Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76AB1C06FB811F0B11BD889DAE4EC9C.roa
File: C76AB1C06FB811F0B11BD889DAE4EC9C.roa (raw, json)
Hash identifier: Oq+62WR8W4nAx/rz8MGkIbwFTybCk6mjJ4O6NJecOUE=
Subject key identifier: 07:E2:25:B9:72:CF:29:78:47:99:D4:BE:45:43:EB:D9:B9:5D:78:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76AB1C06FB811F0B11BD889DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 15:53:06 +0000
ROA not before: Sat 02 Aug 2025 15:53:01 +0000
ROA not after: Sun 07 Sep 2025 15:53:01 +0000
asID: 200373
IP address blocks: 156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
156.233.85.0/24 maxlen: 24
156.233.86.0/24 maxlen: 24
156.233.87.0/24 maxlen: 24
156.233.88.0/24 maxlen: 24
156.233.89.0/24 maxlen: 24
156.253.170.0/24 maxlen: 24
156.253.171.0/24 maxlen: 24
156.253.172.0/24 maxlen: 24
156.253.173.0/24 maxlen: 24
156.253.174.0/24 maxlen: 24
156.253.175.0/24 maxlen: 24
156.253.176.0/24 maxlen: 24
156.253.177.0/24 maxlen: 24
156.253.178.0/24 maxlen: 24
156.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92330 (0x168aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 15:53:01 2025 GMT
Not After : Sep 7 15:53:01 2025 GMT
Subject: CN=688e3462-f659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:7e:61:b9:d5:45:bd:95:89:0a:bb:f4:19:
6c:1a:2f:9f:e2:63:9a:02:7b:f8:32:cf:d6:6e:2b:
7c:c4:7f:da:0a:89:8a:a4:59:4f:cc:30:f8:f8:8c:
c6:33:09:01:4e:49:56:59:c0:91:73:5e:36:39:31:
7c:7f:17:cc:40:b7:bb:7d:ef:73:04:7b:bd:5e:f3:
92:89:6c:b2:e0:82:74:56:64:b8:66:e5:26:c5:cd:
45:02:8c:55:53:dc:23:6b:3c:b7:c3:d2:fb:df:ba:
a7:b1:51:fb:0a:8c:15:a2:52:42:9c:e9:24:e6:c5:
9e:84:27:67:d6:76:e3:c6:bd:79:dd:a2:c6:82:49:
37:72:3a:de:0e:25:1c:02:be:08:42:0c:6e:8c:08:
6b:0e:98:41:d1:03:88:57:d0:e8:9b:b4:8a:71:24:
df:14:ae:e7:b2:bc:a6:82:a1:b7:b4:6c:c3:be:0e:
f9:2e:40:1e:ee:93:e1:e2:63:cf:54:1e:c1:1c:1c:
72:50:b9:a5:90:30:d4:66:2f:54:c2:73:b0:1f:32:
34:84:3d:17:eb:91:1a:75:3b:09:1c:eb:4e:66:47:
63:e1:b2:92:3d:65:56:08:c7:e1:12:c9:27:73:16:
56:0a:f4:77:89:c0:cc:ec:97:a1:05:06:01:ed:00:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E2:25:B9:72:CF:29:78:47:99:D4:BE:45:43:EB:D9:B9:5D:78:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76AB1C06FB811F0B11BD889DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.72.0/22
156.233.84.0-156.233.89.255
156.253.170.0-156.253.179.255
Signature Algorithm: sha256WithRSAEncryption
bb:17:ef:ff:93:97:21:74:18:a8:70:46:9c:86:86:7f:2b:62:
48:78:3f:0d:27:19:5c:91:63:11:74:ac:57:e1:9a:a0:eb:2d:
d7:8f:6e:11:80:d6:9d:39:1d:48:c4:d0:15:98:5f:c3:4b:c9:
9f:7a:dc:6d:bb:32:1c:70:3c:a0:c9:fd:62:5e:e1:00:3e:67:
fe:c9:f2:02:5e:88:b4:1f:4b:79:e2:af:aa:f0:e9:a1:6c:7d:
1e:dd:f1:73:7e:3e:49:1b:38:f6:ac:31:09:c8:d9:0a:cb:38:
d9:d3:d8:14:10:ea:8a:dd:97:bf:8c:cb:c1:25:60:49:ad:c0:
5f:24:c3:f2:c1:b8:b3:49:84:a5:da:17:4c:86:20:81:f4:cb:
de:29:70:e6:f3:33:a8:c0:3c:cb:81:32:be:a4:4a:5d:f5:60:
78:4a:b6:b5:4e:50:9f:98:77:09:9d:7b:2e:42:81:72:81:ef:
dd:e1:4e:75:ba:25:53:65:c9:6f:d2:e5:85:f2:7a:fe:83:51:
be:b0:1f:d1:8a:55:37:d8:d4:01:9d:c9:34:4d:32:bd:0b:03:
ba:41:72:77:6d:7f:ff:a7:e5:ef:c9:3d:9d:b7:6b:51:3a:4d:
67:bc:d8:72:39:f0:c3:d4:0d:2e:28:42:e2:d5:21:26:d3:06:
3f:b7:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:04 2025 by rpki-client