Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D930EBAA687811F08938FDD8DAE4EC9C.roa
File: D930EBAA687811F08938FDD8DAE4EC9C.roa (raw, json)
Hash identifier: jiK0RPyxH8IpuuPSbyf+9vj7z9oEgiDC6Ue7UjEIP9Y=
Subject key identifier: EE:73:3A:3B:B1:5B:C1:33:ED:40:84:8B:10:D9:D6:C1:BC:2F:BC:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D930EBAA687811F08938FDD8DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:27:50 +0000
ROA not before: Thu 24 Jul 2025 10:27:45 +0000
ROA not after: Thu 28 Aug 2025 10:27:45 +0000
asID: 44559
IP address blocks: 156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91958 (0x16736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:27:45 2025 GMT
Not After : Aug 28 10:27:45 2025 GMT
Subject: CN=68820aa6-fcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:50:79:c9:08:42:19:e7:11:43:ec:ef:bc:
cc:65:67:72:bc:89:7c:ba:d3:a9:0f:59:ac:49:0c:
fe:ff:fd:39:5e:7f:a3:e5:f3:70:5b:69:3e:79:e7:
36:5e:b2:1e:f2:47:2b:a6:91:26:fa:5b:67:14:41:
b1:36:61:53:05:ab:20:9a:e0:95:03:da:fb:5b:8d:
42:38:c7:7c:bf:01:ae:33:97:6c:aa:c6:02:85:dc:
bc:2f:ab:57:3b:1d:45:0a:47:2b:70:3b:a9:c5:4c:
8f:f7:e1:6a:21:bd:6b:d2:8d:42:b7:7c:18:fc:09:
90:b3:e3:1e:6c:c6:f1:fa:ef:a4:8a:f9:60:29:4f:
ed:7b:dd:ed:11:8d:21:e8:0b:14:67:92:66:83:13:
e1:aa:81:69:fb:16:2d:72:4d:f2:21:91:d3:e2:6e:
c0:6e:18:61:95:34:40:60:f1:cf:3c:61:1e:21:19:
1b:af:cf:6a:c5:3c:89:73:0d:0c:ee:96:d5:7f:b2:
8d:4e:fc:1e:c1:8d:3d:6f:e0:1a:a8:e4:50:9f:2a:
73:fe:22:c4:dc:4c:a6:9d:41:6c:d7:5a:5d:74:b6:
61:46:d8:80:bf:71:91:54:d4:60:4b:58:b2:d9:91:
03:05:ec:00:fc:5f:fe:d5:93:6a:11:7c:89:30:ec:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:3A:3B:B1:5B:C1:33:ED:40:84:8B:10:D9:D6:C1:BC:2F:BC:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D930EBAA687811F08938FDD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0-156.246.238.255
Signature Algorithm: sha256WithRSAEncryption
2d:7f:c7:2b:d8:8e:8e:cf:f6:90:3a:df:7a:83:60:f5:8f:d6:
63:10:e6:5e:64:3f:76:ac:10:bc:a0:eb:f4:37:73:2b:58:13:
a9:b2:22:2c:27:68:6f:7d:ce:2f:2a:0f:6b:77:80:61:32:86:
e7:95:83:df:da:25:0f:9c:d9:01:72:54:26:69:ab:58:07:e6:
81:28:85:bc:1c:9b:80:13:40:b8:6b:46:d4:78:12:69:c8:0e:
4e:db:02:af:ca:12:a7:8f:41:9d:5a:5d:da:e7:1c:a7:2b:52:
2f:32:43:45:ce:da:99:f9:7a:36:36:10:ef:56:43:8e:cb:75:
d0:ff:41:fc:97:18:25:c2:84:c4:27:07:79:f7:cf:0f:10:29:
ed:b2:45:3b:ae:89:4a:7b:4c:81:90:20:25:cd:29:e3:cc:24:
51:15:19:23:a8:87:d5:03:b8:8c:ac:54:79:1f:d3:4d:b4:bb:
30:ba:e5:52:5d:03:95:e1:50:8d:cf:5e:f4:1b:e0:ed:8a:0b:
55:59:93:2c:3b:02:40:dd:43:52:a2:2a:02:75:7b:39:3e:bf:
3b:1c:21:a6:37:1b:81:23:be:3d:22:b1:fb:5c:fc:17:01:61:
d0:75:23:9b:06:55:6c:ce:3d:73:40:c3:de:f8:19:12:1a:8c:
71:41:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:36 2025 by rpki-client