Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C6E7E06FB511F0AEE623F2DAE4EC9C.roa
File: 40C6E7E06FB511F0AEE623F2DAE4EC9C.roa (raw, json)
Hash identifier: XdKnTJIT8Ku33o4q1rPXDvDoZ1WYBitKw62EOUy+6/A=
Subject key identifier: FE:24:7D:44:39:B4:CC:51:13:79:44:92:3D:18:41:F4:DC:50:1D:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C6E7E06FB511F0AEE623F2DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 15:27:52 +0000
ROA not before: Sat 02 Aug 2025 15:27:46 +0000
ROA not after: Sun 07 Sep 2025 15:27:46 +0000
asID: 200373
IP address blocks: 156.228.97.0/24 maxlen: 24
156.228.98.0/24 maxlen: 24
156.228.99.0/24 maxlen: 24
156.228.100.0/24 maxlen: 24
156.228.101.0/24 maxlen: 24
156.228.102.0/24 maxlen: 24
156.228.103.0/24 maxlen: 24
156.228.104.0/24 maxlen: 24
156.228.105.0/24 maxlen: 24
156.228.106.0/24 maxlen: 24
156.228.107.0/24 maxlen: 24
156.228.108.0/24 maxlen: 24
156.228.109.0/24 maxlen: 24
156.228.110.0/24 maxlen: 24
156.228.111.0/24 maxlen: 24
156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92324 (0x168a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 15:27:46 2025 GMT
Not After : Sep 7 15:27:46 2025 GMT
Subject: CN=688e2e78-e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:ac:bd:53:ef:1c:3d:8f:0d:c0:53:00:ee:
8a:d6:71:22:ea:45:11:c5:d8:97:00:12:53:91:c2:
57:90:66:c4:f3:53:cc:c8:00:93:06:cd:d7:45:b6:
38:0f:bf:0a:a4:d1:86:80:21:78:ff:54:27:6e:0a:
4d:8e:2f:57:82:42:45:44:7f:7e:7a:04:29:34:ef:
cc:d8:02:71:17:8c:de:4c:11:af:b7:c6:e3:08:57:
a9:21:54:5e:48:4c:6e:11:b0:ef:e3:8e:23:98:2b:
c1:7b:49:78:b9:be:1a:85:6e:40:07:69:a4:e2:09:
23:b8:d9:62:09:18:96:09:39:6d:3f:32:e6:08:51:
8e:2a:38:08:b8:b7:5e:20:7d:b3:35:bb:5a:a8:46:
b1:81:e5:7f:00:c1:30:e9:73:d9:cb:d8:64:d9:8a:
65:79:17:2d:75:fa:15:fb:f5:f7:02:3e:5a:ea:8e:
60:3a:64:e6:58:91:1f:e2:30:8d:8f:cc:a1:1a:69:
71:c7:98:3a:57:e2:6b:5b:0e:3d:bb:89:c1:0b:23:
1f:8d:19:df:b7:65:e6:c9:14:24:be:e5:dd:2a:4a:
8f:f1:0c:b0:27:c8:33:5f:9d:ed:d0:5f:2e:71:d8:
09:5b:73:9a:ec:08:52:16:3b:c9:c4:d5:86:cd:75:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:24:7D:44:39:B4:CC:51:13:79:44:92:3D:18:41:F4:DC:50:1D:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C6E7E06FB511F0AEE623F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.97.0-156.228.116.255
Signature Algorithm: sha256WithRSAEncryption
2e:fa:77:33:01:71:e2:c8:8f:b4:01:ef:35:74:fe:ec:df:ec:
73:a8:cc:79:e2:a3:53:4e:50:b7:b7:68:73:8b:9e:c4:09:0b:
95:ad:99:ee:a3:92:59:fa:be:a2:19:95:c0:a8:7c:3c:8c:f4:
d4:24:b2:4c:dd:6a:7e:36:c8:40:ec:10:9b:98:0a:66:a5:15:
1d:93:53:0d:dd:be:73:4c:71:2f:29:cb:07:9d:19:83:29:d1:
f7:33:ea:7b:2b:57:8b:ea:0e:1c:75:8a:64:7d:85:0d:f0:45:
40:bd:04:ac:f6:54:95:2b:fc:e4:65:7e:4b:53:3b:8d:20:72:
84:49:be:c0:c1:83:8f:9a:74:53:94:75:f9:37:45:81:70:74:
e7:25:cc:b5:ac:d8:22:76:c6:ac:2e:98:d0:69:43:90:ee:0c:
2a:10:3e:70:42:9f:0d:35:e3:e7:25:20:9e:b0:1d:3c:93:c9:
d0:60:be:1f:08:e0:f3:6e:6e:e0:d6:c1:5d:30:0b:ee:40:0c:
8d:23:71:e8:0a:0f:f8:33:73:f3:b6:26:2c:d4:a3:72:e4:a3:
45:15:c2:2e:9d:13:6f:a5:3e:26:73:eb:be:80:7d:4d:8d:81:
4c:39:65:a7:35:80:a4:2f:53:51:c5:fd:4b:68:33:39:27:d2:
8b:c7:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:55 2025 by rpki-client