ca:42:
3a:63:31:42:49:70:b2:98:1a:cc:c7:be:6d:14:7f:
a6:83:6a:25:75:2f:f4:97:d3:86:02:d0:c5:a8:20:
d1:77:c9:de:ec:e8:7b:46:b0:cb:9a:76:db:72:f6:
35:09:da:f8:6f:aa:6e:12:a9:7f:60:28:d9:96:a7:
a0:3a:f1:db:70:3d:3f:e9:f8:35:c7:8f:fa:50:f7:
3b:6c:38:ab:26:4c:7b:47:2c:fc:63:63:78:6b:f5:
62:64:c9:a3:10:ef:95:13:bb:0c:2a:a9:92:e0:e6:
33:a0:7e:0a:24:da:3f:9f:4d:96:e7:ac:b2:bc:6c:
88:59:0e:38:a0:7b:10:94:a4:bd:3b:7e:08:68:62:
d9:23:b1:1c:c9:1b:be:0c:26:ee:af:0c:4b:3a:be:
62:81:2b:84:d6:6b:51:89:cd:ba:98:7d:7b:0e:2c:
07:43:39:48:33:6e:27:fd:54:fb:65:65:46:df:65:
57:1e:58:d1:9e:3a:02:38:8b:6e:be:15:f3:18:8d:
51:a8:0e:a2:b4:66:ef:70:79:44:44:43:37:de:8a:
b4:9e:fa:c8:37:84:b8:51:76:a9:6b:e1:37:b5:23:
c0:1a:db:67:a5:5d:49:97:bb:04:23:33:17:d2:04:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:50:EB:84:E6:8F:14:EA:80:F3:5A:4E:50:AE:93:7A:21:43:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC787BD25A6311F08FB56FBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.240.0/22
156.238.184.0/22
156.241.8.0/21
156.241.44.0/22
156.243.40.0/21
156.243.120.0/21
156.243.152.0/22
156.243.208.0/21
156.243.236.0/22
156.244.192.0-156.244.203.255
156.244.212.0-156.244.223.255
156.248.16.0/22
156.248.96.0/22
156.249.68.0-156.249.79.255
156.249.84.0-156.249.95.255
156.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:9d:38:9b:7f:e1:7b:8e:42:ca:a8:42:e4:7b:4d:cb:93:0d:
9a:1a:da:7c:46:c5:a1:02:57:0f:cb:a5:37:c1:ed:f8:cb:9d:
86:54:a5:e6:48:5d:68:44:d3:3b:da:40:f6:9c:2f:66:a0:24:
49:ef:f4:55:1d:54:8a:29:86:d5:ce:46:cd:e0:e0:07:72:fe:
5e:35:5a:44:7b:03:85:f5:64:60:6f:a8:ce:5b:65:5b:0d:0b:
c0:bd:64:f0:c6:b9:4f:e6:03:e3:d4:ce:35:08:bb:22:3e:50:
e8:94:41:08:99:22:75:f6:a1:29:ad:60:b4:c0:5e:27:1b:1b:
ac:eb:c1:64:cc:35:c4:10:81:52:9d:b4:78:1e:e3:72:cb:6b:
6f:99:52:1e:ff:c1:73:d7:98:e9:0b:f9:7e:50:a3:3a:8e:43:
35:db:03:ae:63:b2:00:80:39:bd:68:00:d9:a5:7a:d8:3b:73:
08:36:da:b5:46:99:50:0f:e8:aa:67:15:75:69:54:a0:bf:94:
52:c1:b8:7f:ae:10:69:a0:c4:28:cd:0e:ed:7c:02:06:ee:93:
30:5c:80:64:98:ad:7f:36:cc:04:b1:ba:90:e2:ef:51:43:35:
96:c9:f5:59:9a:a5:7a:90:b5:50:a8:df:a4:e0:60:cb:04:cc:
1e:04:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:33:23 2025 by rpki-client