Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE75FF07F4711F09A213D99DAE4EC9C.roa
File: 8CE75FF07F4711F09A213D99DAE4EC9C.roa (raw, json)
Hash identifier: cEH8pJmMVby/mmtJHQ59MpEDsRdSOeUxZmYmRv+ZLtA=
Subject key identifier: 67:AA:A6:D1:25:A7:87:EB:CA:2D:19:1A:42:8D:DA:73:85:0D:45:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE75FF07F4711F09A213D99DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 11:02:54 +0000
ROA not before: Fri 22 Aug 2025 11:02:49 +0000
ROA not after: Sun 28 Sep 2025 11:02:49 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93886 (0x16ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 11:02:49 2025 GMT
Not After : Sep 28 11:02:49 2025 GMT
Subject: CN=68a84e5d-df7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:f1:8e:e7:5b:30:86:91:8b:32:a4:f5:30:
80:5e:53:26:5c:9b:5d:0b:c6:64:90:d6:54:69:19:
07:37:d2:25:44:9b:8a:fc:31:07:cf:aa:f6:78:03:
a3:3a:b3:07:ec:ad:ea:0f:af:74:a1:68:a3:f1:ec:
26:45:db:67:f0:5d:d0:00:86:d8:f9:e2:8f:e6:2b:
bc:04:3e:c1:e8:d0:8a:c0:bb:33:69:db:8f:9d:25:
37:32:a1:61:d6:bf:6c:a1:f2:6c:d4:a3:3d:a5:fd:
37:01:07:72:aa:b3:47:f9:2c:68:87:7c:6c:04:c8:
b6:a8:fe:f7:30:74:b7:f7:7a:c7:b3:56:3e:dc:f1:
2b:8e:74:ef:60:65:57:c2:31:cd:47:6a:ff:d4:3d:
32:75:79:89:c2:69:9b:24:4c:51:a7:dd:78:c2:07:
0b:a6:a8:85:12:68:5f:39:27:75:c6:3f:bb:f6:b4:
b9:a1:0e:46:41:54:34:c5:ac:ce:0d:4c:af:72:32:
20:b7:cc:0f:87:f0:cf:ed:6a:27:7e:37:0c:35:66:
bc:b5:f5:a6:c9:d2:cf:21:94:df:4a:3d:a9:fc:f3:
9b:b6:1f:e2:2c:1a:17:40:19:56:7d:de:11:76:2c:
fc:88:0b:ae:b8:8e:12:a2:55:a0:e4:e2:6e:37:90:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:A6:D1:25:A7:87:EB:CA:2D:19:1A:42:8D:DA:73:85:0D:45:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE75FF07F4711F09A213D99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:17:76:2b:80:48:df:e4:ab:43:48:65:e8:06:f5:ab:1c:fd:
ca:8b:2b:76:fa:85:f5:2a:fb:57:c7:db:8f:6b:09:e2:4b:13:
19:3f:54:4c:8d:f3:52:96:38:d5:b6:83:19:9c:fd:f8:72:78:
d7:a5:ff:75:5a:1b:1a:a9:7e:bc:3d:df:8d:d2:f2:90:fc:c1:
97:37:56:bc:24:4a:46:53:8f:bc:c3:88:98:20:68:3b:28:d1:
a7:2f:53:9d:b2:fe:0a:bf:f6:9a:5f:77:01:8d:7f:cc:06:59:
29:d6:d3:43:30:54:76:9f:46:05:14:3c:9f:31:20:6b:99:30:
34:02:a2:88:8a:f5:d2:da:fe:2f:c3:11:21:dd:32:80:49:e4:
a6:e6:a4:17:61:26:8b:bd:38:95:f1:bb:f4:30:12:79:a1:b0:
c3:7e:86:7a:85:52:7c:06:a6:1a:ae:c4:ab:94:5c:6f:3d:6f:
9d:d3:f4:b7:c2:fb:d2:75:3e:b9:d4:23:08:0d:20:25:8d:13:
1b:c7:28:6a:b5:1d:47:56:94:68:3c:2e:13:96:1d:77:fa:d0:
e5:ef:d6:76:63:14:54:6d:09:7d:be:d0:4e:bc:67:79:6a:b8:
4d:22:88:9f:26:06:31:80:d7:ee:8d:a6:c3:7f:18:18:0a:7d:
ab:16:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:14 2025 by rpki-client