Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A3898F2832011F0830A83A6DAE4EC9C.roa
File: 1A3898F2832011F0830A83A6DAE4EC9C.roa (raw, json)
Hash identifier: 1/ThfMZPYZoJDFvhOZlULZhyZgrj2vm31/OoEiGYLlM=
Subject key identifier: 8F:09:75:2E:A3:4C:4F:11:4E:35:AA:81:C4:15:96:74:31:BD:8A:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017141
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A3898F2832011F0830A83A6DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 08:30:35 +0000
ROA not before: Wed 27 Aug 2025 08:30:29 +0000
ROA not after: Tue 30 Sep 2025 08:30:29 +0000
asID: 62468
IP address blocks: 156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94529 (0x17141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 08:30:29 2025 GMT
Not After : Sep 30 08:30:29 2025 GMT
Subject: CN=68aec22b-996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:10:2d:e7:c1:80:92:54:19:18:83:20:4b:
2d:26:26:92:f8:ab:29:f8:97:01:59:ce:f7:63:24:
34:c1:6c:13:15:53:ba:6f:db:24:7e:36:7e:92:67:
2c:24:06:e2:37:18:90:20:65:75:92:13:cb:be:6d:
64:9d:a3:91:18:01:f7:47:25:79:6f:2d:48:d2:7f:
2a:a2:0d:8a:b2:ab:d8:77:87:11:df:49:5e:fe:c8:
e1:0c:67:44:96:2c:c2:80:9a:f2:43:ee:e4:f0:fa:
12:3e:25:9e:cb:ab:a4:77:de:63:69:98:6c:c6:4a:
a3:9f:69:c4:13:24:84:c0:8a:15:cc:4f:79:33:fb:
de:09:d2:91:9f:2f:04:63:33:29:87:5c:a0:82:ef:
ff:3c:a0:c6:f4:1c:82:3d:92:db:24:17:be:79:2f:
35:6e:2b:20:1b:86:c0:63:de:1c:ea:27:a8:a8:b5:
d8:ea:4b:4d:50:15:e9:83:d3:49:23:45:27:aa:69:
dc:fc:82:62:36:57:06:a2:13:28:50:65:b4:b9:93:
0f:42:0d:d1:77:16:dc:90:e7:ce:94:e6:1e:e9:15:
5a:60:9c:d6:1b:d5:39:3c:f0:0c:94:eb:06:cb:b6:
c1:c7:b5:bd:02:6e:2e:b0:24:e5:29:3e:50:21:37:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:75:2E:A3:4C:4F:11:4E:35:AA:81:C4:15:96:74:31:BD:8A:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A3898F2832011F0830A83A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:5b:4a:f9:93:86:f4:a6:b8:a8:fd:ab:eb:4f:34:44:7b:b1:
bf:c2:fb:a8:4a:3e:a5:e0:18:99:1c:11:37:aa:7a:de:7a:ae:
07:b6:65:c3:95:94:26:d8:4e:a2:4d:ef:0b:53:4d:29:39:67:
63:5d:20:c0:30:27:dc:12:9a:2b:cc:72:a3:2d:73:b0:63:47:
51:80:80:c0:b8:0a:a1:a1:ba:5d:a2:df:9e:52:84:ea:39:a2:
eb:ca:a5:23:62:e7:5b:98:43:2b:28:c7:98:70:97:87:5c:7d:
54:56:d9:a5:b3:53:ea:68:86:b8:40:a3:be:2a:34:53:40:99:
33:9f:ae:d2:d3:6c:44:26:53:a6:27:f4:37:56:01:d0:1d:77:
ee:f5:f8:19:59:4c:24:b9:ca:b8:1c:f1:33:59:65:8d:ce:e3:
a2:84:fe:b6:9a:70:16:d7:a5:ab:8a:d8:ec:b7:28:ac:2a:4a:
ab:4a:ae:cf:91:38:d1:c2:1f:ce:30:a2:2e:12:5a:f4:7b:af:
df:db:5c:fd:db:fa:49:40:4d:80:ac:51:20:c7:6d:d5:d5:1b:
0f:ae:5b:c9:94:f9:1c:0f:eb:2c:a3:4a:81:02:2b:a6:92:68:
bf:d1:58:78:67:2d:00:67:67:4e:ca:a3:b7:f9:22:6c:8c:a5:
95:54:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:21:57 2025 by rpki-client