Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B6DA347EA911F0BB049486DAE4EC9C.roa
File: 25B6DA347EA911F0BB049486DAE4EC9C.roa (raw, json)
Hash identifier: AceaxbWGmYCzhMyyhj0oW0jiI2iB5+SZmGgGV3HVO9w=
Subject key identifier: 95:F0:17:E9:8C:B1:C7:9E:22:AF:6D:7D:54:13:59:FA:DB:38:36:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B6DA347EA911F0BB049486DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 16:09:00 +0000
ROA not before: Thu 21 Aug 2025 16:08:55 +0000
ROA not after: Wed 21 Aug 2030 16:08:55 +0000
asID: 17561
IP address blocks: 156.242.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93792 (0x16e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 16:08:55 2025 GMT
Not After : Aug 21 16:08:55 2030 GMT
Subject: CN=68a7449c-e32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:c8:ea:03:7e:cf:4d:99:e3:05:37:d9:72:
42:db:3b:d9:38:60:97:48:18:01:90:c6:14:b1:ae:
12:45:e7:60:1e:25:5e:ac:29:b3:ab:57:45:7d:02:
73:da:69:08:d6:59:77:f8:84:46:6a:55:d5:31:05:
4e:57:30:8c:e0:31:09:15:13:23:49:d1:1e:7c:3a:
4b:92:65:bc:51:62:50:fb:94:a4:4c:76:5e:8b:ce:
e7:7f:ab:4a:23:6b:4d:e1:f2:9d:39:5c:49:42:d9:
f5:5c:82:cc:66:fa:f6:6d:ed:5c:b3:31:8b:ac:44:
b9:92:01:8f:6e:89:af:13:b8:46:0c:95:91:e9:6c:
3a:2b:28:04:32:aa:51:0a:2c:be:54:02:72:58:8b:
ff:80:f2:07:c0:6d:7a:4e:95:d1:81:06:04:6f:10:
ca:45:c9:5e:6b:34:9e:60:4d:c9:9c:a3:83:4f:58:
e1:46:2a:e0:6a:52:78:08:1c:93:32:d2:5b:40:22:
53:86:91:fe:63:fe:da:6a:f3:11:57:c2:19:7f:78:
b1:c3:97:72:90:5f:b4:0b:0f:b9:6f:f0:b4:73:5a:
dd:5c:bb:82:7b:5c:ed:a6:2b:b6:ba:cc:e9:31:72:
c3:29:cc:e6:69:71:17:cf:6a:8d:65:49:9f:09:ad:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:17:E9:8C:B1:C7:9E:22:AF:6D:7D:54:13:59:FA:DB:38:36:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B6DA347EA911F0BB049486DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:5b:93:e5:10:0a:50:ee:b7:f1:78:b9:7f:de:27:80:37:15:
d8:72:23:26:2d:d3:bc:92:62:ab:22:d9:50:45:5d:b2:a3:0c:
cc:2a:34:18:b9:f1:ce:0a:2d:96:24:f0:e5:b5:cc:df:ca:68:
9e:50:78:f9:9f:49:1b:c2:2d:94:24:06:23:32:07:ff:0a:d8:
d9:ac:d0:68:b7:60:db:28:11:7a:1e:3a:7e:fa:35:af:40:70:
8d:4e:64:de:5f:e3:0b:39:53:23:fd:b1:61:f2:6d:ad:68:63:
7f:b2:08:cc:65:01:14:7f:42:7c:28:77:85:75:d8:80:8c:11:
a6:6f:f9:4c:0f:1f:89:f4:08:73:fc:56:8f:32:96:cf:69:01:
40:e5:d9:58:a1:87:b8:5e:32:d1:24:aa:c0:13:d2:33:8b:c3:
54:b1:68:fd:18:a2:a0:f9:89:b9:95:58:13:bc:d7:69:2b:f9:
c2:50:72:2a:4a:7b:55:08:9b:ce:c9:8f:61:5f:33:67:ed:0c:
94:ed:6b:90:67:04:3d:4b:e9:4e:11:4c:c1:b6:c1:0f:71:89:
9e:7c:35:5f:83:d4:0e:4e:26:cc:a7:19:04:a4:63:1f:ca:f7:
a1:77:f4:e6:c1:c0:26:03:3c:1c:03:81:58:9d:5b:7b:35:ce:
14:a4:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:52 2025 by rpki-client