Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A7CFFA8D5A11F0861217C1DAE4EC9C.roa
File: C7A7CFFA8D5A11F0861217C1DAE4EC9C.roa (raw, json)
Hash identifier: VK5uRwaOtBpmJff/oT05MBOuaRleK3Cvq9EXEDA+Snk=
Subject key identifier: 9E:38:8C:04:5D:F8:1D:FE:D3:7A:C0:B5:AD:E1:92:D1:F8:43:B0:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A7CFFA8D5A11F0861217C1DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 08:55:49 +0000
ROA not before: Tue 09 Sep 2025 08:55:43 +0000
ROA not after: Thu 16 Oct 2025 08:55:43 +0000
asID: 22773
IP address blocks: 156.242.95.0/24 maxlen: 24
156.242.120.0/24 maxlen: 24
156.242.121.0/24 maxlen: 24
156.242.122.0/24 maxlen: 24
156.242.224.0/24 maxlen: 24
156.242.225.0/24 maxlen: 24
156.242.226.0/24 maxlen: 24
156.242.227.0/24 maxlen: 24
156.242.228.0/24 maxlen: 24
156.242.229.0/24 maxlen: 24
156.242.230.0/24 maxlen: 24
156.242.247.0/24 maxlen: 24
156.242.248.0/24 maxlen: 24
156.242.249.0/24 maxlen: 24
156.242.250.0/24 maxlen: 24
156.242.251.0/24 maxlen: 24
156.242.252.0/24 maxlen: 24
156.242.253.0/24 maxlen: 24
156.242.254.0/24 maxlen: 24
156.242.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96774 (0x17a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 08:55:43 2025 GMT
Not After : Oct 16 08:55:43 2025 GMT
Subject: CN=68bfeb95-28b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f1:1f:db:6c:00:8c:24:cb:42:43:87:9d:21:
7e:65:e8:3b:ac:be:c6:a9:95:ab:03:ee:dd:e3:03:
b6:cb:3e:1f:ef:4b:2f:30:a9:e6:ef:f2:be:be:26:
13:b1:9f:55:06:bd:27:13:2e:9c:be:84:8e:5d:0a:
bc:12:00:de:d1:98:c0:43:ed:b0:84:8a:c9:0a:91:
40:61:e0:30:da:ef:e7:66:6a:c1:05:52:01:74:22:
06:70:ae:15:f9:82:9e:13:26:8b:8c:7d:c6:b3:41:
32:61:b4:20:b8:ce:b0:a1:7b:b5:f5:66:ed:d9:25:
6e:f6:d0:b2:bd:5b:89:d6:5b:22:fd:37:36:4a:90:
d5:79:0a:34:7d:f5:61:5f:20:19:8a:5e:db:31:5f:
96:3b:99:45:b0:43:73:9c:d4:52:ea:f1:a8:08:c8:
86:ab:c7:2a:b8:43:19:d4:de:48:53:90:f2:c8:26:
a6:4a:e8:08:e1:d7:83:0a:f4:e2:6b:a3:1e:bc:8c:
23:53:1c:b9:74:b1:c0:df:44:53:28:03:84:59:5e:
13:b4:95:07:2e:c7:8f:83:e0:5f:e1:1c:48:50:0f:
8f:a7:f9:b1:84:28:74:da:ff:7d:67:59:da:76:85:
b4:11:c9:fb:b3:d2:33:a8:aa:d7:08:08:b5:bf:be:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:8C:04:5D:F8:1D:FE:D3:7A:C0:B5:AD:E1:92:D1:F8:43:B0:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A7CFFA8D5A11F0861217C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.95.0/24
156.242.120.0-156.242.122.255
156.242.224.0-156.242.230.255
156.242.247.0-156.242.255.255
Signature Algorithm: sha256WithRSAEncryption
ad:db:3c:a8:6e:bb:4e:40:b6:01:98:2c:d0:82:91:7e:67:e2:
e1:ef:f6:f7:a9:7b:af:4f:64:4e:1e:78:13:6c:8b:4b:a4:46:
a3:ca:34:44:63:ad:e1:95:96:ea:37:a5:d1:fd:06:a7:dc:1c:
e8:69:40:51:e7:96:05:1a:1b:ba:0d:4b:4f:eb:7f:c1:d4:a2:
eb:47:02:61:e7:52:5f:82:47:aa:0f:34:dd:fc:d6:80:be:8a:
54:de:51:78:ce:a3:f1:3c:fa:f9:3c:e0:56:68:ba:c1:7d:d7:
99:d7:be:19:1e:59:d7:8e:68:d7:36:49:e4:05:ac:15:5f:0e:
d1:7e:28:e9:9e:e1:32:76:06:3c:4b:90:a4:a7:fc:b2:16:04:
e9:a5:8b:d6:e4:61:18:24:14:e0:f6:42:b9:10:5b:f5:f3:11:
ab:8b:f6:96:0a:e6:50:73:eb:74:d3:e5:02:a9:a5:59:68:15:
21:1e:55:67:d6:17:06:c8:1e:c9:66:df:36:f7:79:ab:14:b5:
e9:e2:40:81:55:bc:ba:f1:d6:3f:a1:5a:4b:72:f3:b3:86:a3:
40:ac:7b:15:81:11:9c:6a:78:62:c4:2e:a0:93:13:b9:be:a9:
93:83:6d:ad:50:11:32:23:d8:e9:0c:fd:9a:03:c4:17:a0:39:
c6:10:fe:05
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAXoGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA5MDg1NTQzWhcNMjUxMDE2MDg1NTQzWjAYMRYw
FAYDVQQDEw02OGJmZWI5NS0yOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/PEf22wAjCTLQkOHnSF+Zeg7rL7GqZWrA+7d4wO2yz4f70svMKnm7/K+
viYTsZ9VBr0nEy6cvoSOXQq8EgDe0ZjAQ+2whIrJCpFAYeAw2u/nZmrBBVIBdCIG
cK4V+YKeEyaLjH3Gs0EyYbQguM6woXu19Wbt2SVu9tCyvVuJ1lsi/Tc2SpDVeQo0
ffVhXyAZil7bMV+WO5lFsENznNRS6vGoCMiGq8cquEMZ1N5IU5DyyCamSugI4deD
CvTia6MevIwjUxy5dLHA30RTKAOEWV4TtJUHLsePg+Bf4RxIUA+Pp/mxhCh02v99
Z1nadoW0Ecn7s9IzqKrXCAi1v762WwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFJ44
jARd+B3+03rAta3hktH4Q7BvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DN0E3Q0ZGQThENUExMUYwODYxMjE3QzFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvAwQAnPJfMAwDBAOc8ngDBACc8now
DAMEBZzy4AMEAJzy5jALAwQAnPL3AwMAnPIwDQYJKoZIhvcNAQELBQADggEBAK3b
PKhuu05AtgGYLNCCkX5n4uHv9vepe69PZE4eeBNsi0ukRqPKNERjreGVluo3pdH9
BqfcHOhpQFHnlgUaG7oNS0/rf8HUoutHAmHnUl+CR6oPNN381oC+ilTeUXjOo/E8
+vk84FZousF915nXvhkeWdeOaNc2SeQFrBVfDtF+KOme4TJ2BjxLkKSn/LIWBOml
i9bkYRgkFOD2QrkQW/XzEauL9pYK5lBz63TT5QKppVloFSEeVWfWFwbIHslm3zb3
easUteniQIFVvLrx1j+hWkty87OGo0CsexWBEZxqeGLELqCTE7m+qZODba1QETIj
2OkM/ZoDxBegOcYQ/gU=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:47:14 2025 by rpki-client