Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC1BB9E76B811F0B04FB8A3DAE4EC9C.roa
File: 2CC1BB9E76B811F0B04FB8A3DAE4EC9C.roa (raw, json)
Hash identifier: gdAbiBuYr2Nf6QhKgPU2ADdXqeufwtdayf9NULfKhd4=
Subject key identifier: D9:ED:4E:2D:68:2C:F5:CA:4F:1A:E7:68:8F:98:C1:B8:71:5F:2D:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC1BB9E76B811F0B04FB8A3DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 13:36:25 +0000
ROA not before: Mon 11 Aug 2025 13:36:17 +0000
ROA not after: Tue 16 Sep 2025 13:36:17 +0000
asID: 22773
IP address blocks: 156.233.214.0/24 maxlen: 24
156.233.215.0/24 maxlen: 24
156.233.220.0/24 maxlen: 24
156.233.221.0/24 maxlen: 24
156.233.222.0/24 maxlen: 24
156.233.223.0/24 maxlen: 24
156.233.240.0/24 maxlen: 24
156.233.241.0/24 maxlen: 24
156.233.242.0/24 maxlen: 24
156.238.144.0/24 maxlen: 24
156.242.241.0/24 maxlen: 24
156.242.242.0/24 maxlen: 24
156.242.243.0/24 maxlen: 24
156.242.244.0/24 maxlen: 24
156.242.245.0/24 maxlen: 24
156.242.246.0/24 maxlen: 24
156.243.108.0/24 maxlen: 24
156.243.109.0/24 maxlen: 24
156.243.110.0/24 maxlen: 24
156.243.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Aug 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92720 (0x16a30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 13:36:17 2025 GMT
Not After : Sep 16 13:36:17 2025 GMT
Subject: CN=6899f1d9-5720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:ce:3d:f3:8c:d4:15:93:b6:bd:31:87:ef:
9d:37:88:1c:92:56:ea:31:e3:29:6c:3c:2a:26:06:
09:4e:c5:72:6f:62:97:3e:0a:b6:14:37:19:33:f9:
53:56:51:d4:be:1d:48:67:df:a6:c6:b4:6c:a7:4c:
46:6d:3a:71:2b:e1:f6:0e:f3:05:5b:c3:12:54:52:
95:c7:03:ee:9d:5e:57:67:ee:90:21:0e:30:7a:83:
05:88:a6:33:24:81:22:71:36:e0:57:e9:3e:41:21:
50:0d:3a:10:73:df:fc:7f:a4:22:a8:00:34:d1:77:
5c:da:bb:6e:97:87:81:f4:c3:90:73:da:03:78:c2:
eb:20:fb:7a:33:b2:2c:7a:6b:37:31:49:fa:0c:a9:
f4:2c:61:ce:55:09:53:06:d9:53:7c:5a:5a:54:0e:
00:8a:30:68:3e:85:59:aa:c8:8d:89:89:98:3b:8f:
20:06:7b:07:9b:f6:98:18:e1:9c:68:cf:74:2c:63:
6c:e5:8f:b8:87:5c:22:77:8d:d0:52:c7:70:26:22:
ff:1d:f3:2b:9d:b5:15:97:0c:c8:75:56:34:05:e6:
87:5d:7a:46:f0:96:e0:bc:ca:57:c6:b6:aa:c0:f6:
fb:41:51:4a:f5:9b:3e:e9:41:78:b3:eb:6e:09:91:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:4E:2D:68:2C:F5:CA:4F:1A:E7:68:8F:98:C1:B8:71:5F:2D:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC1BB9E76B811F0B04FB8A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.214.0/23
