Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B2B032824E11F0BF3B48C4DAE4EC9C.roa
File: 07B2B032824E11F0BF3B48C4DAE4EC9C.roa (raw, json)
Hash identifier: Absh0RtR96YfehXs+q3R/+Ni1LWiIz3vg9uGKSks9Jg=
Subject key identifier: 39:12:5E:11:96:67:B1:D1:BA:5D:32:BE:B8:C3:94:C4:CF:E4:12:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B2B032824E11F0BF3B48C4DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 07:26:50 +0000
ROA not before: Tue 26 Aug 2025 07:26:45 +0000
ROA not after: Tue 30 Sep 2025 07:26:45 +0000
asID: 137547
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94257 (0x17031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 07:26:45 2025 GMT
Not After : Sep 30 07:26:45 2025 GMT
Subject: CN=68ad61ba-91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:0a:e3:0a:e3:ef:b2:2a:d8:c5:3d:ab:3c:
7f:70:bc:a0:b7:32:77:4f:85:cf:56:fc:0c:52:83:
fa:20:4c:bf:18:43:03:66:65:ec:f8:67:f0:1e:20:
0b:0b:95:25:8b:5a:76:ac:f3:44:96:cb:a6:fe:38:
b5:18:8d:c5:4d:2d:23:33:ef:3e:17:23:c4:e2:2c:
65:37:fc:5d:d8:27:3c:c1:25:b9:36:2c:7b:6f:c3:
cd:17:2b:78:b4:1d:2d:d6:ef:61:f5:23:24:61:aa:
d6:e7:dc:16:05:cd:07:18:87:1c:d6:2e:8f:9f:d5:
08:5a:0f:68:d2:52:a7:70:1d:a9:ce:91:8d:9f:f4:
f6:6c:72:a0:18:dd:fc:8f:93:f4:dd:8d:a4:e4:b4:
7e:ca:3a:f0:5a:6d:44:ca:da:1c:a5:e3:6a:b9:61:
df:4f:e6:9e:6a:b6:69:5e:70:36:99:ef:c1:91:b9:
65:ad:f8:2d:c2:83:d2:c1:33:4b:48:57:18:69:fb:
dd:45:11:99:da:05:41:1e:ed:ff:c5:a9:db:ea:1c:
67:1d:d6:00:8b:16:2d:43:ce:8d:ff:e0:e0:7e:86:
db:b2:38:25:39:b5:2c:00:27:59:2e:5b:77:b5:f7:
1c:e4:ac:d6:58:22:a5:bf:b6:cd:54:bf:e5:96:a1:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:12:5E:11:96:67:B1:D1:BA:5D:32:BE:B8:C3:94:C4:CF:E4:12:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B2B032824E11F0BF3B48C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:37:2c:0d:36:9b:a0:e6:df:1a:68:d0:c9:cd:f1:b1:4c:94:
7c:cd:79:72:3a:b5:46:06:64:2c:1f:26:ec:f1:8b:d1:db:7d:
af:2f:a7:1b:6b:1d:ff:38:5b:ab:06:c1:f3:18:78:72:ee:cf:
18:9f:da:2c:55:9c:89:03:f2:e6:0c:ae:8e:d2:5a:26:47:52:
a3:2a:2c:48:de:e1:74:18:bb:57:ce:c2:5b:70:3c:64:d1:7c:
80:85:41:9e:4d:4e:55:ca:90:b4:b8:35:4c:4b:1f:f5:2a:7b:
54:df:c3:c0:81:90:b6:04:d4:ca:24:26:23:c4:e4:ee:2e:2b:
00:e4:25:01:80:01:99:8c:78:86:1d:f6:15:11:83:c4:ea:be:
44:98:87:2d:a1:92:c0:15:68:30:16:7f:3b:c9:f9:c0:67:9e:
53:ca:bb:7f:0a:37:d0:52:d1:25:1f:33:55:1a:a7:74:62:aa:
69:54:20:60:3d:71:da:0b:63:d9:26:5b:96:5e:4a:96:61:96:
c5:a6:ff:9d:3a:3c:5d:f2:fc:e3:79:7f:0d:03:00:6b:92:68:
ea:6d:60:91:35:c6:b7:9c:b0:56:f1:c7:b4:c2:f0:69:04:49:
02:e6:e5:1b:2d:0f:3a:59:04:7d:9a:76:72:a4:64:1b:ea:32:
0e:1b:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:55 2025 by rpki-client