Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E02E29884AB11F0A052A2C3DAE4EC9C.roa
File: 2E02E29884AB11F0A052A2C3DAE4EC9C.roa (raw, json)
Hash identifier: /koO4T+lG28iUv9XmRC0nngJasoZnWB2V6EBkssOkDw=
Subject key identifier: 99:D2:98:91:74:5C:0D:89:FD:A8:88:E4:B5:83:02:22:B4:CD:2A:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017303
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E02E29884AB11F0A052A2C3DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:38:40 +0000
ROA not before: Fri 29 Aug 2025 07:38:35 +0000
ROA not after: Wed 01 Oct 2025 07:38:35 +0000
asID: 62240
IP address blocks: 156.229.1.0/24 maxlen: 24
156.229.124.0/24 maxlen: 24
156.229.175.0/24 maxlen: 24
156.229.237.0/24 maxlen: 24
156.229.238.0/24 maxlen: 24
156.229.244.0/24 maxlen: 24
156.229.245.0/24 maxlen: 24
156.229.246.0/24 maxlen: 24
156.229.254.0/24 maxlen: 24
156.229.255.0/24 maxlen: 24
156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.100.0/24 maxlen: 24
156.233.103.0/24 maxlen: 24
156.233.104.0/24 maxlen: 24
156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94979 (0x17303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 07:38:35 2025 GMT
Not After : Oct 1 07:38:35 2025 GMT
Subject: CN=68b15900-0a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:f7:b0:74:b2:4d:b0:e8:90:cd:54:cb:34:
1c:c1:44:03:ae:73:c2:b6:97:6c:db:65:f4:c2:1c:
cb:98:2e:80:ae:94:0a:2a:b2:6b:ca:e4:68:cc:80:
4f:08:0b:67:8b:f9:a2:9e:5c:79:11:29:38:2d:51:
14:59:22:2a:58:be:82:e4:9c:42:27:c3:53:dc:f0:
96:98:75:0a:46:86:c9:d5:52:6b:8a:b0:36:66:fd:
ac:94:f2:53:83:a8:a7:e6:a3:53:aa:62:e0:16:9b:
42:f1:91:4f:de:c8:74:a6:af:5a:f7:2f:e4:fc:84:
d4:c9:56:29:ef:c4:6e:79:e9:e3:ab:f2:ed:4c:4e:
b3:8a:f6:72:69:9b:40:36:1d:74:38:d7:c5:28:6d:
e4:68:5e:6e:69:16:10:4e:a9:3b:3a:bf:e3:44:b5:
90:b3:98:9b:a0:58:20:42:95:66:06:c0:22:14:cb:
df:08:e4:ba:ed:48:98:17:d8:3c:97:d7:6e:10:25:
f7:80:c3:54:2b:1c:f1:30:a0:f0:f9:51:a0:13:bd:
f2:aa:5d:94:24:be:8a:05:65:9f:74:18:25:22:8b:
66:76:db:ff:54:70:e5:63:20:1e:14:a7:cc:93:55:
ea:54:9d:78:d1:0e:90:50:1b:58:f8:55:04:81:47:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:98:91:74:5C:0D:89:FD:A8:88:E4:B5:83:02:22:B4:CD:2A:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E02E29884AB11F0A052A2C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.1.0/24
156.229.124.0/24
156.229.175.0/24
156.229.237.0-156.229.238.255
156.229.244.0-156.229.246.255
156.229.254.0/23
156.233.0.0/23
156.233.100.0/24
156.233.103.0-156.233.105.255
Signature Algorithm: sha256WithRSAEncryption
93:16:a6:d2:00:5a:a4:86:88:27:00:9b:3c:1a:c2:0e:b9:59:
87:e3:30:dc:a3:6f:ef:27:3b:ae:a5:25:90:71:56:5b:11:f7:
ec:0c:5e:d9:09:4d:b1:59:79:91:05:23:36:00:0e:73:f2:78:
a1:29:c9:8c:fb:aa:6c:5a:77:69:cf:cc:c3:fc:49:99:65:39:
10:4d:9b:e4:23:ad:58:5d:4d:da:6b:b1:68:17:1a:eb:79:61:
ad:c5:e3:bc:15:2c:ad:da:ad:87:13:15:dd:9b:e7:85:60:a7:
16:32:51:c4:ba:dd:76:97:6c:20:59:01:ec:ed:ae:50:b2:ec:
bc:60:d2:6d:fb:1c:78:fc:46:17:4d:d7:45:d1:0e:42:ed:a4:
7f:3c:bc:b1:89:f4:45:68:5b:80:56:00:18:2e:a6:b0:d5:d7:
f6:6b:38:7f:50:5b:e6:d7:2f:e2:fc:fa:23:25:bd:a3:57:7b:
bf:da:0b:8b:dd:7b:d8:ac:e8:a9:cb:6d:03:ac:1a:f9:fd:6b:
4f:73:9a:81:de:71:0b:17:6a:10:c0:3e:94:7f:52:ed:57:99:
c9:34:da:0a:f4:c8:86:25:e2:34:a0:8c:8d:9d:b5:c6:85:e0:
7f:51:85:82:c3:a8:cb:5e:61:bf:bb:af:51:2a:46:d8:3d:fa:
c3:b8:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 21:17:25 2025 by rpki-client