
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
File: F51502DC6FB911F0998E3692DAE4EC9C.roa (raw, json)
Hash identifier: 2R5e9ljSkYN60JPNIeMELTnjRzyUF4JEc91uP3CCsjw=
Subject key identifier: 5A:97:58:5F:55:43:FD:95:D5:FA:05:8A:21:3B:28:D6:72:5B:07:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 16:01:32 +0000
ROA not before: Sat 02 Aug 2025 16:01:26 +0000
ROA not after: Tue 09 Sep 2025 16:01:26 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.240.99.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92332 (0x168ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 16:01:26 2025 GMT
Not After : Sep 9 16:01:26 2025 GMT
Subject: CN=688e365c-5834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:b4:0f:7a:15:bb:02:8c:99:d1:2d:8a:02:
7b:27:98:48:05:75:b8:91:30:58:89:89:b5:08:67:
52:9f:ca:86:d1:cc:85:33:ff:5a:0c:c5:ec:53:a0:
08:14:1e:2c:40:7d:f3:e5:b6:02:ca:1a:bb:31:0b:
cd:8d:08:0b:07:b9:fa:2b:a6:e5:78:85:a9:e7:a0:
c0:ab:62:98:30:64:02:45:f8:84:4f:93:da:b6:8a:
59:1e:2e:06:95:86:fd:89:c4:6e:43:34:f6:25:4d:
b1:4f:1d:af:b8:5e:fe:d2:b6:a9:bc:28:84:93:16:
c5:76:13:91:23:23:52:8d:3a:81:a2:e4:7c:ba:42:
3b:ac:20:58:2b:62:36:57:fa:9e:3c:16:94:33:07:
f2:59:a6:d7:c4:38:69:ad:8a:dd:6a:ad:f9:69:51:
48:eb:e5:e2:1f:9f:d3:40:f4:0b:89:bd:e7:b4:37:
b8:41:41:a8:e7:f1:75:4a:ed:bb:81:3d:2b:99:cc:
ee:85:c6:4f:ef:10:81:97:16:77:09:02:24:b3:9c:
93:a8:0f:2e:31:3b:35:bf:96:76:68:b7:b3:0e:78:
1a:92:8f:02:8d:1a:c6:07:57:4e:32:0e:fc:8f:a0:
ff:d5:e7:a9:40:5c:ae:d8:b1:1f:33:6f:1c:7e:9c:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:58:5F:55:43:FD:95:D5:FA:05:8A:21:3B:28:D6:72:5B:07:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.233.90.0-156.233.95.255
156.239.156.0/23
156.239.192.0/19
156.240.99.0/24
156.249.137.0-156.249.138.255
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
0a:f6:4d:2d:06:11:2a:31:a3:17:b6:c3:08:3a:ab:03:f3:76:
0d:5d:c9:db:77:21:ee:da:2a:fd:dc:79:45:dd:cf:9b:3d:ab:
56:e4:23:1e:76:74:6b:60:9f:1d:3f:8b:f0:5a:43:ab:c8:6e:
ae:db:b3:2b:a1:51:d9:f2:0e:78:14:f8:06:c5:dc:f6:d5:6f:
04:2a:85:89:bd:33:d3:3b:54:68:fe:be:83:a5:05:32:66:2f:
dd:24:d4:64:32:95:00:c1:ba:84:16:e9:06:16:d9:38:fd:b4:
26:9a:e8:6f:0b:0c:d0:b7:2c:0f:4a:9b:38:f6:dc:ed:3f:35:
41:2a:e2:47:1b:db:0b:cc:7e:08:98:07:16:37:c7:10:51:52:
25:ef:25:a2:a5:b2:66:30:0f:a5:cb:12:34:f4:44:86:c9:7b:
eb:1c:48:0f:d6:ef:a7:b0:fa:f0:4f:75:75:0b:c5:cd:c1:1c:
fd:8f:1a:15:3a:ce:04:29:1a:7b:f7:20:4b:ef:96:e6:c6:b5:
0d:bf:7c:5f:57:c9:cf:8f:39:43:74:60:0e:10:46:f9:8d:4c:
44:53:6d:67:1a:01:29:70:48:18:6e:39:eb:80:fe:98:d6:1b:
8a:d4:de:db:60:4e:35:ec:bf:7b:3c:94:29:3e:16:7c:66:97:
f7:1e:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:12 2025 by rpki-client