Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8937914872C11F08BCF2098DAE4EC9C.roa
File: E8937914872C11F08BCF2098DAE4EC9C.roa (raw, json)
Hash identifier: ZVyw8udNYSj6FrLalbNDLPB+LcwyGiNRAnuKdQTFchE=
Subject key identifier: 61:BB:F8:83:F5:2D:32:41:2C:4E:BA:1C:A3:F3:DB:B8:8B:C3:72:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01755E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8937914872C11F08BCF2098DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 12:12:20 +0000
ROA not before: Mon 01 Sep 2025 12:12:13 +0000
ROA not after: Wed 08 Oct 2025 12:12:13 +0000
asID: 200373
IP address blocks: 156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
156.233.85.0/24 maxlen: 24
156.233.86.0/24 maxlen: 24
156.233.87.0/24 maxlen: 24
156.233.88.0/24 maxlen: 24
156.233.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95582 (0x1755e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 12:12:13 2025 GMT
Not After : Oct 8 12:12:13 2025 GMT
Subject: CN=68b58da4-4339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:72:81:ef:dc:06:0a:19:f5:5a:03:30:7e:
95:90:59:5b:cc:92:0f:0a:25:a2:db:b0:07:12:21:
b0:35:65:13:16:0d:55:bb:71:1d:52:c5:bb:f1:ce:
5d:f4:ce:1b:e1:f5:bf:2a:55:f5:22:9b:b5:38:47:
b7:87:b6:40:b9:7a:2c:8a:76:43:2e:77:cf:be:84:
7f:01:e5:a9:a0:b2:b5:f4:90:f4:fc:a1:44:8e:b7:
1f:f6:4d:bb:a1:12:39:0b:29:9e:ed:46:83:74:ca:
57:15:c5:e5:c6:c8:45:e3:9e:ee:81:0e:1e:a6:09:
b9:db:f1:aa:c2:14:33:a7:6b:81:68:c7:04:e8:3f:
99:8e:ad:ee:f9:c2:c1:b6:55:a2:9e:8c:6f:a7:a4:
fe:eb:8c:be:89:09:53:c2:a2:6f:49:ea:0e:2a:1f:
c2:c2:44:50:a5:82:5b:a6:66:22:09:ce:e3:22:b4:
65:30:c8:eb:e9:b7:85:69:a9:b8:b4:fc:10:0f:73:
6e:c3:b9:b1:16:76:97:0a:f0:04:ae:14:f8:2f:09:
c1:ef:1c:d1:43:9e:7a:79:7f:26:ba:5e:cb:8d:e0:
cb:e7:4e:0b:31:1e:b1:5e:f6:15:3a:f8:1f:a3:67:
91:49:39:11:7f:97:cb:1e:0a:59:35:c0:fa:dc:d8:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:F8:83:F5:2D:32:41:2C:4E:BA:1C:A3:F3:DB:B8:8B:C3:72:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8937914872C11F08BCF2098DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.72.0/22
156.233.84.0-156.233.89.255
Signature Algorithm: sha256WithRSAEncryption
4d:9b:b2:11:a3:e7:1b:c8:17:6f:e5:a4:25:00:de:47:fb:5c:
a6:b2:9d:80:db:02:58:75:72:a2:42:bd:34:21:5a:ef:2d:0c:
37:b2:6e:b2:1e:9c:e6:c2:42:7b:41:4f:d1:4d:a7:81:12:3d:
96:82:b1:f4:79:c1:1e:5d:b3:78:93:58:ab:96:ae:ee:c5:3e:
22:bf:8d:9c:20:23:03:75:3e:2a:01:f2:38:2c:ee:7d:a2:9b:
8c:61:b0:a6:a0:c9:aa:29:af:ab:ae:40:05:87:3e:89:09:13:
d9:2e:93:33:ac:47:fb:6d:70:ac:49:6a:74:93:00:7e:3e:64:
24:ec:80:98:a2:a9:8b:8d:09:39:c0:63:5e:8c:c6:1d:80:a5:
5d:f9:93:0f:ad:3b:80:8b:6e:4c:7f:72:4f:38:28:45:30:cf:
9f:32:a4:7c:98:00:ea:96:f1:50:2e:61:0f:fc:96:98:fa:cb:
28:a0:7a:e7:b6:d9:eb:23:ee:bd:a4:cb:f1:c5:6d:2a:95:51:
18:83:6b:9a:04:d5:61:c2:7a:ac:7a:f3:d0:b8:a2:62:38:4a:
c4:22:bb:e4:0d:86:e0:42:52:e2:2f:4d:ad:50:80:7a:80:4c:
c8:10:b3:c7:51:8d:3f:24:0b:1e:95:97:21:8a:21:3b:ae:f6:
83:c9:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:22 2025 by rpki-client