Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FDBE3D47F6111F08CAD0CC0DAE4EC9C.roa
File: 7FDBE3D47F6111F08CAD0CC0DAE4EC9C.roa (raw, json)
Hash identifier: 2pHgwh9x++/j6O0YLEUhJEtazwCHNPZs2jqsz0IT9dk=
Subject key identifier: 28:75:6A:E7:C1:16:EE:CB:0C:D4:E0:50:EF:66:A1:77:5A:58:08:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016ECE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FDBE3D47F6111F08CAD0CC0DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 14:08:39 +0000
ROA not before: Fri 22 Aug 2025 14:08:31 +0000
ROA not after: Sat 06 Sep 2025 14:08:31 +0000
asID: 139646
IP address blocks: 156.225.76.0/22 maxlen: 24
156.238.120.0/21 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93902 (0x16ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 14:08:31 2025 GMT
Not After : Sep 6 14:08:31 2025 GMT
Subject: CN=68a879e6-83a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:46:92:6f:38:19:07:a4:3b:72:db:35:bf:
f0:53:db:ac:93:51:c3:01:e1:25:b0:b5:57:7a:81:
af:b5:4c:7e:98:57:2f:5d:3a:44:ad:55:24:b9:4c:
05:76:62:65:54:01:37:ea:20:13:49:8d:36:a3:e1:
4a:26:fa:a2:a7:0e:bb:c9:5e:c0:2b:f4:e9:0f:a4:
9c:98:8a:e8:28:43:92:c7:d0:d2:4b:f8:3c:a3:00:
6f:79:c6:cf:dd:f4:6e:ab:e1:9f:98:da:0b:de:bf:
8a:29:5e:c4:64:7e:26:7d:d4:c1:78:6c:82:d3:86:
31:38:94:fd:cc:c0:b4:47:94:5a:06:54:b0:04:62:
08:4b:83:22:7f:37:eb:e3:e2:e6:2e:f2:df:c6:32:
9d:37:67:4e:48:46:88:fa:f6:f0:40:5e:ed:bb:ec:
9c:f7:82:92:ab:b1:87:55:4f:6d:d0:6a:b9:81:eb:
23:44:cc:83:13:22:3c:c7:56:35:e3:26:60:15:4e:
ad:aa:b9:78:88:25:ae:ae:91:02:e0:16:e2:f6:a8:
d5:9e:89:d6:16:ec:26:e2:c9:c2:d0:3d:98:70:b8:
62:f4:20:0a:a3:2e:03:c3:1d:75:1f:57:ba:32:3e:
08:48:59:ac:1c:0a:b2:29:ca:fd:e1:c4:04:1c:d5:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:6A:E7:C1:16:EE:CB:0C:D4:E0:50:EF:66:A1:77:5A:58:08:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FDBE3D47F6111F08CAD0CC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.245.144.0/22
156.245.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:f0:4f:d5:64:48:0e:66:9d:40:ad:d9:cf:71:8e:49:74:18:
00:26:52:88:ea:20:81:41:cb:da:ad:6a:ca:52:00:64:45:e4:
5d:df:a8:53:ea:14:de:60:17:3f:41:50:4d:2a:cb:02:04:9e:
d8:a9:16:57:70:02:d0:b4:cc:33:f6:9a:fb:ef:6d:9e:7c:d8:
52:c8:df:ed:9f:5e:14:56:d1:5a:1a:b6:49:e1:e0:39:04:d6:
5c:2e:1c:95:34:72:9b:e8:0d:4b:85:c9:2f:0c:6c:79:cc:27:
86:99:ed:c7:4b:e8:70:ad:88:ee:3a:64:dc:af:a0:51:8c:45:
0f:6d:08:8a:fd:c4:d4:29:f6:48:0d:64:a7:53:76:fc:fc:19:
71:30:d7:20:b4:30:86:32:10:af:9a:0c:95:8a:61:59:d3:d9:
75:e6:83:53:ed:bd:df:89:47:19:ab:98:c6:3e:e0:bc:6b:4e:
b8:05:98:b0:13:8f:57:94:dc:d3:14:6e:b2:73:e1:39:c8:18:
ed:52:dc:23:55:03:1b:47:94:48:64:59:1a:23:1d:82:9e:03:
47:75:7d:b2:96:8f:a1:fa:26:5f:6b:c9:47:3d:a3:d4:03:6c:
c9:44:58:23:33:ca:74:74:b2:af:d0:6a:ba:18:60:50:fc:53:
fe:81:f7:c9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAW7OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIyMTQwODMxWhcNMjUwOTA2MTQwODMxWjAYMRYw
FAYDVQQDEw02OGE4NzllNi04M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA09dGkm84GQekO3LbNb/wU9usk1HDAeElsLVXeoGvtUx+mFcvXTpErVUk
uUwFdmJlVAE36iATSY02o+FKJvqipw67yV7AK/TpD6ScmIroKEOSx9DSS/g8owBv
ecbP3fRuq+GfmNoL3r+KKV7EZH4mfdTBeGyC04YxOJT9zMC0R5RaBlSwBGIIS4Mi
fzfr4+LmLvLfxjKdN2dOSEaI+vbwQF7tu+yc94KSq7GHVU9t0Gq5gesjRMyDEyI8
x1Y14yZgFU6tqrl4iCWurpEC4Bbi9qjVnonWFuwm4snC0D2YcLhi9CAKoy4Dwx11
H1e6Mj4ISFmsHAqyKcr94cQEHNXvKwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCh1
aufBFu7LDNTgUO9moXdaWAhqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RkRCRTNENDdGNjExMUYwOENBRDBDQzBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnOFMAwQDnO54AwQCnPWQAwQD
nPXoMA0GCSqGSIb3DQEBCwUAA4IBAQCg8E/VZEgOZp1ArdnPcY5JdBgAJlKI6iCB
QcvarWrKUgBkReRd36hT6hTeYBc/QVBNKssCBJ7YqRZXcALQtMwz9pr7722efNhS
yN/tn14UVtFaGrZJ4eA5BNZcLhyVNHKb6A1LhckvDGx5zCeGme3HS+hwrYjuOmTc
r6BRjEUPbQiK/cTUKfZIDWSnU3b8/BlxMNcgtDCGMhCvmgyVimFZ09l15oNT7b3f
iUcZq5jGPuC8a064BZiwE49XlNzTFG6yc+E5yBjtUtwjVQMbR5RIZFkaIx2CngNH
dX2ylo+h+iZfa8lHPaPUA2zJRFgjM8p0dLKv0Gq6GGBQ/FP+gffJ
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:56 2025 by rpki-client