Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FD8B267AD611F0A999877CDAE4EC9C.roa
File: A8FD8B267AD611F0A999877CDAE4EC9C.roa (raw, json)
Hash identifier: 0/AMSqTPV3LhYN0myzkNSsV8QH3qzm/0y/Lz66zOe5I=
Subject key identifier: 21:D8:8F:FE:24:CF:1F:8B:81:1E:55:D7:35:DB:40:0E:76:0D:B2:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FD8B267AD611F0A999877CDAE4EC9C.roa
Signing time: Sat 16 Aug 2025 19:24:43 +0000
ROA not before: Sat 16 Aug 2025 19:24:38 +0000
ROA not after: Mon 25 Aug 2025 19:24:38 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93100 (0x16bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 19:24:38 2025 GMT
Not After : Aug 25 19:24:38 2025 GMT
Subject: CN=68a0dafb-58c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:64:a8:45:c1:4c:ee:fb:99:a8:d4:42:18:
77:0a:23:af:de:3b:ec:d4:83:b8:ee:23:6f:4a:d2:
07:e5:43:c9:b9:60:a9:f1:82:0b:aa:8f:ec:a2:60:
5f:94:62:bc:bf:47:02:f5:92:6c:dd:1d:a1:61:86:
9c:57:04:5a:61:3c:e5:e9:45:7f:f9:bf:59:9c:4f:
64:49:53:ed:4e:c9:2f:5b:01:ca:57:70:b5:ff:fb:
24:0a:6f:4d:43:43:e5:63:b8:b0:f9:75:ca:87:67:
76:a3:e1:69:78:21:88:a2:27:c0:fa:9a:ef:10:79:
7c:15:bc:7e:04:f7:cc:25:8a:af:79:2d:e4:81:b5:
31:cf:4f:54:f1:a6:25:4b:0f:63:e8:e1:f4:b2:9e:
3f:05:5e:97:8d:c9:ec:be:ad:d2:33:52:4c:50:86:
19:59:1d:f6:f0:f4:bc:67:8b:4c:02:b3:da:46:2f:
ed:b0:d0:6d:c3:89:11:17:99:4b:fc:5c:10:9e:41:
00:9c:59:57:99:a7:fc:3c:02:2d:3a:32:6c:53:d0:
47:cb:59:da:e1:40:9a:64:91:7b:94:96:69:48:15:
37:5e:07:09:9b:fb:74:31:c5:f0:0d:34:d8:98:c3:
3b:14:dc:58:27:e6:4d:30:84:08:c5:ee:fb:07:d8:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:8F:FE:24:CF:1F:8B:81:1E:55:D7:35:DB:40:0E:76:0D:B2:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FD8B267AD611F0A999877CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:be:39:00:9a:0e:c0:4c:1b:fa:0c:71:13:73:a8:1c:55:9f:
b0:7a:29:42:c3:d8:93:bd:de:48:aa:8a:f0:dd:84:18:04:a8:
c6:15:41:c2:8b:81:78:79:4a:62:6a:5b:de:09:b8:e5:05:f3:
33:8a:cb:e7:61:36:db:6a:53:dd:f7:d3:69:a6:8b:39:76:51:
17:bb:dc:a4:ef:d6:1c:f4:dc:a5:3f:02:a9:68:ff:17:83:84:
fe:83:12:da:cd:0b:15:03:f5:b3:96:53:19:61:fd:4d:1c:f2:
5c:99:15:08:0e:52:36:41:7b:62:b1:2f:1e:fd:d4:37:24:f9:
4d:b4:51:fd:28:e7:1b:3e:0c:02:ef:f7:dd:ad:25:67:cc:91:
4e:42:3e:17:73:4c:8c:1a:17:00:9a:bf:9b:ef:0c:22:65:5a:
6b:69:ab:08:e8:08:25:24:a7:dc:da:e8:0d:de:8b:58:23:15:
e6:ef:61:6a:a7:ab:e3:7f:5d:a5:7b:03:6c:1c:dc:0b:32:03:
7f:e9:83:45:2d:61:cb:12:fa:51:e9:c5:69:5e:20:fa:24:43:
8e:2f:42:49:a8:22:1f:81:fa:37:5b:50:66:8f:22:9a:f1:3b:
84:0e:65:16:bd:35:62:53:ba:9a:69:e6:20:25:6a:c0:11:5a:
62:c8:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:36 2025 by rpki-client