Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7004341A8D6311F09217B7F6DAE4EC9C.roa
File: 7004341A8D6311F09217B7F6DAE4EC9C.roa (raw, json)
Hash identifier: kue32/KxQlAWiB21klt5FIM5qxdlRHZ34ZCvK7l5+DQ=
Subject key identifier: BE:2D:76:50:29:C8:6D:49:BE:27:6B:AC:7A:19:85:D1:40:4D:0A:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7004341A8D6311F09217B7F6DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 09:57:47 +0000
ROA not before: Tue 09 Sep 2025 09:57:41 +0000
ROA not after: Thu 16 Oct 2025 09:57:41 +0000
asID: 22773
IP address blocks: 156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
156.243.205.0/24 maxlen: 24
156.243.206.0/24 maxlen: 24
156.243.207.0/24 maxlen: 24
156.243.218.0/24 maxlen: 24
156.248.1.0/24 maxlen: 24
156.248.2.0/24 maxlen: 24
156.248.3.0/24 maxlen: 24
156.248.22.0/24 maxlen: 24
156.248.24.0/24 maxlen: 24
156.248.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96802 (0x17a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 09:57:41 2025 GMT
Not After : Oct 16 09:57:41 2025 GMT
Subject: CN=68bffa1b-b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:8b:b2:8a:70:a9:d7:35:45:f0:c0:06:9e:
02:44:b1:42:55:88:1a:b1:7f:11:41:cc:11:80:07:
35:86:4c:4e:00:fe:df:02:98:7e:0c:84:d0:4c:80:
ae:12:0d:22:4d:27:fa:2c:0c:29:93:8d:68:83:a3:
c8:5e:16:03:2d:0e:b0:87:ca:7f:47:fd:a0:4f:22:
e1:45:b7:04:c9:39:a7:aa:83:67:66:4c:ab:7f:d0:
87:3d:5d:ce:96:9f:01:04:f7:86:eb:72:56:8f:58:
f1:9d:3a:9c:f5:c9:ca:41:b3:68:f2:a7:6d:75:c0:
f2:5a:e0:2c:4d:0c:9e:8c:9b:6c:88:77:32:0a:7b:
02:64:af:68:d2:81:99:b6:1d:5a:cf:5b:8c:9a:c2:
95:6b:81:54:82:6a:3b:07:96:b4:dd:16:55:74:38:
e8:c9:b6:be:34:e8:7b:90:ba:c4:34:8c:a2:9a:d4:
9f:4b:3c:56:60:86:a3:f3:66:58:1a:49:e5:1c:b8:
bf:97:6e:10:d0:94:6e:f5:9e:97:d0:ac:c2:40:d1:
f1:ff:76:2f:d5:d1:b6:b5:14:77:08:44:04:f7:ba:
0b:93:d4:62:b7:0d:ff:9c:94:cd:b0:ad:b3:66:3f:
27:d6:d2:d4:d3:48:f1:98:f1:56:28:4a:50:fb:9b:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:76:50:29:C8:6D:49:BE:27:6B:AC:7A:19:85:D1:40:4D:0A:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7004341A8D6311F09217B7F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.234.0-156.242.240.255
156.243.115.0/24
156.243.192.0/24
156.243.205.0-156.243.207.255
156.243.218.0/24
156.248.1.0-156.248.3.255
156.248.22.0/24
156.248.24.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:da:04:c4:09:e6:09:c7:0a:77:9e:ee:77:ed:0c:a0:7e:f8:
6b:5b:d3:88:07:6a:63:99:60:5f:f9:91:b3:10:32:27:eb:23:
80:22:c3:a9:d1:7c:f8:81:6d:de:07:71:6f:97:56:0a:5b:7b:
1c:28:ee:d2:66:ff:e2:4d:e0:6b:af:b4:92:ab:71:5d:14:15:
77:d8:9c:7a:9a:68:75:31:71:28:09:b0:0b:4d:15:03:e6:07:
44:53:4f:e1:3d:11:fd:ff:07:5d:73:40:44:22:67:70:6f:8f:
4b:ec:b8:80:ab:c5:91:01:75:28:22:ec:ca:e5:c0:b4:22:88:
59:f2:4b:e9:b5:c8:0d:a6:92:d9:5d:a4:ad:ae:6d:d8:92:d5:
58:e4:66:5b:03:46:c5:ad:07:0f:38:98:3a:75:2f:d0:5d:2f:
92:58:ed:84:5a:70:c5:8b:61:c6:14:9f:86:f2:ea:f7:e7:31:
fd:d9:5e:cc:69:0c:ab:c8:44:93:bc:23:bb:3d:7a:32:69:0a:
a1:7d:5c:7f:ae:ce:a8:70:01:04:e3:9b:67:5a:f6:7b:39:eb:
e9:67:2b:7e:ac:ad:54:fe:6c:c3:56:a4:32:10:ec:f1:11:34:
3f:c5:dd:68:f6:a2:58:6f:ff:39:da:4f:99:11:fd:26:31:1a:
5c:59:e0:b4
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIDAXoiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA5MDk1NzQxWhcNMjUxMDE2MDk1NzQxWjAYMRYw
FAYDVQQDEw02OGJmZmExYi1iOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2rOLsopwqdc1RfDABp4CRLFCVYgasX8RQcwRgAc1hkxOAP7fAph+DITQ
TICuEg0iTSf6LAwpk41og6PIXhYDLQ6wh8p/R/2gTyLhRbcEyTmnqoNnZkyrf9CH
PV3Olp8BBPeG63JWj1jxnTqc9cnKQbNo8qdtdcDyWuAsTQyejJtsiHcyCnsCZK9o
0oGZth1az1uMmsKVa4FUgmo7B5a03RZVdDjoyba+NOh7kLrENIyimtSfSzxWYIaj
82ZYGknlHLi/l24Q0JRu9Z6X0KzCQNHx/3Yv1dG2tRR3CEQE97oLk9Ritw3/nJTN
sK2zZj8n1tLU00jxmPFWKEpQ+5sqfwIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFL4t
dlApyG1JvidrrHoZhdFATQpBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MDA0MzQxQThENjMxMUYwOTIxN0I3RjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAGc8uoDBACc8vADBACc83MD
BACc88AwDAMEAJzzzQMEBJzzwAMEAJzz2jAMAwQAnPgBAwQCnPgAAwQAnPgWAwQB
nPgYMA0GCSqGSIb3DQEBCwUAA4IBAQB92gTECeYJxwp3nu537QygfvhrW9OIB2pj
mWBf+ZGzEDIn6yOAIsOp0Xz4gW3eB3Fvl1YKW3scKO7SZv/iTeBrr7SSq3FdFBV3
2Jx6mmh1MXEoCbALTRUD5gdEU0/hPRH9/wddc0BEImdwb49L7LiAq8WRAXUoIuzK
5cC0IohZ8kvptcgNppLZXaStrm3YktVY5GZbA0bFrQcPOJg6dS/QXS+SWO2EWnDF
i2HGFJ+G8ur35zH92V7MaQyryESTvCO7PXoyaQqhfVx/rs6ocAEE45tnWvZ7Oevp
Zyt+rK1U/mzDVqQyEOzxETQ/xd1o9qJYb/852k+ZEf0mMRpcWeC0
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:30:55 2025 by rpki-client