Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484901F08D6111F098FE87E8DAE4EC9C.roa
File: 484901F08D6111F098FE87E8DAE4EC9C.roa (raw, json)
Hash identifier: KQUKaSaYm7Hg0D0FwJWhyy+F4eQrOx9Te69/gYAfdwQ=
Subject key identifier: 74:5E:6D:84:BB:DC:2A:61:75:F9:CF:90:23:11:C6:BF:2F:DA:83:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484901F08D6111F098FE87E8DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 09:42:22 +0000
ROA not before: Tue 09 Sep 2025 09:42:17 +0000
ROA not after: Thu 16 Oct 2025 09:42:17 +0000
asID: 22773
IP address blocks: 156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
156.243.193.0/24 maxlen: 24
156.243.194.0/24 maxlen: 24
156.243.195.0/24 maxlen: 24
156.243.196.0/24 maxlen: 24
156.243.197.0/24 maxlen: 24
156.243.198.0/24 maxlen: 24
156.243.199.0/24 maxlen: 24
156.243.200.0/24 maxlen: 24
156.243.201.0/24 maxlen: 24
156.243.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96792 (0x17a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 09:42:17 2025 GMT
Not After : Oct 16 09:42:17 2025 GMT
Subject: CN=68bff67d-2c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:81:d7:08:58:7d:78:ad:e2:39:ff:f6:f9:
43:ea:91:a4:98:ba:96:dd:f4:fa:7a:89:66:3d:6b:
77:24:74:d8:1e:00:df:85:29:57:cd:5a:cd:2c:f3:
e8:25:db:8c:be:6c:c1:a4:ad:4a:35:29:40:5a:24:
76:eb:6f:7a:dc:64:0f:ea:24:87:56:28:29:ee:0c:
47:45:9d:ac:7e:96:5c:10:ff:a7:23:a1:62:0d:8a:
d9:49:ab:c7:3d:77:17:0c:c5:93:ca:4e:d0:0e:6e:
97:1b:2f:76:ea:a9:c1:26:9f:fb:d8:ce:bf:7d:d6:
cd:42:21:7b:23:02:6e:ed:b5:93:21:06:1e:d1:aa:
f2:c4:61:74:ae:50:d9:d1:99:9b:ae:52:76:93:79:
2b:b2:6f:08:13:38:86:79:58:7f:45:b4:02:50:cc:
a0:36:aa:f5:47:9f:8b:9d:fd:af:b6:43:98:28:03:
f5:aa:3a:65:d8:35:1e:c3:9e:96:45:e4:e5:b2:8b:
ef:b3:4b:68:de:8d:55:29:a1:d7:02:ae:dd:54:64:
5d:f7:73:be:ba:3b:c8:9a:c6:7a:ec:e4:eb:bc:19:
25:78:65:5d:70:ed:38:b8:0b:a6:82:39:cf:32:58:
76:9b:78:1a:20:1d:e7:7f:6b:b7:88:d5:20:b8:d8:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:6D:84:BB:DC:2A:61:75:F9:CF:90:23:11:C6:BF:2F:DA:83:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484901F08D6111F098FE87E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.23.0/24
156.242.28.0/22
156.242.48.0-156.242.50.255
156.242.52.0/23
156.243.193.0-156.243.202.255
Signature Algorithm: sha256WithRSAEncryption
b2:ee:b5:97:d4:f0:2b:10:70:7d:e7:96:26:e7:a7:fa:8e:83:
b0:37:16:2a:ac:d3:71:ae:7f:de:6a:15:48:6f:83:3b:9c:8c:
72:04:30:48:73:cb:be:ad:96:c8:d2:30:c1:51:a4:f8:f0:7d:
be:0b:76:e5:cb:b4:db:10:c8:9d:21:15:a2:de:69:36:b0:1d:
be:8d:c0:a6:ca:27:db:bf:05:fd:4e:ab:1f:8c:5f:b3:09:8c:
3a:80:34:42:71:d7:5b:2f:63:d4:ad:00:92:03:7b:3a:72:85:
8b:65:63:b5:a4:f1:63:16:c2:6a:d7:e4:60:53:fe:82:cc:c6:
0a:b7:ba:a3:76:87:30:04:c2:a7:50:b7:49:17:cc:b2:d0:b1:
c5:2b:3c:6e:ac:53:ee:3c:79:3f:42:61:38:93:bc:55:21:33:
cf:16:00:f8:83:91:04:ba:61:ef:6f:85:29:0a:3a:81:9a:0a:
53:39:25:d2:59:b1:b8:a0:89:c9:f8:8d:a0:60:a0:ab:26:40:
4f:1c:a5:2a:f5:80:95:84:b5:0c:cc:96:df:4f:f9:c1:8c:36:
49:89:ca:22:24:b6:57:dc:36:74:bc:08:8e:8f:28:e8:23:0a:
ec:16:4e:15:86:9d:ec:59:cb:14:a7:4e:42:0a:5c:e5:39:84:
2c:fb:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:58:31 2025 by rpki-client