Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF44551A663F11F0BB3BC2D7DAE4EC9C.roa
File: AF44551A663F11F0BB3BC2D7DAE4EC9C.roa (raw, json)
Hash identifier: uV9hm4Mqqk+3XQ1JVHIFB78BXyN2R2pXqGD4r97ZELE=
Subject key identifier: E7:19:DA:E7:41:B5:E7:4D:B0:FA:18:C6:8D:CA:88:20:C7:E4:F5:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01661C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF44551A663F11F0BB3BC2D7DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 14:33:36 +0000
ROA not before: Mon 21 Jul 2025 14:33:31 +0000
ROA not after: Mon 25 Aug 2025 14:33:31 +0000
asID: 203020
IP address blocks: 156.229.240.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.241.8.0/21 maxlen: 24
156.241.44.0/22 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.120.0/21 maxlen: 24
156.243.152.0/22 maxlen: 24
156.243.208.0/21 maxlen: 24
156.243.236.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.200.0/22 maxlen: 24
156.244.212.0/22 maxlen: 24
156.244.216.0/21 maxlen: 24
156.248.16.0/22 maxlen: 24
156.248.96.0/22 maxlen: 24
156.249.68.0/22 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.84.0/22 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91676 (0x1661c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:33:31 2025 GMT
Not After : Aug 25 14:33:31 2025 GMT
Subject: CN=687e4fc0-cff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:8e:a1:2b:c3:cb:29:c7:c1:21:8e:54:fa:
0f:97:da:f3:79:af:b1:e2:da:91:1c:e7:b7:57:85:
7a:90:73:92:ee:6b:62:44:24:be:cd:ed:a0:cb:d6:
0c:86:83:ba:bd:8c:02:c5:12:b5:c3:37:c2:c1:a4:
a7:cb:4d:63:93:ca:42:e4:34:fa:59:46:d8:a9:8d:
98:fe:a8:e5:b6:28:81:c7:09:59:d2:f8:95:18:e3:
81:9a:bf:39:9c:47:5b:34:21:b8:26:84:81:d5:fe:
b4:87:62:fa:bd:8c:fb:34:90:a1:ba:5d:0c:d8:57:
36:b6:00:00:fb:7b:b1:fc:28:c0:7c:f1:64:0f:4c:
e5:7f:b8:ce:51:06:33:8f:0f:bf:08:13:32:8d:45:
e5:cd:55:87:c6:b2:c6:12:ce:d2:11:b1:7d:6c:67:
91:a4:60:2f:ce:29:20:6a:e0:78:4a:b6:a1:6f:e1:
bd:3b:81:44:aa:62:5b:59:f6:45:71:e7:fe:e6:99:
2a:f1:bb:dd:c3:b1:80:8a:93:45:1c:92:47:0c:0a:
65:7c:36:2b:d4:d5:28:05:0c:68:6d:28:d4:7a:ac:
b6:ec:a7:49:bb:8d:bb:95:66:09:89:8b:a2:44:85:
07:49:20:a9:ee:76:e7:a2:c0:36:52:a8:ab:34:65:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:DA:E7:41:B5:E7:4D:B0:FA:18:C6:8D:CA:88:20:C7:E4:F5:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF44551A663F11F0BB3BC2D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.240.0/22
156.238.184.0/22
156.241.8.0/21
156.241.44.0/22
156.243.40.0/21
156.243.120.0/21
156.243.152.0/22
156.243.208.0/21
156.243.236.0/22
156.244.192.0-156.244.203.255
156.244.212.0-156.244.223.255
156.248.16.0/22
156.248.96.0/22
156.249.68.0-156.249.79.255
156.249.84.0-156.249.95.255
156.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
91:01:79:e4:b7:e6:46:fe:ce:77:9b:2f:25:62:5a:b8:a0:9d:
03:f0:1d:9b:db:50:2a:d2:ea:92:49:b8:00:cd:eb:ff:65:42:
b7:0e:7d:08:51:77:6c:2d:0c:0e:54:3c:65:c8:4d:a9:8d:9d:
2a:6d:66:eb:11:d8:df:a2:72:8a:af:1e:5d:70:1f:93:be:76:
fa:7a:ee:51:c3:fd:22:97:17:3f:12:3a:5e:bb:2c:6b:e6:fd:
85:cd:90:c2:b6:ca:1d:af:d4:03:57:b4:af:d0:ed:7f:25:a3:
23:82:3f:cd:dc:fb:a4:90:64:e2:ca:9e:c1:8b:33:e8:81:1a:
56:a7:f1:ff:74:0e:81:f2:66:25:3a:a9:11:e8:dd:c3:7c:1f:
16:d7:da:34:90:0a:8d:4a:2c:76:e9:ed:50:03:da:2f:8e:96:
1e:bc:7b:6b:f0:a4:3c:bd:a8:ba:55:c2:b9:7b:a4:37:9e:d2:
08:7b:71:fa:5c:1b:e5:a4:d7:8c:49:bd:61:bd:14:25:24:80:
fb:17:cc:4b:52:80:7f:66:a1:1e:d5:39:fb:8b:a1:c8:b2:12:
83:8a:32:ba:d3:1b:da:c8:1f:0e:c2:1d:81:58:b2:20:39:3e:
cd:2d:a0:f8:11:4f:e1:03:fb:01:39:c7:0f:fb:df:31:bb:5f:
97:03:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:24 2025 by rpki-client