Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D074B44E597111F08E18219EDAE4EC9C.roa
File: D074B44E597111F08E18219EDAE4EC9C.roa (raw, json)
Hash identifier: PI4OmfuA0SFJseeiuM89AxUbx7LsLW/t63tnWqAQ0SQ=
Subject key identifier: D0:E1:88:02:F6:3A:8A:68:6E:E0:C9:E1:59:57:C6:10:D4:E4:DE:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01614F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D074B44E597111F08E18219EDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 07:29:42 +0000
ROA not before: Sat 05 Jul 2025 07:29:37 +0000
ROA not after: Fri 25 Jul 2025 07:29:37 +0000
asID: 203020
IP address blocks: 156.229.240.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.241.8.0/21 maxlen: 24
156.241.44.0/22 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.152.0/22 maxlen: 24
156.243.208.0/21 maxlen: 24
156.244.200.0/22 maxlen: 24
156.244.212.0/22 maxlen: 24
156.249.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90447 (0x1614f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 07:29:37 2025 GMT
Not After : Jul 25 07:29:37 2025 GMT
Subject: CN=6868d465-5cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:ba:e9:ca:85:35:82:03:cd:d8:dc:50:c2:
7a:a0:fe:54:17:2f:bf:9f:d7:af:96:62:d7:fe:d8:
5f:41:11:bf:e8:3e:19:ce:36:d0:f1:36:ba:98:6c:
89:21:0f:ed:4e:57:0c:16:2a:a4:ce:dc:5f:59:fb:
ce:9a:ea:34:c7:37:15:f7:28:b3:ba:41:0e:6a:82:
07:81:36:80:9f:31:b3:07:2f:d8:e1:8b:a9:95:80:
00:ca:ac:9f:c4:85:97:4c:c7:20:b4:e0:f2:2d:fb:
f7:13:4a:29:09:87:39:9d:84:ba:e9:92:80:2a:5a:
f5:78:37:57:db:39:fb:5e:52:57:ab:65:29:35:23:
4b:32:6e:2e:bb:9b:9a:55:3a:75:89:43:6e:92:1e:
e2:64:fb:a8:2e:94:d8:d9:1a:65:79:88:c4:ea:47:
94:96:7a:b0:ac:bd:23:84:19:65:69:4b:11:54:33:
24:ad:c5:24:0a:b4:ec:56:a9:42:44:83:5e:8d:0a:
b4:29:4c:c1:3a:a0:7f:be:d5:9f:5f:a9:b9:70:d0:
6b:97:59:96:d3:49:89:91:f4:a1:78:bf:b2:a9:be:
73:0a:63:6b:c4:3c:fa:17:46:20:d6:0e:c0:2d:44:
da:7b:a1:17:80:fc:3d:7a:3c:9f:be:c7:44:2a:cc:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:88:02:F6:3A:8A:68:6E:E0:C9:E1:59:57:C6:10:D4:E4:DE:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D074B44E597111F08E18219EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.240.0/22
156.238.184.0/22
156.241.8.0/21
156.241.44.0/22
156.243.40.0/21
156.243.152.0/22
156.243.208.0/21
156.244.200.0/22
156.244.212.0/22
156.249.72.0/21
Signature Algorithm: sha256WithRSAEncryption
57:2a:da:fd:92:88:54:27:5c:17:8c:54:35:06:8a:56:67:13:
f9:ab:7f:61:a9:a9:f5:e5:a5:ef:ec:dc:3f:af:b1:4b:e4:cb:
c7:3c:48:a0:b8:95:dc:8c:48:cc:fb:9c:61:4c:50:0e:0f:bb:
12:ee:88:d5:5d:32:f6:b4:ec:07:1b:d2:90:0c:a1:30:78:4b:
0c:7f:a9:a2:63:72:3e:ae:04:79:3d:75:d9:df:b8:01:fe:5d:
a2:25:10:6b:cc:bc:f4:04:55:48:2a:ec:79:ad:12:8f:a0:50:
f5:94:a5:04:69:3d:77:f5:ec:5d:e3:99:02:24:5b:16:52:3e:
8b:5d:d8:e5:06:a7:65:f9:d3:69:a3:ff:45:db:9b:df:b2:c4:
91:69:68:fc:9b:9b:fa:03:ee:c6:3f:49:9a:32:84:32:bf:61:
42:77:e8:30:3a:86:56:ca:c1:b9:46:b5:d2:a9:69:99:4c:e9:
c3:c2:51:21:42:aa:cc:47:67:95:80:ce:59:ad:08:3e:ae:87:
f4:cc:45:5c:9c:24:db:0e:ec:12:70:a3:17:f2:69:8e:28:8f:
3d:1b:93:47:0c:b7:56:20:12:56:c6:68:be:01:71:c5:2b:3c:
7b:61:47:c5:e3:a1:c3:ed:e6:98:67:5d:74:97:b7:f9:4f:3b:
38:08:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:55 2025 by rpki-client