Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5C92F606C9811F0A68DB5AFDAE4EC9C.roa
File: A5C92F606C9811F0A68DB5AFDAE4EC9C.roa (raw, json)
Hash identifier: YjRD0NWKDmq+TIWyf8UKAQ8GihcqQKpuZrbxA6feBZ8=
Subject key identifier: 35:6C:80:ED:00:AC:EC:6D:81:A7:D0:5D:8A:3C:47:D4:7C:17:D7:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01680E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5C92F606C9811F0A68DB5AFDAE4EC9C.roa
Signing time: Tue 29 Jul 2025 16:25:33 +0000
ROA not before: Tue 29 Jul 2025 16:25:27 +0000
ROA not after: Wed 29 Oct 2025 16:25:27 +0000
asID: 135377
IP address blocks: 156.229.28.0/24 maxlen: 24
156.229.50.0/24 maxlen: 24
156.229.54.0/24 maxlen: 24
156.229.236.0/24 maxlen: 24
156.229.247.0/24 maxlen: 24
156.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92174 (0x1680e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 29 16:25:27 2025 GMT
Not After : Oct 29 16:25:27 2025 GMT
Subject: CN=6888f5fc-cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:14:21:d6:9d:12:8d:dd:b4:e0:2a:13:ac:
bf:b6:62:b8:39:35:70:a0:62:41:43:e5:ff:e6:5b:
62:94:35:89:f8:92:60:5b:79:b1:cf:26:f1:f5:8e:
e0:fb:ee:57:10:39:8d:15:89:4a:73:2a:96:6d:fc:
a4:30:22:0e:8c:36:cd:8d:b3:3a:18:64:1d:3c:9d:
bb:ef:82:1a:9d:36:c9:8e:56:9d:e9:9c:c3:31:cf:
d7:df:aa:1a:84:09:d5:a0:a5:81:7d:e4:f5:04:7b:
1a:28:61:c9:c2:dc:01:79:38:53:9f:a9:f3:3b:d4:
ff:e2:c3:d0:fc:42:2e:d2:73:3e:59:dd:ff:b9:df:
dc:ce:38:5d:e1:79:1e:85:a2:d9:d3:81:b1:2c:cd:
8f:a9:5c:e7:b3:b9:ee:40:d3:71:bf:b1:c2:30:e2:
83:fe:92:0e:fa:ad:c6:85:df:76:46:bc:35:d3:98:
d1:0c:9c:48:76:01:69:ba:2f:4d:0e:79:ae:be:e5:
4f:91:fd:55:c3:98:f2:b9:e9:8a:1b:c5:94:5e:60:
e7:c5:ea:4f:66:f0:5e:84:6a:f8:f3:61:c6:08:d3:
a3:2d:8f:7d:a7:48:26:6d:f7:af:8a:5f:50:7d:61:
c3:03:2f:27:1e:b5:8e:57:bf:6a:ed:b1:8d:3c:75:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:80:ED:00:AC:EC:6D:81:A7:D0:5D:8A:3C:47:D4:7C:17:D7:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5C92F606C9811F0A68DB5AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.28.0/24
156.229.50.0/24
156.229.54.0/24
156.229.236.0/24
156.229.247.0/24
156.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f0:20:dc:64:05:83:e4:bc:f7:7c:c7:71:f2:b7:cc:90:c2:
a8:01:11:fa:c8:c7:79:2e:7e:f1:3d:04:51:4a:81:9d:34:54:
85:89:0d:fc:17:7f:70:ad:40:dd:45:9d:b1:88:b2:12:85:fb:
80:7f:17:0c:fa:3c:89:d0:8a:75:6b:28:cb:28:87:77:bd:53:
a7:3c:a4:43:95:5f:0d:2f:3a:eb:fd:5c:62:9c:25:5b:43:23:
82:29:1c:33:22:be:28:40:07:85:f0:ad:a5:7b:c0:30:6e:69:
85:03:9f:5c:95:e4:4a:37:93:13:15:a5:cf:5b:a7:37:a9:fc:
f4:ae:6d:f4:ec:8d:64:9d:24:2e:75:2e:00:c8:68:6e:e7:ad:
22:54:2f:8a:b3:e8:5f:14:41:60:61:f9:02:21:de:73:b6:67:
eb:34:5e:be:f9:46:e5:7b:e6:df:c8:c3:62:40:70:7d:7a:ca:
4c:c0:21:5e:48:6b:e9:df:53:10:c9:99:79:60:fe:22:46:85:
66:9b:bd:b0:03:21:e0:15:fe:9d:44:90:df:16:5f:3a:34:68:
96:49:40:61:5c:71:71:6d:fb:cb:a9:f9:92:12:bd:ae:32:09:
1a:d5:a2:8e:db:f6:8a:ed:fd:c8:c2:df:0c:d1:34:17:21:68:
1b:80:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:18 2025 by rpki-client