Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F7A3A4688111F0A29C7993DAE4EC9C.roa
File: C5F7A3A4688111F0A29C7993DAE4EC9C.roa (raw, json)
Hash identifier: B4cKI/5Hf5SiJHKb6JPOV3d27n2ETQibLa0NT2tV9pY=
Subject key identifier: BB:4F:74:E2:71:AA:4C:42:A2:96:39:E8:91:FB:B2:83:98:F9:3F:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01674F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F7A3A4688111F0A29C7993DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:31:43 +0000
ROA not before: Thu 24 Jul 2025 11:31:38 +0000
ROA not after: Thu 28 Aug 2025 11:31:38 +0000
asID: 48031
IP address blocks: 156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91983 (0x1674f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:31:38 2025 GMT
Not After : Aug 28 11:31:38 2025 GMT
Subject: CN=6882199f-4af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:9c:ce:29:0e:6e:3b:ea:37:58:9a:20:51:
ec:36:c8:b7:a0:80:37:9b:6f:ad:55:57:e8:08:d0:
70:9c:5d:0f:10:b4:89:87:23:38:48:be:7a:c1:47:
ea:90:b8:e8:93:38:70:94:8c:48:c8:62:e1:65:58:
46:7b:5e:0d:00:92:1e:9d:15:c4:fd:69:09:9b:96:
63:d9:57:78:d9:a0:bc:0b:d2:ba:4d:ea:98:6d:08:
91:92:f8:92:5f:94:e2:6a:f9:43:28:63:ed:36:54:
2c:26:b5:82:46:90:fa:b1:aa:61:d0:99:82:40:fd:
03:7f:43:eb:09:91:53:02:7e:e9:5e:93:09:87:9d:
ce:f4:03:76:4b:94:90:4c:92:9e:3a:80:bc:a2:39:
25:d8:1b:c4:3f:b6:22:59:d7:52:71:45:27:9d:84:
99:96:b2:8f:41:d1:9d:04:04:c2:33:6f:fe:83:77:
e9:59:65:fc:7c:cb:0a:ac:e8:2d:79:c1:f8:82:f4:
c2:99:4d:88:69:2e:47:d9:58:a0:cc:43:e6:c0:72:
a2:27:4e:74:a3:ac:49:ac:63:b0:5a:19:00:7a:e4:
e4:90:2a:71:34:0e:d5:96:6f:42:3b:1d:af:7c:53:
c4:23:49:8a:ee:09:3b:e4:ff:a4:ba:b7:8b:86:bd:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:74:E2:71:AA:4C:42:A2:96:39:E8:91:FB:B2:83:98:F9:3F:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F7A3A4688111F0A29C7993DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.140.0-156.246.149.255
Signature Algorithm: sha256WithRSAEncryption
27:a0:a5:91:39:a8:ae:d5:a6:a0:99:fa:2c:31:5f:96:9d:47:
20:5e:7a:f6:60:ce:20:ab:d4:3e:62:07:4e:ca:79:5e:02:e9:
08:f8:9b:41:c1:5f:79:5e:c4:09:27:70:4c:b9:66:83:41:c7:
21:34:c2:b1:01:53:7f:b7:9f:69:65:e2:5e:e6:ed:59:26:8b:
59:6f:10:b5:ad:bc:d1:ba:f0:3b:8e:6d:23:9d:06:ad:8b:e3:
1d:02:9b:3f:12:a3:fb:9d:25:6d:d0:cc:a8:12:2b:e2:2c:99:
e6:2a:b9:d9:39:6d:b4:38:f8:b5:df:34:eb:de:1c:21:e8:e3:
b0:3e:8d:72:43:f4:64:d6:ed:b9:3a:62:95:e5:0e:7b:78:20:
1b:9b:5a:36:ed:64:a2:90:48:b3:66:0c:3c:2e:be:51:b1:fa:
4b:9e:a2:a5:08:a4:15:f0:73:ec:cf:67:66:c2:4d:d3:90:a1:
97:f8:ba:61:91:8a:1b:84:4f:bb:03:bc:71:80:5a:61:b8:e7:
18:d5:16:d2:05:b5:7c:eb:8d:77:eb:0f:2e:36:46:be:f0:82:
9b:f1:0c:7e:9c:1c:12:28:e2:3a:1f:28:f3:22:9a:c0:e8:ee:
aa:ea:d2:1d:e8:f3:c1:8a:e8:bb:c6:79:be:28:bc:db:a5:52:
29:8c:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:10 2025 by rpki-client