Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8663089483F911F0B4EA36B6DAE4EC9C.roa
File: 8663089483F911F0B4EA36B6DAE4EC9C.roa (raw, json)
Hash identifier: f6j7tsQUOij8Svyi2Ghtj3U3xdFyI0MuciLvIh+PhF4=
Subject key identifier: D2:37:5D:DD:8F:C4:2B:4D:20:7A:44:36:85:4E:3C:8F:77:72:24:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017274
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8663089483F911F0B4EA36B6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 10:26:58 +0000
ROA not before: Thu 28 Aug 2025 10:26:53 +0000
ROA not after: Sun 28 Sep 2025 10:26:53 +0000
asID: 44559
IP address blocks: 156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.174.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94836 (0x17274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 10:26:53 2025 GMT
Not After : Sep 28 10:26:53 2025 GMT
Subject: CN=68b02ef2-003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:ac:42:5e:ef:4b:32:6f:b9:03:75:bd:8d:
42:a5:e0:0a:07:15:f2:02:3d:a0:d6:e2:3f:39:7d:
bb:33:a6:39:e4:d2:28:a0:8d:c0:3a:b6:d3:8d:0b:
e6:a6:ff:96:bb:cf:d0:85:b6:4f:97:d2:a3:1a:f0:
64:82:f4:40:a8:f8:5b:65:c0:a2:e2:f0:2e:a7:b1:
b4:4d:6a:48:63:ce:50:cd:03:7a:f5:6f:83:63:c2:
39:0e:e5:95:c9:e4:d0:42:6f:74:fe:5c:da:3c:8a:
85:e5:17:6a:4f:5d:e0:ee:bc:0c:2e:c1:cb:98:97:
93:06:b8:5f:f0:49:e1:98:b2:1d:cf:83:d2:83:0f:
08:25:99:dc:29:1c:4d:06:55:b0:7c:7d:a4:87:cc:
0f:35:87:d7:20:b2:2d:7d:7e:da:08:7b:2a:76:7d:
82:e3:29:89:3f:46:e7:0a:44:d7:3e:d9:9e:d6:77:
d7:7e:ca:9e:69:72:dd:af:6b:4a:e3:22:55:dc:14:
d1:4a:eb:5a:28:50:98:ab:77:e6:d2:c2:a3:39:65:
7c:46:aa:19:d7:e7:a5:a4:e1:bf:7c:92:c0:e8:07:
e9:29:46:fe:38:4e:05:39:00:98:5a:82:ca:38:2c:
c8:8f:97:3b:c2:a4:ed:4e:7f:ea:e9:50:44:c5:d1:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:5D:DD:8F:C4:2B:4D:20:7A:44:36:85:4E:3C:8F:77:72:24:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8663089483F911F0B4EA36B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.154.0-156.246.160.255
156.246.166.0-156.246.178.255
Signature Algorithm: sha256WithRSAEncryption
39:fe:c0:67:3b:58:f3:91:15:df:11:69:39:61:97:e1:96:e6:
4f:15:a1:c4:30:72:0d:15:0c:47:cb:af:a6:0f:69:51:1f:ef:
b1:53:71:27:93:05:93:69:c3:ee:58:69:c1:e4:57:40:c7:e2:
0e:b4:58:43:fc:68:62:b7:97:b4:ed:4d:9d:b2:1c:f0:d2:30:
6c:fc:8f:cf:32:47:3e:20:6b:fd:84:62:c4:8e:d3:9d:d4:89:
53:c7:6b:59:e0:39:b3:43:08:02:59:72:ee:f8:11:c6:11:1a:
76:a7:84:17:e9:1c:50:f1:ea:c1:f3:ab:a3:cb:27:d7:38:be:
6b:39:63:93:d2:34:a7:b1:1a:63:26:ac:93:4b:58:30:a1:48:
be:c4:c0:83:e1:23:f6:5a:e6:eb:9c:f1:d7:a2:26:4b:29:d3:
c0:be:69:1e:40:32:b0:71:ed:13:f8:d6:2f:3c:cb:1a:15:1c:
aa:67:a5:c5:9f:b2:20:f8:64:64:e2:17:f7:a9:19:51:3f:59:
1f:18:5f:51:8e:b0:b5:ae:5e:43:be:45:5b:70:e2:aa:dd:ad:
80:8c:48:35:a1:9a:98:59:9c:46:11:ee:6f:5f:63:6d:f2:0f:
58:5d:c0:a3:db:f0:9f:51:be:3d:6f:90:64:6c:5d:2c:97:f4:
b4:38:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:17 2025 by rpki-client