Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F7F7766870E11F0BDCF4FD1DAE4EC9C.roa
File: 2F7F7766870E11F0BDCF4FD1DAE4EC9C.roa (raw, json)
Hash identifier: xkbFWh7luyTLIQddeMQGQDYCBl3spKf/qeiE6muRDs4=
Subject key identifier: 8D:92:A2:EC:E8:DD:CE:00:3C:7E:B8:2B:7E:48:EC:ED:E6:FF:3B:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0174F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F7F7766870E11F0BDCF4FD1DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:32:25 +0000
ROA not before: Mon 01 Sep 2025 08:32:20 +0000
ROA not after: Mon 01 Dec 2025 08:32:20 +0000
asID: 399077
IP address blocks: 156.240.224.0/24 maxlen: 24
156.240.225.0/24 maxlen: 24
156.240.226.0/24 maxlen: 24
156.240.227.0/24 maxlen: 24
156.240.228.0/24 maxlen: 24
156.240.229.0/24 maxlen: 24
156.240.230.0/24 maxlen: 24
156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95476 (0x174f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 08:32:20 2025 GMT
Not After : Dec 1 08:32:20 2025 GMT
Subject: CN=68b55a19-a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:33:a1:a8:da:3b:f2:22:f6:f6:53:b0:b2:
a9:1f:17:71:e6:20:a5:bf:74:46:c8:86:28:48:ae:
e7:c3:1c:85:04:dc:52:cd:6d:35:8d:3e:11:21:c3:
f7:da:b2:a9:45:92:a0:4a:b4:b1:ad:36:e6:2a:93:
58:ea:f2:69:08:b2:35:a5:fb:10:cc:07:30:3b:0b:
11:5d:c6:a4:7e:b5:80:64:d6:54:f3:3f:35:12:9f:
af:f4:4f:35:28:2f:a2:5d:7a:83:c8:da:33:53:67:
40:c4:cf:c4:63:d7:f4:01:52:7b:2a:1c:e2:86:b7:
b8:a2:5c:b3:6c:ad:98:60:81:4f:16:bf:57:24:5c:
9c:84:1c:8c:51:8e:ca:c8:33:70:b1:77:64:24:d6:
50:8f:c0:3b:0c:7f:69:f4:ba:b0:0c:ca:71:bf:34:
1f:96:de:24:f7:eb:86:54:c2:90:62:6c:9b:6b:3c:
5c:55:53:6f:93:02:27:ef:70:cd:ed:4d:fb:fd:f9:
2c:8e:78:5c:b4:d9:7f:ee:4a:53:42:a6:a2:f9:1c:
e6:42:12:93:9e:bb:de:44:28:77:64:be:ba:66:70:
2b:07:dd:c4:bf:bb:39:0d:fa:b4:34:41:07:35:7f:
35:7d:2a:f6:4f:53:35:57:d7:67:47:98:bc:1c:48:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:A2:EC:E8:DD:CE:00:3C:7E:B8:2B:7E:48:EC:ED:E6:FF:3B:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F7F7766870E11F0BDCF4FD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.224.0-156.240.233.255
Signature Algorithm: sha256WithRSAEncryption
47:09:bd:3b:1e:2b:f9:45:65:ee:1d:26:4e:c6:a7:1c:60:a1:
9a:2e:77:fd:cc:75:eb:2b:60:aa:1c:da:2e:cc:c7:f4:d5:d5:
5d:d0:7e:f6:35:3f:13:30:f4:cc:d7:e1:8e:11:d5:6d:ea:1c:
e6:41:5c:2e:5a:46:51:25:cf:a5:34:69:58:cc:2c:bd:c0:06:
85:62:b5:b0:56:33:64:05:3d:44:fa:7c:93:b2:69:fe:4e:12:
6d:19:6d:49:38:e7:cb:cf:a7:50:ee:ae:d5:16:3b:43:27:d6:
10:cb:95:7c:90:13:d7:d8:84:c2:6f:27:db:c3:85:d7:40:8d:
cf:a8:86:fd:18:4a:31:5a:cd:14:54:cc:0a:e2:48:f1:44:5e:
2d:76:bd:1b:f2:68:d0:db:cf:4a:c8:7c:21:c2:d2:fb:25:12:
6c:28:d2:dd:2d:27:22:19:e1:4a:54:c6:e2:0d:59:b0:2b:1f:
86:00:d5:50:e6:b4:42:31:86:d5:8f:46:87:67:a5:6e:23:49:
b5:9d:77:a9:49:42:2c:8b:f3:85:16:7d:71:5c:a0:92:aa:a5:
d3:19:de:6d:05:d4:61:b5:ac:20:92:96:10:31:e4:5c:cc:7f:
4a:d3:bd:7c:34:f7:88:70:e8:88:a9:ab:38:e0:04:e2:92:4c:
95:5f:5e:8f
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXT0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAxMDgzMjIwWhcNMjUxMjAxMDgzMjIwWjAYMRYw
FAYDVQQDEw02OGI1NWExOS1hMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAskkzoajaO/Ii9vZTsLKpHxdx5iClv3RGyIYoSK7nwxyFBNxSzW01jT4R
IcP32rKpRZKgSrSxrTbmKpNY6vJpCLI1pfsQzAcwOwsRXcakfrWAZNZU8z81Ep+v
9E81KC+iXXqDyNozU2dAxM/EY9f0AVJ7Khzihre4olyzbK2YYIFPFr9XJFychByM
UY7KyDNwsXdkJNZQj8A7DH9p9LqwDMpxvzQflt4k9+uGVMKQYmybazxcVVNvkwIn
73DN7U37/fksjnhctNl/7kpTQqai+RzmQhKTnrveRCh3ZL66ZnArB93Ev7s5Dfq0
NEEHNX81fSr2T1M1V9dnR5i8HEjenwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFI2S
ouzo3c4APH64K35I7O3m/zu1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjdGNzc2Njg3MEUxMUYwQkRDRjRGRDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc8OADBAGc8OgwDQYJKoZI
hvcNAQELBQADggEBAEcJvTseK/lFZe4dJk7GpxxgoZoud/3MdesrYKoc2i7Mx/TV
1V3QfvY1PxMw9MzX4Y4R1W3qHOZBXC5aRlElz6U0aVjMLL3ABoVitbBWM2QFPUT6
fJOyaf5OEm0ZbUk458vPp1DurtUWO0Mn1hDLlXyQE9fYhMJvJ9vDhddAjc+ohv0Y
SjFazRRUzAriSPFEXi12vRvyaNDbz0rIfCHC0vslEmwo0t0tJyIZ4UpUxuINWbAr
H4YA1VDmtEIxhtWPRodnpW4jSbWdd6lJQiyL84UWfXFcoJKqpdMZ3m0F1GG1rCCS
lhAx5FzMf0rTvXw094hw6IipqzjgBOKSTJVfXo8=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:33 2025 by rpki-client