Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/220E0E8A688211F0A5FD6097DAE4EC9C.roa
File: 220E0E8A688211F0A5FD6097DAE4EC9C.roa (raw, json)
Hash identifier: PFrBlnKN7od9pF72LeVxG3vTdmxB2eEPhLMr/c9dIIY=
Subject key identifier: 06:21:A5:E0:B0:54:BD:C8:38:14:34:81:69:C9:38:CB:F2:F8:48:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016751
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/220E0E8A688211F0A5FD6097DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:34:18 +0000
ROA not before: Thu 24 Jul 2025 11:34:13 +0000
ROA not after: Wed 03 Sep 2025 11:34:13 +0000
asID: 203020
IP address blocks: 156.228.12.0/24 maxlen: 24
156.228.25.0/24 maxlen: 24
156.243.247.0/24 maxlen: 24
156.252.224.0/22 maxlen: 24
156.252.228.0/22 maxlen: 24
156.252.232.0/21 maxlen: 24
156.253.136.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.180.0/23 maxlen: 24
156.253.182.0/23 maxlen: 24
156.253.192.0/23 maxlen: 24
156.253.194.0/23 maxlen: 24
156.253.196.0/23 maxlen: 24
156.253.198.0/23 maxlen: 24
156.253.200.0/23 maxlen: 24
156.253.202.0/23 maxlen: 24
156.253.204.0/23 maxlen: 24
156.253.206.0/23 maxlen: 24
156.253.208.0/23 maxlen: 24
156.253.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91985 (0x16751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:34:13 2025 GMT
Not After : Sep 3 11:34:13 2025 GMT
Subject: CN=68821a3a-1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:c5:77:1d:83:bb:e6:81:1a:a6:fe:78:7c:
6f:14:62:e0:6b:fa:66:89:dc:81:6b:ea:b3:31:4e:
18:9c:4f:0b:e0:64:75:a5:da:c7:84:fb:93:43:c8:
66:08:c1:c1:d6:fc:31:10:61:dd:0c:bc:4a:bf:62:
99:9c:8d:fc:81:3a:a9:2f:11:c8:46:0a:51:d5:04:
b4:99:0d:82:a6:5e:85:37:c6:84:1e:11:b2:20:1f:
2d:2c:4f:2a:5b:58:16:e1:ce:08:68:2a:57:d8:f6:
5e:e9:82:cb:a6:6a:34:c5:62:30:9b:5a:1d:40:e5:
b4:d0:81:ed:fc:56:5a:b1:60:e5:53:05:9c:00:51:
3e:a3:3e:f8:99:a1:39:b6:0a:d0:34:4c:0a:fb:50:
df:c9:b7:14:ac:bd:ae:51:33:ec:c5:a5:9d:7c:7e:
cd:c2:a4:2f:4a:18:25:12:db:4d:a6:fa:ee:59:69:
cb:8f:96:13:6e:de:f7:34:c7:98:fc:98:c0:ad:0a:
df:16:c5:bb:83:55:0e:e8:08:40:53:04:ae:5d:e8:
f7:f7:fc:c1:f0:73:0a:6b:4d:09:31:9f:dc:37:ef:
c7:5d:5c:68:6b:2f:19:c5:b4:c1:e0:6a:09:76:4d:
ec:5e:8f:f9:6b:59:9b:81:25:19:43:d7:14:23:a7:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:A5:E0:B0:54:BD:C8:38:14:34:81:69:C9:38:CB:F2:F8:48:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/220E0E8A688211F0A5FD6097DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.12.0/24
156.228.25.0/24
156.243.247.0/24
156.252.224.0/20
156.253.136.0/24
156.253.163.0/24
156.253.180.0/22
156.253.192.0-156.253.211.255
Signature Algorithm: sha256WithRSAEncryption
15:36:23:c6:cf:fb:49:5e:49:78:b5:73:b3:d2:8e:9c:65:08:
ab:c4:bd:c2:2d:a3:03:a1:f6:ef:f0:cc:66:6c:14:2b:dd:6e:
7f:a4:97:78:6c:90:6a:9b:1e:d0:d2:21:5c:a0:9c:a6:bc:ab:
f3:51:51:5c:d7:4c:52:59:77:1d:ee:d7:2c:da:b7:e9:da:60:
a6:d7:5f:fd:2e:7e:50:3b:7d:2b:2f:2a:50:38:c2:11:ab:c9:
df:1f:46:59:6e:06:53:8b:07:d8:47:50:ca:14:88:95:72:d4:
33:9b:21:14:38:25:c5:b1:8e:ab:86:03:30:cd:cd:df:55:06:
31:c3:05:87:94:4d:9b:af:da:84:9e:8a:7c:ae:f9:de:78:c6:
e6:20:65:92:4c:7b:d4:90:2a:b9:e8:0f:23:7e:af:2f:19:4a:
32:e0:d3:51:45:32:c2:e2:1c:22:6c:e7:db:e5:65:13:2a:56:
40:97:64:ca:54:bf:a0:da:75:1a:83:87:11:8c:ee:95:21:91:
25:42:45:ab:78:49:c5:26:a1:b2:43:10:af:77:47:84:f5:95:
2a:4b:4a:62:82:39:1c:ec:98:0d:a4:f0:d9:40:0e:d0:23:08:
f2:40:8f:2d:78:9b:8e:1c:de:8e:7a:39:3e:d1:cb:cd:61:0b:
3e:ee:fc:12
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAWdRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTEzNDEzWhcNMjUwOTAzMTEzNDEzWjAYMRYw
FAYDVQQDEw02ODgyMWEzYS0xZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl4nFdx2Du+aBGqb+eHxvFGLga/pmidyBa+qzMU4YnE8L4GR1pdrHhPuT
Q8hmCMHB1vwxEGHdDLxKv2KZnI38gTqpLxHIRgpR1QS0mQ2Cpl6FN8aEHhGyIB8t
LE8qW1gW4c4IaCpX2PZe6YLLpmo0xWIwm1odQOW00IHt/FZasWDlUwWcAFE+oz74
maE5tgrQNEwK+1DfybcUrL2uUTPsxaWdfH7NwqQvShglEttNpvruWWnLj5YTbt73
NMeY/JjArQrfFsW7g1UO6AhAUwSuXej39/zB8HMKa00JMZ/cN+/HXVxoay8ZxbTB
4GoJdk3sXo/5a1mbgSUZQ9cUI6d/OwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFAYh
peCwVL3IOBQ0gWnJOMvy+EiGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMjBFMEU4QTY4ODIxMUYwQTVGRDYwOTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAnOQMAwQAnOQZAwQAnPP3AwQE
nPzgAwQAnP2IAwQAnP2jAwQCnP20MAwDBAac/cADBAKc/dAwDQYJKoZIhvcNAQEL
BQADggEBABU2I8bP+0leSXi1c7PSjpxlCKvEvcItowOh9u/wzGZsFCvdbn+kl3hs
kGqbHtDSIVygnKa8q/NRUVzXTFJZdx3u1yzat+naYKbXX/0uflA7fSsvKlA4whGr
yd8fRlluBlOLB9hHUMoUiJVy1DObIRQ4JcWxjquGAzDNzd9VBjHDBYeUTZuv2oSe
inyu+d54xuYgZZJMe9SQKrnoDyN+ry8ZSjLg01FFMsLiHCJs59vlZRMqVkCXZMpU
v6DadRqDhxGM7pUhkSVCRat4ScUmobJDEK93R4T1lSpLSmKCORzsmA2k8NlADtAj
CPJAjy14m44c3o56OT7Ry81hCz7u/BI=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:56:57 2025 by rpki-client