Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF13E0287D611F0962F50F0DAE4EC9C.roa
File: 7DF13E0287D611F0962F50F0DAE4EC9C.roa (raw, json)
Hash identifier: Me5YIXoi/8FbHjzrozfSpEUBtMJTEnbazy54PTq1wMc=
Subject key identifier: 43:87:DB:FE:AF:D8:8C:72:F6:52:27:2D:49:C1:E6:14:87:0F:D0:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF13E0287D611F0962F50F0DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 08:26:16 +0000
ROA not before: Tue 02 Sep 2025 08:26:08 +0000
ROA not after: Wed 08 Oct 2025 08:26:08 +0000
asID: 200373
IP address blocks: 156.228.97.0/24 maxlen: 24
156.228.98.0/24 maxlen: 24
156.228.99.0/24 maxlen: 24
156.228.100.0/24 maxlen: 24
156.228.101.0/24 maxlen: 24
156.228.102.0/24 maxlen: 24
156.228.103.0/24 maxlen: 24
156.228.104.0/24 maxlen: 24
156.228.105.0/24 maxlen: 24
156.228.106.0/24 maxlen: 24
156.228.107.0/24 maxlen: 24
156.228.108.0/24 maxlen: 24
156.228.109.0/24 maxlen: 24
156.228.110.0/24 maxlen: 24
156.228.111.0/24 maxlen: 24
156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95808 (0x17640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:26:08 2025 GMT
Not After : Oct 8 08:26:08 2025 GMT
Subject: CN=68b6aa28-d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:89:33:11:d7:de:11:16:50:2b:3e:5e:6e:
cb:d3:84:df:a5:fd:17:1d:af:68:22:98:e9:05:05:
06:b8:fb:37:55:ba:f9:8f:88:1a:5f:87:bc:80:31:
03:81:62:a8:78:14:00:79:98:a0:a2:55:fa:c6:25:
27:33:95:ba:bc:41:ea:f3:3a:8b:41:04:a6:2e:5d:
88:40:92:2b:d2:53:3a:89:9b:6a:e2:24:aa:25:8a:
34:15:92:2c:63:83:05:19:bf:98:34:1f:98:8c:a2:
e2:48:1e:a0:74:d3:f2:cc:1d:f6:44:db:50:ff:6b:
04:29:95:62:14:5e:78:a0:b4:d9:69:5a:0d:0e:b3:
c6:26:1b:34:dd:c1:b2:80:fd:e8:8b:d9:30:22:c6:
80:e3:86:ef:a1:7c:1b:2f:18:2a:41:6c:b5:c6:6c:
3b:ab:ac:de:11:3f:34:d5:cd:48:ee:95:44:70:7b:
05:17:f5:b3:0c:bf:10:fc:89:d0:df:dc:f7:34:08:
68:17:50:e1:2c:3f:34:32:24:e4:c3:48:25:c9:13:
df:d2:60:7f:56:90:f9:60:12:91:36:20:22:47:73:
29:8a:3e:39:7d:44:27:ca:c0:61:95:e8:70:c6:33:
e5:6c:0a:4a:7a:5a:34:17:b8:c1:c2:53:99:f6:f6:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:DB:FE:AF:D8:8C:72:F6:52:27:2D:49:C1:E6:14:87:0F:D0:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF13E0287D611F0962F50F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.97.0-156.228.116.255
Signature Algorithm: sha256WithRSAEncryption
5c:b4:c0:74:58:20:64:f1:b2:dc:45:bd:41:2f:87:5d:58:42:
6b:7e:55:c0:53:05:f6:99:24:61:d1:b3:e0:95:33:c6:8b:96:
ac:25:12:6b:cb:5e:9c:f6:aa:f7:18:16:b3:d1:32:95:e8:7b:
ba:23:59:4f:de:81:7d:ae:c4:0e:69:fd:29:34:02:4b:13:33:
18:c6:07:a4:2a:22:42:34:36:06:e1:2b:18:b2:42:1a:78:b9:
ec:4e:2a:2c:01:9d:35:4a:f2:7e:15:09:38:16:d4:74:03:ab:
dc:65:c6:ef:10:db:c6:0e:bc:26:89:81:d3:ba:e3:a1:ba:5f:
2c:33:2f:a3:8b:d3:92:2d:87:36:d2:16:44:f1:21:7d:ea:01:
1c:2c:a5:38:1b:86:38:a6:fa:c1:fe:26:47:7c:2d:53:d0:f0:
43:dc:66:ea:44:22:79:c2:b8:30:11:b8:f8:52:8c:e1:d9:e7:
5c:5a:54:99:f6:c9:60:e1:62:cd:45:bf:c7:1e:aa:6c:f6:60:
af:57:3b:1c:aa:19:2f:73:b5:83:f2:52:b7:6a:e4:f1:71:22:
e2:19:92:7a:fd:8e:97:92:df:7a:4c:c9:9e:2f:d6:71:cf:24:
6a:c7:56:8f:11:4f:a2:35:fd:ab:86:f9:bd:ec:ee:4f:8c:96:
75:32:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:28 2025 by rpki-client