156.233.220.0/22
156.233.240.0-156.233.242.255
156.238.144.0/24
156.242.241.0-156.242.246.255
156.243.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:19:03:64:0e:6d:6f:96:40:17:6d:79:f6:96:f5:8b:2f:4e:
15:96:05:77:76:7b:c8:9b:4e:f1:d4:93:2f:4a:2c:6e:05:f8:
4f:a3:af:38:47:3b:53:a2:54:7b:c6:01:9a:5c:5b:27:0f:04:
f7:fd:55:39:83:73:34:7b:7f:6c:99:0a:55:02:db:8b:b4:e9:
30:2c:90:3e:9b:37:fa:8c:62:de:e8:3e:15:48:35:25:bb:b9:
ab:ac:d2:33:d4:f8:82:e6:18:8a:4b:06:bf:1b:01:53:bc:90:
23:83:42:94:f4:b8:69:6d:77:3d:2f:35:1c:38:3f:24:a9:a6:
bf:5a:84:b9:b8:e7:62:dc:9a:89:07:fb:4b:b2:f2:c9:6f:16:
d3:8f:1f:be:b8:06:e8:e1:04:99:be:c6:bb:f9:d9:dc:7d:73:
c3:95:a9:41:93:8a:bf:df:ef:35:c4:82:77:49:29:22:12:01:
83:62:06:a8:23:90:12:71:c9:76:0f:a8:1c:5f:da:6d:f7:16:
be:56:52:c4:0e:03:b9:79:5a:79:94:e5:12:cb:32:66:71:c0:
6d:7e:68:4c:e9:d7:c7:74:57:c5:8f:be:77:7c:ef:1d:78:ec:
8c:56:70:2a:39:52:a1:2e:68:16:16:96:b1:d3:76:20:ba:20:
41:a0:18:c8
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAWowMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODExMTMzNjE3WhcNMjUwOTE2MTMzNjE3WjAYMRYw
FAYDVQQDEw02ODk5ZjFkOS01NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA01DOPfOM1BWTtr0xh++dN4gcklbqMeMpbDwqJgYJTsVyb2KXPgq2FDcZ
M/lTVlHUvh1IZ9+mxrRsp0xGbTpxK+H2DvMFW8MSVFKVxwPunV5XZ+6QIQ4weoMF
iKYzJIEicTbgV+k+QSFQDToQc9/8f6QiqAA00Xdc2rtul4eB9MOQc9oDeMLrIPt6
M7Isems3MUn6DKn0LGHOVQlTBtlTfFpaVA4AijBoPoVZqsiNiYmYO48gBnsHm/aY
GOGcaM90LGNs5Y+4h1wid43QUsdwJiL/HfMrnbUVlwzIdVY0BeaHXXpG8JbgvMpX
xraqwPb7QVFK9Zs+6UF4s+tuCZFD3wIDAQABo4IC0DCCAswwHQYDVR0OBBYEFNnt
Ti1oLPXKTxrnaI+YwbhxXy0HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQ0MxQkI5RTc2QjgxMUYwQjA0RkI4QTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBnOnWAwQCnOncMAwDBASc6fAD
BACc6fIDBACc7pAwDAMEAJzy8QMEAJzy9gMEApzzbDANBgkqhkiG9w0BAQsFAAOC
AQEAOhkDZA5tb5ZAF2159pb1iy9OFZYFd3Z7yJtO8dSTL0osbgX4T6OvOEc7U6JU
e8YBmlxbJw8E9/1VOYNzNHt/bJkKVQLbi7TpMCyQPps3+oxi3ug+FUg1Jbu5q6zS
M9T4guYYiksGvxsBU7yQI4NClPS4aW13PS81HDg/JKmmv1qEubjnYtyaiQf7S7Ly
yW8W048fvrgG6OEEmb7Gu/nZ3H1zw5WpQZOKv9/vNcSCd0kpIhIBg2IGqCOQEnHJ
dg+oHF/abfcWvlZSxA4DuXlaeZTlEssyZnHAbX5oTOnXx3RXxY++d3zvHXjsjFZw
KjlSoS5oFhaWsdN2ILogQaAYyA==
-----END CERTIFICATE-----
Generated at Thu Aug 21 01:37:03 2025 by rpki-client