Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2A40FB6831811F0858E37F4DAE4EC9C.roa
File: B2A40FB6831811F0858E37F4DAE4EC9C.roa (raw, json)
Hash identifier: wjxN0GRwplGGog8PUEdbRZlUzgpVcKvD/pX3bMxeIpU=
Subject key identifier: 2B:5D:F2:2F:C4:66:CD:E6:3A:05:98:44:50:8A:7D:6A:95:E6:D0:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017123
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2A40FB6831811F0858E37F4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:37:35 +0000
ROA not before: Wed 27 Aug 2025 07:37:31 +0000
ROA not after: Wed 01 Oct 2025 07:37:31 +0000
asID: 61112
IP address blocks: 156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94499 (0x17123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 07:37:31 2025 GMT
Not After : Oct 1 07:37:31 2025 GMT
Subject: CN=68aeb5bf-5651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:7a:f1:11:66:6c:7a:1a:5a:02:6e:48:11:
fa:88:04:2f:b7:ec:54:31:20:b9:39:93:23:83:12:
76:dd:81:68:a5:7f:bc:53:b8:d0:21:69:5c:fd:58:
04:5d:06:cf:20:f7:28:fb:f3:d5:9b:bc:2b:91:ec:
19:91:ae:b6:d5:40:0c:c2:8a:e7:82:93:e9:4e:f2:
46:f2:8f:2a:02:fd:87:05:65:25:20:56:5e:1b:df:
11:90:f1:af:e8:07:5a:6b:62:82:3f:e2:15:81:a6:
5b:49:23:0e:9e:6a:50:c0:34:92:a4:a2:7e:52:b9:
98:b3:cd:66:e1:06:46:21:83:f1:d6:e6:62:19:8e:
59:c5:c1:75:92:7a:78:70:12:96:ce:02:12:1d:bf:
48:e0:87:21:5a:28:2f:cc:45:b2:c2:f5:c2:65:37:
d4:7f:d6:df:56:0f:82:de:74:4d:29:11:64:4b:79:
8d:6f:f5:7e:57:3c:52:cb:32:99:15:fa:e5:f5:e6:
0e:ad:fa:bb:bc:73:61:38:b7:04:1c:18:3b:8f:5b:
c9:fe:a5:53:16:ba:51:74:2d:17:7a:ee:c9:65:5e:
fa:d5:36:9c:2d:ed:16:a2:79:ec:33:03:7d:ff:40:
b0:ba:73:99:9f:69:58:3b:ad:9e:62:40:e2:07:ff:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:F2:2F:C4:66:CD:E6:3A:05:98:44:50:8A:7D:6A:95:E6:D0:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2A40FB6831811F0858E37F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
72:61:04:4a:a0:43:ca:98:be:0f:8b:7d:5c:ab:b4:13:9e:c0:
67:16:71:6a:93:58:54:8c:aa:a0:8e:61:ad:69:9f:f8:72:1a:
0f:9c:6d:14:20:33:9f:03:07:0b:51:53:bd:11:9c:10:ae:ec:
48:48:1e:48:8e:cc:a2:bf:11:ef:e2:fe:0c:38:f4:37:53:c8:
9b:ce:bb:b0:c3:ee:1c:dd:c2:96:05:bb:99:aa:d9:2e:0f:9e:
53:bd:bc:38:60:1f:76:58:05:9d:37:c4:2f:d9:c2:de:fb:d3:
6e:cf:db:88:fa:fc:e9:a8:df:48:37:57:02:e6:9f:a5:46:5d:
11:9e:c6:21:12:4a:0e:71:62:99:3a:dd:f5:dd:58:cc:9d:6d:
77:44:dd:7a:59:0d:66:39:b7:2a:30:d8:bd:99:0a:35:9b:e5:
cd:e4:83:dc:1e:b0:b8:5f:a4:7f:2f:12:c4:ba:b9:0b:35:14:
d7:b9:48:fa:ac:4f:e8:f7:54:d7:87:e5:0e:70:21:a0:dc:ce:
d2:8f:30:ad:92:8a:34:a2:d8:7a:12:bd:19:06:d3:8d:86:1e:
82:22:b0:42:25:4d:80:8b:22:94:2e:e2:2c:cf:4e:c7:86:31:
25:f4:04:eb:09:a8:d3:16:32:57:62:60:6a:9d:09:14:0f:a0:
e9:93:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 05:15:20 2025 by rpki-client