Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B494D6840011F0966916E6DAE4EC9C.roa
File: E1B494D6840011F0966916E6DAE4EC9C.roa (raw, json)
Hash identifier: ygXwJpsbdBsQsq+J95bzUsa+0z1wyJRgDbZVjFLYNTo=
Subject key identifier: D8:C3:D9:AD:E2:2B:A4:80:70:1D:5B:68:E7:67:C5:7A:F3:49:F7:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B494D6840011F0966916E6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 11:19:37 +0000
ROA not before: Thu 28 Aug 2025 11:19:31 +0000
ROA not after: Sun 28 Sep 2025 11:19:31 +0000
asID: 48031
IP address blocks: 156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94851 (0x17283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 11:19:31 2025 GMT
Not After : Sep 28 11:19:31 2025 GMT
Subject: CN=68b03b49-2822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:27:94:79:13:8d:11:ad:08:41:b0:12:35:
a5:6c:bf:f0:23:6e:36:25:96:e8:2b:47:11:57:e9:
a7:8b:ce:18:6f:2d:89:5f:b3:cb:d1:7f:c0:c4:e6:
7b:d8:7c:1d:f4:0f:7c:5b:cc:34:ef:17:db:6d:48:
f6:6d:d1:1a:3c:5a:81:ef:b0:fc:c2:6a:16:e9:ca:
f6:77:cd:03:4e:ab:1c:f3:72:f3:d1:ae:82:24:e0:
43:0e:e0:8e:12:36:45:ba:e9:a9:88:f2:76:62:6f:
4b:62:f9:84:00:ef:3c:24:17:7e:71:03:68:a3:b7:
fd:88:cc:39:f3:04:81:f0:30:8f:24:80:81:b8:54:
43:10:5f:f9:8a:71:3f:86:e3:5f:d3:ac:7b:1a:9a:
77:28:0f:5a:69:60:ef:f9:06:0f:91:02:38:d0:7e:
f5:48:5a:ef:a8:ca:af:21:2c:70:d1:3a:76:32:38:
17:ea:ab:e7:f3:16:a9:3e:99:90:dc:73:80:f8:0f:
e8:b0:67:dc:b7:c3:bd:61:4b:14:71:42:24:ff:8a:
32:64:8b:dc:dc:4d:07:18:7b:c3:3b:a4:ff:bf:4f:
7f:89:25:a2:ee:9c:8c:cd:66:89:df:c3:1f:ad:77:
ab:cf:11:8f:49:82:04:a0:4b:24:2b:6e:a5:7b:dc:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:D9:AD:E2:2B:A4:80:70:1D:5B:68:E7:67:C5:7A:F3:49:F7:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B494D6840011F0966916E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.130.0-156.246.149.255
Signature Algorithm: sha256WithRSAEncryption
0e:21:4e:64:db:76:a3:5a:77:58:0b:a9:a6:03:81:8b:51:ab:
f2:7c:89:65:d3:c7:6a:dd:5e:30:e9:e8:37:7e:7f:0d:bc:e9:
4d:1b:69:22:5a:68:21:5a:a8:76:71:8e:b5:8d:df:7e:a4:87:
22:5b:c8:9c:29:8f:e5:13:15:16:d9:a7:4c:76:ef:77:70:76:
d9:45:22:13:48:26:bc:c1:dd:f2:7d:ab:20:82:ed:fc:58:c3:
b8:dd:7d:9e:58:c9:5d:f7:46:04:72:8a:aa:84:46:c2:49:61:
87:8c:79:a2:d2:2a:47:38:10:89:11:a2:72:34:1f:4a:23:97:
5a:9f:5d:5e:e5:f9:a4:e0:c9:7c:2c:8b:9c:22:ea:3f:22:99:
22:a5:05:07:a8:da:82:33:16:8c:7c:93:7a:ea:4b:15:b4:8f:
92:db:f4:63:63:c8:36:ef:20:d3:dc:87:ba:ba:22:9e:94:b5:
08:cb:20:60:e8:44:ed:66:00:0e:95:2f:58:5b:e3:50:2c:81:
b7:91:93:c5:32:7d:23:6b:dd:f7:b3:92:a9:0f:14:97:88:d9:
9d:65:f2:37:7a:14:20:ce:48:d8:bb:48:75:af:9a:1b:28:df:
d8:b4:e9:e4:ca:cc:f5:33:8c:d7:62:88:76:fc:c1:44:20:9d:
53:61:c9:50
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXKDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTExOTMxWhcNMjUwOTI4MTExOTMxWjAYMRYw
FAYDVQQDEw02OGIwM2I0OS0yODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxeonlHkTjRGtCEGwEjWlbL/wI242JZboK0cRV+mni84Yby2JX7PL0X/A
xOZ72Hwd9A98W8w07xfbbUj2bdEaPFqB77D8wmoW6cr2d80DTqsc83Lz0a6CJOBD
DuCOEjZFuumpiPJ2Ym9LYvmEAO88JBd+cQNoo7f9iMw58wSB8DCPJICBuFRDEF/5
inE/huNf06x7Gpp3KA9aaWDv+QYPkQI40H71SFrvqMqvISxw0Tp2MjgX6qvn8xap
PpmQ3HOA+A/osGfct8O9YUsUcUIk/4oyZIvc3E0HGHvDO6T/v09/iSWi7pyMzWaJ
38MfrXerzxGPSYIEoEskK26le9wv2wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNjD
2a3iK6SAcB1baOdnxXrzSfemMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMUI0OTRENjg0MDAxMUYwOTY2OTE2RTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc9oIDBAGc9pQwDQYJKoZI
hvcNAQELBQADggEBAA4hTmTbdqNad1gLqaYDgYtRq/J8iWXTx2rdXjDp6Dd+fw28
6U0baSJaaCFaqHZxjrWN336khyJbyJwpj+UTFRbZp0x273dwdtlFIhNIJrzB3fJ9
qyCC7fxYw7jdfZ5YyV33RgRyiqqERsJJYYeMeaLSKkc4EIkRonI0H0ojl1qfXV7l
+aTgyXwsi5wi6j8imSKlBQeo2oIzFox8k3rqSxW0j5Lb9GNjyDbvINPch7q6Ip6U
tQjLIGDoRO1mAA6VL1hb41AsgbeRk8UyfSNr3fezkqkPFJeI2Z1l8jd6FCDOSNi7
SHWvmhso39i06eTKzPUzjNdiiHb8wUQgnVNhyVA=
-----END CERTIFICATE-----
Generated at Thu Sep 4 05:17:55 2025 by rpki-client