Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2BD3746FB711F0A29BC584DAE4EC9C.roa
File: 9B2BD3746FB711F0A29BC584DAE4EC9C.roa (raw, json)
Hash identifier: /1z4EIDw/t67wKUB4HF8HfOpmz4FdL9LRD7Qr4dzpZs=
Subject key identifier: EE:26:18:05:1B:DE:49:A0:E7:42:27:5D:76:0E:6F:04:88:3E:81:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2BD3746FB711F0A29BC584DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 15:44:42 +0000
ROA not before: Sat 02 Aug 2025 15:44:35 +0000
ROA not after: Sun 07 Sep 2025 15:44:35 +0000
asID: 200373
IP address blocks: 156.228.0.0/24 maxlen: 24
156.228.76.0/24 maxlen: 24
156.228.77.0/24 maxlen: 24
156.228.78.0/24 maxlen: 24
156.228.79.0/24 maxlen: 24
156.228.80.0/24 maxlen: 24
156.228.81.0/24 maxlen: 24
156.228.82.0/24 maxlen: 24
156.228.83.0/24 maxlen: 24
156.228.84.0/24 maxlen: 24
156.228.85.0/24 maxlen: 24
156.228.86.0/24 maxlen: 24
156.228.87.0/24 maxlen: 24
156.228.88.0/24 maxlen: 24
156.228.89.0/24 maxlen: 24
156.228.90.0/24 maxlen: 24
156.228.91.0/24 maxlen: 24
156.228.92.0/24 maxlen: 24
156.228.93.0/24 maxlen: 24
156.228.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92328 (0x168a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 15:44:35 2025 GMT
Not After : Sep 7 15:44:35 2025 GMT
Subject: CN=688e326a-75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:90:2f:59:e0:39:ad:91:ed:94:46:c4:09:
87:e0:c8:91:fb:d9:67:03:1f:91:0e:82:b1:83:82:
38:5b:e8:93:f2:b6:da:17:e3:71:4f:0d:5d:76:4a:
de:8b:f6:ee:67:e3:c9:00:bd:81:9f:40:5a:0b:76:
c3:e0:61:d2:42:12:8e:5a:ec:f0:07:bb:ab:08:d8:
58:92:bd:07:97:ba:2b:57:15:95:31:4c:bf:2c:20:
29:41:89:7c:bb:e4:28:25:ec:9f:d4:76:0c:89:a0:
19:5c:da:6c:6e:e8:ea:f9:ec:ba:d9:40:a4:09:ab:
22:27:d3:b0:7e:c1:cd:52:8e:6f:cb:8e:d9:cd:aa:
87:9a:96:17:d6:38:97:8c:2a:1b:d5:93:da:cf:0f:
bb:f2:b0:29:6f:17:c4:76:ec:38:6b:49:4a:9e:45:
ad:34:d4:c6:79:d8:42:71:f4:b3:8d:7d:cb:2b:5f:
1e:35:2a:e3:7b:2c:ed:c9:60:70:b9:a8:31:2b:50:
cd:36:3e:b8:a2:d8:b7:c3:77:f5:bf:c4:24:6a:19:
68:e3:6c:27:10:4c:28:a1:7e:39:36:40:8c:3d:7b:
8d:23:08:dd:1f:41:00:bb:1d:ad:ec:fb:f2:af:08:
51:f4:d1:6c:b0:33:45:df:e1:cb:0e:f8:19:52:82:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:18:05:1B:DE:49:A0:E7:42:27:5D:76:0E:6F:04:88:3E:81:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2BD3746FB711F0A29BC584DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.0.0/24
156.228.76.0-156.228.94.255
Signature Algorithm: sha256WithRSAEncryption
64:0a:37:bd:b9:e5:c1:90:ce:99:87:b7:a6:89:ba:29:ee:d1:
87:17:73:79:ca:ee:4f:67:16:be:41:85:ea:3b:53:f9:c4:89:
2e:24:10:6e:ff:04:66:a3:ba:96:4b:e7:ba:ae:c8:ee:69:9c:
ea:e8:e1:0b:8b:c1:14:77:39:b0:d0:c4:46:90:3b:8a:0b:56:
4b:e8:8d:72:f9:f3:51:c0:a3:f5:ed:57:15:63:ec:fd:4e:2f:
eb:16:45:a4:33:e8:77:b3:f5:72:76:ee:35:fe:48:9c:9c:9b:
8d:3a:cd:57:1b:41:83:15:c8:85:f5:41:f5:9d:05:b7:ed:e2:
ee:62:f7:2e:49:b8:bd:fc:ac:45:00:f4:8a:46:40:40:d4:8f:
27:b6:db:5d:9f:41:0e:27:13:a7:da:d3:ee:3d:ca:60:7e:8f:
9e:30:e3:44:bc:c6:be:ef:73:91:82:03:8a:52:b3:e1:00:89:
4d:17:0e:d7:a6:46:ea:18:be:dc:48:bb:df:f4:7b:f0:18:bd:
55:d3:2b:62:d3:1d:f9:06:7c:fd:3a:49:f3:03:19:17:8d:5d:
33:fe:86:21:c1:46:94:1c:52:a0:6c:26:8b:41:cd:da:f8:15:
1e:98:3f:dd:c1:1b:4f:46:59:19:69:35:74:94:5b:07:fb:fe:
6e:4f:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:06 2025 by rpki-client