Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E07E24B34311F082B9718CDAE4EC9C.roa
File: F7E07E24B34311F082B9718CDAE4EC9C.roa (raw, json)
Hash identifier: 6KBoLqJi5K4W5TvbAVynQIBadEQzN+QHEzbsp92XjpU=
Subject key identifier: 92:BC:2F:B4:B7:DA:7D:84:D5:2D:F7:85:6D:64:6B:08:D2:79:E9:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01830A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E07E24B34311F082B9718CDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:48:15 +0000
ROA not before: Mon 27 Oct 2025 14:48:11 +0000
ROA not after: Sun 30 Nov 2025 14:48:11 +0000
asID: 9304
IP address blocks: 156.227.136.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.245.160.0/24 maxlen: 24
156.245.168.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99082 (0x1830a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 14:48:11 2025 GMT
Not After : Nov 30 14:48:11 2025 GMT
Subject: CN=68ff862f-5e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:06:7e:a9:53:85:45:76:a0:bd:88:b2:03:
7c:06:51:5c:39:62:a5:6c:4a:9f:9a:b2:a2:fd:d8:
52:f9:90:57:c6:05:b7:3e:ad:43:78:68:08:0a:44:
10:63:b4:80:b2:63:62:c0:18:9d:53:84:40:fa:34:
f6:a3:9e:8a:25:f5:cd:69:f2:fe:24:e0:60:e1:9b:
63:33:6e:8f:90:e6:69:46:1f:7a:74:a0:cc:ce:30:
05:56:4b:cd:24:7b:a5:9e:c2:4b:a5:a4:92:2e:cf:
08:36:dc:8e:af:a7:d7:dd:0a:1a:2a:78:69:1e:5b:
ce:e7:8d:04:c7:1c:be:96:f3:a7:2f:a1:7b:12:65:
2e:bc:9d:99:52:91:df:e0:99:f5:7a:04:dc:79:f7:
d0:dc:4f:f1:c5:d0:2f:c4:cf:eb:26:77:c4:e1:f6:
24:dd:84:de:c7:16:f1:0d:5b:2b:f2:db:08:73:65:
20:5a:c0:1d:75:59:c4:3c:62:6c:05:fc:59:cd:bb:
79:d7:e0:64:e7:0b:e5:7e:92:be:d1:f9:98:12:de:
cb:05:a4:f0:55:09:e9:f6:b1:d1:eb:00:56:b2:07:
ae:d8:65:55:37:91:c4:bb:05:f7:84:4e:0e:75:57:
0f:5e:12:89:21:d2:c6:d2:81:7e:cd:99:e7:2c:76:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BC:2F:B4:B7:DA:7D:84:D5:2D:F7:85:6D:64:6B:08:D2:79:E9:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E07E24B34311F082B9718CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.136.0/24
156.231.4.0-156.231.6.255
156.245.160.0/24
156.245.168.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b2:72:fd:db:3b:90:ba:d3:9e:cc:02:27:6a:20:b9:6c:05:
4f:f0:f6:9e:93:4e:02:cf:bc:81:d4:5f:e6:d8:96:d8:fa:d9:
59:d0:d9:1f:25:cd:f7:b4:db:43:60:a2:f0:33:3b:48:e0:62:
0a:90:e1:b4:6b:a0:98:a7:37:aa:35:74:11:c1:9a:83:c0:46:
92:9b:31:1b:ed:61:08:08:82:65:09:12:26:29:e1:a6:33:7d:
ee:b4:85:34:43:a9:5d:3c:08:4f:3e:af:c8:b4:50:49:86:35:
33:12:57:37:f7:2c:76:e4:d0:d4:c8:2d:81:b9:f2:6f:7d:9d:
3e:16:3b:1b:b8:d3:42:88:e5:b0:86:b7:fb:62:e8:56:a8:47:
ed:57:98:d0:1f:9e:c3:f5:50:46:a5:04:04:4e:a2:96:28:33:
62:f2:12:8c:a3:7d:75:6f:c9:58:7f:bb:b3:6f:02:2a:a5:59:
98:35:58:6d:63:0e:99:ea:08:eb:fe:55:ce:50:9a:58:59:1a:
a9:81:47:14:19:f4:13:04:0f:63:c8:28:7f:8c:7d:37:41:dd:
8d:55:97:b9:83:67:89:1f:fd:ba:95:3a:d7:a2:75:68:68:b0:
07:3c:30:3d:ea:c5:b8:c4:63:8d:39:8e:f1:9b:7f:e7:58:2a:
1c:16:ad:66
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAYMKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MTQ0ODExWhcNMjUxMTMwMTQ0ODExWjAYMRYw
FAYDVQQDEw02OGZmODYyZi01ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0J4GfqlThUV2oL2IsgN8BlFcOWKlbEqfmrKi/dhS+ZBXxgW3Pq1DeGgI
CkQQY7SAsmNiwBidU4RA+jT2o56KJfXNafL+JOBg4ZtjM26PkOZpRh96dKDMzjAF
VkvNJHulnsJLpaSSLs8INtyOr6fX3QoaKnhpHlvO540Exxy+lvOnL6F7EmUuvJ2Z
UpHf4Jn1egTceffQ3E/xxdAvxM/rJnfE4fYk3YTexxbxDVsr8tsIc2UgWsAddVnE
PGJsBfxZzbt51+Bk5wvlfpK+0fmYEt7LBaTwVQnp9rHR6wBWsgeu2GVVN5HEuwX3
hE4OdVcPXhKJIdLG0oF+zZnnLHalnwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFJK8
L7S32n2E1S33hW1kawjSeenHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GN0UwN0UyNEIzNDMxMUYwODJCOTcxOENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAnOOIMAwDBAKc5wQDBACc5wYD
BACc9aADBACc9agDBACc9cIDBACc9dMDBACc9eADBACc/bswDQYJKoZIhvcNAQEL
BQADggEBAJWycv3bO5C6057MAidqILlsBU/w9p6TTgLPvIHUX+bYltj62VnQ2R8l
zfe020NgovAzO0jgYgqQ4bRroJinN6o1dBHBmoPARpKbMRvtYQgIgmUJEiYp4aYz
fe60hTRDqV08CE8+r8i0UEmGNTMSVzf3LHbk0NTILYG58m99nT4WOxu400KI5bCG
t/ti6FaoR+1XmNAfnsP1UEalBAROopYoM2LyEoyjfXVvyVh/u7NvAiqlWZg1WG1j
DpnqCOv+Vc5QmlhZGqmBRxQZ9BMED2PIKH+MfTdB3Y1Vl7mDZ4kf/bqVOteidWho
sAc8MD3qxbjEY405jvGbf+dYKhwWrWY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:37 2025 by rpki-client