Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764020566FB211F0ADFAB1E0DAE4EC9C.roa
File: 764020566FB211F0ADFAB1E0DAE4EC9C.roa (raw, json)
Hash identifier: aD2YrrxAA4oZeYUjnK4zcSWfTsLjymbM0ojR3cdYiSg=
Subject key identifier: DF:43:FB:B5:A8:64:61:BF:A2:03:2C:1C:60:E7:35:4D:3F:1C:D3:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764020566FB211F0ADFAB1E0DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 15:07:53 +0000
ROA not before: Sat 02 Aug 2025 15:07:48 +0000
ROA not after: Sun 21 Sep 2025 15:07:48 +0000
asID: 135377
IP address blocks: 156.229.126.0/24 maxlen: 24
156.229.127.0/24 maxlen: 24
156.229.224.0/24 maxlen: 24
156.229.225.0/24 maxlen: 24
156.229.226.0/24 maxlen: 24
156.229.227.0/24 maxlen: 24
156.232.92.0/24 maxlen: 24
156.232.93.0/24 maxlen: 24
156.232.94.0/24 maxlen: 24
156.232.95.0/24 maxlen: 24
156.232.96.0/24 maxlen: 24
156.232.97.0/24 maxlen: 24
156.232.98.0/24 maxlen: 24
156.232.99.0/24 maxlen: 24
156.232.100.0/24 maxlen: 24
156.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92320 (0x168a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 15:07:48 2025 GMT
Not After : Sep 21 15:07:48 2025 GMT
Subject: CN=688e29c9-4fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:ef:e6:2f:d3:b4:b1:4f:6b:a9:4f:52:6d:
48:e4:34:c7:6f:7f:2b:28:fd:99:5a:c8:e9:6f:56:
dc:2b:31:6d:ff:8c:db:7f:fa:15:f8:0e:d4:85:72:
6e:b3:d8:61:c4:c1:2a:bd:2a:3b:b0:0b:90:d9:ed:
39:dd:db:e4:37:86:97:db:52:a5:43:ec:56:e3:6f:
5a:e2:0d:bb:b3:29:63:23:70:b8:f3:9e:15:76:ff:
b6:94:67:19:f0:6c:74:3d:c0:a4:f4:4b:8c:25:c8:
61:91:e8:09:ac:5c:82:f7:81:ec:60:50:0e:90:d7:
9a:04:c9:59:d2:40:b7:b9:72:68:2f:06:3b:a9:2a:
ee:be:e5:f1:34:80:8f:06:13:a1:4f:8e:35:31:4f:
88:ac:d4:0d:99:9b:ee:d1:c6:6d:18:d0:a9:17:73:
92:59:c0:c7:98:90:0c:a4:7c:88:c5:51:ad:14:5d:
49:10:97:1a:fd:8d:d2:9b:51:b6:76:f7:6c:81:c7:
f5:58:44:f2:e2:64:a9:ac:94:ae:ff:83:fc:e4:5e:
2f:a9:20:6c:b7:09:c3:de:73:d2:81:4f:5e:ef:51:
6e:9a:d6:d4:75:21:d3:92:65:e4:49:2c:3a:69:aa:
0b:de:fe:ce:ba:6c:d7:fd:03:18:f5:e5:92:1c:77:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:FB:B5:A8:64:61:BF:A2:03:2C:1C:60:E7:35:4D:3F:1C:D3:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764020566FB211F0ADFAB1E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.126.0/23
156.229.224.0/22
156.232.92.0-156.232.101.255
Signature Algorithm: sha256WithRSAEncryption
80:d6:45:ef:ee:1d:e9:da:07:63:e0:f3:5f:3c:1b:b8:dc:89:
88:e2:cc:60:13:c0:e5:7c:df:5d:a0:ef:87:7d:b4:75:2f:a2:
4e:cf:37:73:8b:ca:a9:ce:76:2c:2c:dc:f6:7c:fb:19:e2:01:
42:30:5c:42:25:53:1b:4c:61:c5:a2:24:f9:fa:d3:be:76:9b:
e9:64:00:19:95:12:48:2b:a9:9a:7c:40:35:c7:68:46:0f:33:
ac:cc:f0:b8:8e:66:8a:3f:16:8b:2c:97:bb:28:c1:25:95:be:
3f:8e:81:19:18:a6:e6:95:ec:b2:02:17:60:b8:20:f4:68:4b:
14:ca:71:6b:aa:e0:0e:8a:61:fe:63:84:9d:bc:7b:da:cc:9d:
8c:02:f3:53:78:0a:21:1e:1a:23:c1:e8:e2:4b:fa:07:ce:9f:
fd:4a:dd:be:90:41:fb:36:4c:a1:2f:c7:06:24:83:a3:84:30:
23:4f:8f:ca:53:cd:80:81:66:89:15:05:4b:f0:7c:5d:9a:6c:
fe:e4:76:e5:1e:3b:42:aa:fe:0c:85:22:bc:87:ee:ba:d8:8d:
9c:c3:5e:7c:6c:34:c0:bb:28:c5:fc:0e:7b:97:36:1b:57:9f:
55:87:ae:4a:b1:84:f7:56:85:7e:17:32:2b:bb:23:db:71:a1:
c6:fc:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:39 2025 by rpki-client