Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDB990E6FC911F0BE5035F3DAE4EC9C.roa
File: 1FDB990E6FC911F0BE5035F3DAE4EC9C.roa (raw, json)
Hash identifier: WsnqlvRKRK5o64vBwLAtsp4JD9QrzfNZrmnCHfjIFb8=
Subject key identifier: CA:A9:37:15:DF:F9:00:58:29:09:29:19:57:84:0C:EA:3F:14:F7:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDB990E6FC911F0BE5035F3DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 17:50:07 +0000
ROA not before: Sat 02 Aug 2025 17:50:01 +0000
ROA not after: Wed 10 Sep 2025 17:50:01 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92352 (0x168c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 17:50:01 2025 GMT
Not After : Sep 10 17:50:01 2025 GMT
Subject: CN=688e4fce-1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:ba:bd:14:2f:5d:8e:c6:e8:a9:a6:14:06:
7c:c9:ea:21:76:d6:63:a9:8f:4d:1e:04:86:c1:27:
67:86:0a:ba:c6:dd:03:43:67:e4:ef:f7:09:9c:e0:
60:1a:52:80:ec:4c:a6:33:f2:06:6a:44:f2:8f:0c:
71:11:a2:25:8a:df:29:de:d0:91:94:a0:9e:8f:fc:
58:6d:13:2a:e6:fa:e4:55:fc:2d:f8:5f:92:4c:43:
31:fa:34:aa:8b:e4:a2:85:42:ef:5b:fa:f1:2a:44:
c8:74:48:1c:d9:11:20:85:8d:2a:93:e8:5c:e6:2a:
10:1b:11:51:7c:2b:52:3b:dd:ed:60:a1:ab:4c:54:
90:0b:c7:e1:79:83:9e:3a:0c:92:bf:9c:b6:47:7c:
74:61:51:a1:35:22:92:cf:6b:0d:94:69:a2:ce:f9:
5f:7b:7d:08:d0:70:6e:1c:3c:5a:c2:d3:c2:6a:dc:
de:5a:d0:2f:1e:b8:a8:d2:0a:74:92:cc:a1:d4:b5:
15:28:31:3a:78:83:d5:1f:88:c9:78:8b:ee:5e:63:
ea:5f:ad:02:56:34:c7:2a:0d:6f:ab:a5:73:5f:7a:
77:65:a0:9f:94:56:50:13:d6:96:d1:15:0b:48:0c:
84:23:b0:4a:bc:15:76:c9:38:4e:71:d6:01:4c:f9:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:37:15:DF:F9:00:58:29:09:29:19:57:84:0C:EA:3F:14:F7:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDB990E6FC911F0BE5035F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:dc:51:7e:9e:c2:24:67:4f:87:40:30:00:00:9e:c4:f7:6d:
56:f3:80:fe:02:ab:0f:19:22:97:0e:9d:5b:cb:43:8f:99:38:
58:0d:9a:8c:90:92:db:a7:2d:4e:c0:a6:82:14:8b:59:1f:0b:
96:1a:8a:7c:63:aa:97:e7:ef:65:d1:5b:23:a5:42:72:b2:de:
27:1d:8d:f7:a6:c5:3c:59:86:d4:e0:44:ac:b3:55:33:d5:23:
1a:39:a5:45:2b:c4:99:bb:6a:b3:26:4a:00:e7:69:cc:69:bf:
06:07:65:89:70:2b:67:03:55:ea:60:52:8c:cf:bd:ce:76:9a:
76:45:67:cd:6e:3c:74:38:13:8e:34:48:7d:d7:24:93:d6:05:
49:85:76:10:8c:75:b8:8f:c2:49:85:50:c5:07:3b:1c:93:6e:
96:4a:0c:da:4d:4c:64:50:17:7a:ea:1d:db:9e:a7:02:94:4d:
bb:f9:36:5f:17:dd:b4:5b:72:3e:49:64:d2:69:b0:18:eb:52:
8e:8f:a6:ae:98:fa:4c:fb:62:67:21:49:a7:49:db:ba:b4:b9:
cd:65:ef:6d:77:d4:25:09:37:02:37:6d:31:b2:05:08:c8:df:
cb:aa:ac:7f:17:65:e1:ab:3f:20:a9:fc:7a:e3:16:cb:77:5d:
b6:8f:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:37 2025 by rpki-client