Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EAB00067C211F08C600FB6DAE4EC9C.roa
File: C5EAB00067C211F08C600FB6DAE4EC9C.roa (raw, json)
Hash identifier: IswlEuoGdJN2uBl0+MafMviu98MIZh2LSG05mpNEkMk=
Subject key identifier: BC:20:81:A0:77:74:E8:FA:46:D8:72:14:D5:D7:32:B3:EA:0E:D9:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EAB00067C211F08C600FB6DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 12:44:29 +0000
ROA not before: Wed 23 Jul 2025 12:44:24 +0000
ROA not after: Tue 09 Sep 2025 12:44:24 +0000
asID: 138915
IP address blocks: 156.244.16.0/24 maxlen: 24
156.244.17.0/24 maxlen: 24
156.244.18.0/24 maxlen: 24
156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.22.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
156.244.30.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91894 (0x166f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 12:44:24 2025 GMT
Not After : Sep 9 12:44:24 2025 GMT
Subject: CN=6880d92d-3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:31:be:ed:a1:0a:e8:24:9f:4d:35:5b:81:
b5:44:ed:f7:0c:20:72:83:d5:bc:df:04:bf:b9:5a:
6a:5e:b3:56:e8:f4:80:0d:cb:e8:af:b8:88:b3:54:
26:ab:08:8a:56:e7:55:db:01:f5:8e:a8:0f:e5:0d:
76:f9:d6:dd:d7:8a:f5:d9:05:b4:3f:af:4e:50:02:
fb:cc:4f:2d:fe:2e:c0:5e:fe:3a:af:10:bb:97:7b:
cb:d3:88:1d:cc:14:1a:81:f1:e0:3b:8a:d3:d3:68:
27:31:c6:85:2c:a1:44:fa:15:79:fe:a1:5e:27:24:
2d:5b:f8:fb:4d:8c:4b:96:09:12:c1:53:34:8a:3a:
5c:17:77:73:04:55:ac:8e:1e:fe:60:95:7b:28:6c:
c6:f5:b2:5b:bc:93:aa:0e:a9:32:df:08:c8:0f:b6:
65:45:b6:f2:bd:ed:9b:bc:10:41:19:39:0f:f2:b7:
2e:de:ef:48:fd:e7:99:bd:d9:b3:c9:e1:24:a9:05:
5a:7e:05:82:cf:8e:39:61:78:08:be:03:35:89:e6:
0d:95:8a:f2:ce:b9:90:3d:ac:84:c7:5d:e3:b4:f3:
9e:3a:5f:fe:3b:67:c2:cd:77:68:fc:75:c0:ff:3c:
e7:31:00:4a:1c:61:85:b7:bd:32:86:10:fc:43:24:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:81:A0:77:74:E8:FA:46:D8:72:14:D5:D7:32:B3:EA:0E:D9:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EAB00067C211F08C600FB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.16.0-156.244.22.255
156.244.25.0-156.244.35.255
156.244.54.0/23
Signature Algorithm: sha256WithRSAEncryption
08:be:e3:f9:c8:62:c5:9b:31:c9:1d:83:69:83:81:81:f3:c6:
14:f8:6f:3f:9c:f5:51:82:62:a4:5b:3d:d1:37:eb:d2:eb:d5:
4c:7a:5e:80:28:07:f1:d7:d0:67:bd:11:f8:97:55:40:a1:c9:
50:15:e3:2f:96:f8:56:ec:bf:41:10:af:56:05:5b:96:09:6e:
94:59:c7:c0:09:40:37:ea:32:8a:e3:3d:0a:ea:f7:3a:88:fa:
ff:09:23:b3:f1:77:6a:31:0d:ea:bc:bd:71:36:a9:4e:e1:66:
0a:6c:24:45:95:16:dd:e9:4b:f1:c5:6a:4f:4b:e2:f8:ad:89:
38:88:68:14:0f:58:f1:60:a8:7f:3e:52:36:88:0f:59:b8:58:
73:e7:df:86:1d:25:15:3d:45:bd:1a:b6:7f:41:44:9a:0e:87:
54:c1:26:4f:8c:67:3e:87:6d:5f:36:ab:87:b8:89:f3:f6:00:
c5:11:f0:24:2e:e0:09:69:d4:69:38:52:df:81:71:e5:b4:0b:
16:ca:30:31:df:fc:e5:12:51:8e:34:25:09:a6:be:a5:ad:ca:
7e:52:72:eb:5e:09:2e:8d:e6:7e:90:40:9a:56:fb:51:bf:90:
5a:c1:d7:69:32:b4:af:cd:5c:b9:c8:f9:fc:b4:48:66:b1:31:
a2:b5:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:13 2025 by rpki-client