Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF851168FAC11F0BEDFD07DDAE4EC9C.roa
File: 7BF851168FAC11F0BEDFD07DDAE4EC9C.roa (raw, json)
Hash identifier: 6aYsX6quZbHpLau46jQZJUhYEleJmsYCOD21yoaGuRY=
Subject key identifier: 95:5F:9D:7B:4C:5C:50:37:90:61:E9:16:A3:01:ED:60:E9:A6:3B:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF851168FAC11F0BEDFD07DDAE4EC9C.roa
Signing time: Fri 12 Sep 2025 07:45:43 +0000
ROA not before: Fri 12 Sep 2025 07:45:38 +0000
ROA not after: Fri 17 Oct 2025 07:45:38 +0000
asID: 22773
IP address blocks: 156.233.60.0/23 maxlen: 24
156.233.63.0/24 maxlen: 24
156.233.126.0/24 maxlen: 24
156.238.188.0/24 maxlen: 24
156.238.190.0/23 maxlen: 24
156.239.57.0/24 maxlen: 24
156.239.58.0/23 maxlen: 24
156.239.61.0/24 maxlen: 24
156.239.62.0/23 maxlen: 24
156.249.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96984 (0x17ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 07:45:38 2025 GMT
Not After : Oct 17 07:45:38 2025 GMT
Subject: CN=68c3cfa7-fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:be:ae:4c:e1:fa:fe:cb:76:55:80:d7:ce:
9c:f4:b9:51:0f:b2:48:af:e8:52:52:53:a0:3b:af:
de:41:d6:6f:e9:7c:10:06:07:88:9c:52:b6:57:59:
57:ee:e7:68:79:a5:03:eb:0c:90:57:a2:88:b5:b3:
ab:d5:c6:77:52:30:ad:99:db:0d:ea:fe:ae:17:27:
e9:ea:00:07:d0:da:a0:1e:42:b4:31:1b:e3:6c:12:
ac:40:1b:9e:6d:27:c5:8f:9d:78:b1:05:13:3e:02:
6a:aa:43:c0:b5:b0:f9:59:d2:5f:06:4f:1f:cb:5b:
f1:05:2e:94:f1:62:64:81:39:26:e6:9c:e9:41:75:
1b:9a:ad:34:11:5e:55:67:e7:92:aa:63:83:ac:50:
e6:5b:f6:0d:99:28:78:58:b1:56:f5:ae:0c:79:6d:
73:f1:89:39:3f:41:28:53:ea:56:e1:5f:02:3c:92:
ae:82:68:ad:6a:88:0f:6e:c6:54:dd:a3:48:35:e0:
af:8d:cd:6e:82:d2:20:03:7b:d0:1c:7f:83:41:dd:
9b:d5:aa:ef:27:d9:1a:16:e4:8b:e6:25:e5:a3:f3:
93:3f:83:b9:19:e3:21:3b:e2:43:cd:1c:e9:f1:16:
b8:95:b6:91:8b:41:8a:5e:d9:7b:fb:68:f9:a0:89:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:9D:7B:4C:5C:50:37:90:61:E9:16:A3:01:ED:60:E9:A6:3B:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF851168FAC11F0BEDFD07DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.60.0/23
156.233.63.0/24
156.233.126.0/24
156.238.188.0/24
156.238.190.0/23
156.239.57.0-156.239.59.255
156.239.61.0-156.239.63.255
156.249.48.0/21
Signature Algorithm: sha256WithRSAEncryption
38:e4:e4:1c:37:77:cc:55:51:a0:36:7e:43:3d:5c:83:a1:3c:
f1:91:f8:7b:21:32:1a:e3:d6:bf:54:94:cc:66:90:60:9c:31:
5d:d5:cf:62:db:e8:24:49:2d:d0:8f:fb:88:23:fd:ae:6e:de:
4c:a9:56:91:3b:78:3d:40:b6:a0:04:75:de:4c:1b:07:0f:c5:
80:f7:14:02:09:33:4e:f9:c7:0b:b3:8c:4d:c2:a8:ca:46:13:
1c:47:f7:4f:3d:e3:0b:64:3c:ee:84:86:65:ab:e2:46:35:7b:
e5:12:79:ea:cd:56:1b:6b:d9:7f:6a:23:8b:e2:43:67:8e:29:
9a:86:ea:1a:0a:31:c7:8f:ae:b0:78:ac:db:34:ee:02:95:ef:
5a:e5:9c:c8:c2:55:2f:5b:82:9f:52:fd:65:0d:4c:b5:73:36:
49:c6:98:8c:c4:00:8b:a2:3c:d9:02:dd:e9:d6:8e:0b:cd:10:
84:20:2c:7e:5b:8c:b5:73:8d:67:17:70:35:c0:f2:b7:45:07:
89:a7:3b:71:c4:ab:2d:8e:06:de:23:5f:e6:60:d6:be:98:1f:
3e:1a:9f:41:f1:a7:ab:6e:2c:51:06:d9:1b:68:96:d2:78:d6:
b5:1a:35:01:ba:ee:85:96:9a:53:2d:ef:df:bc:ee:a0:de:94:
1a:de:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:12:07 2025 by rpki-client