Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCF6E18995311F084A146EDDAE4EC9C.roa
File: CFCF6E18995311F084A146EDDAE4EC9C.roa (raw, json)
Hash identifier: mLxfras/WwCoTalKpwgDi6uKlVdEIrxUIDAMbPtB9S8=
Subject key identifier: E7:C0:E0:FA:03:89:15:1D:A9:DE:4A:C7:EF:DC:BA:74:FA:77:57:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCF6E18995311F084A146EDDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 14:36:10 +0000
ROA not before: Wed 24 Sep 2025 14:36:05 +0000
ROA not after: Tue 28 Oct 2025 14:36:05 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97503 (0x17cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 14:36:05 2025 GMT
Not After : Oct 28 14:36:05 2025 GMT
Subject: CN=68d401da-4162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:18:96:68:cb:f9:dd:14:56:c8:ca:d2:be:
bc:54:bf:74:2d:ee:c6:15:40:7c:ea:9d:1c:d7:e7:
90:6d:c2:f6:a1:d6:83:53:f4:42:b1:6c:b5:68:91:
4e:97:cc:96:ac:df:90:c4:49:b7:31:4c:f3:d1:74:
e4:dd:b5:9a:3c:df:5e:26:95:97:57:4b:c4:50:22:
6a:7f:90:60:2e:89:c0:a2:e4:d3:2a:43:ce:b4:54:
e1:83:80:39:5c:c3:ef:24:36:b8:6d:4e:0d:6b:e3:
be:16:85:d1:53:ad:7c:4d:b6:1e:3a:b0:bc:13:15:
12:a9:71:5e:a8:7a:9c:d2:46:fc:88:be:53:f1:9b:
79:43:f2:6a:e9:ba:93:15:36:e9:bd:da:27:a0:66:
5c:a2:57:a7:a7:1e:98:87:4b:d2:a4:27:be:f6:f5:
f9:e6:f3:54:f6:39:1e:13:cf:ce:f5:cf:6f:e5:ca:
21:89:2d:52:3a:81:8d:db:34:ba:17:7c:06:05:64:
a1:b0:c8:08:8c:5b:f7:75:9b:6c:e0:80:be:1f:09:
f2:f7:6b:dc:02:0b:70:0d:80:94:60:e1:0e:8c:47:
b6:b7:aa:f3:a5:63:fd:f5:ad:8a:cb:29:58:d9:a2:
a5:db:54:46:1a:5c:b6:70:93:69:23:00:26:7a:44:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:E0:FA:03:89:15:1D:A9:DE:4A:C7:EF:DC:BA:74:FA:77:57:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCF6E18995311F084A146EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:82:88:e7:fe:e5:dd:02:a7:6f:08:e8:54:1d:cf:d6:aa:58:
ba:c9:82:c1:cb:55:10:db:9b:29:be:4a:4e:60:d2:1b:3e:64:
af:1b:e5:3f:9e:1c:c9:75:53:70:10:bd:38:85:d2:25:9f:f9:
63:51:60:96:b6:dc:2d:67:ee:88:4e:97:7f:3e:70:03:32:83:
b8:b7:a5:86:67:9e:34:8c:6c:06:00:b9:71:7b:19:a3:41:1a:
2b:36:3f:74:37:09:1c:18:1a:b4:0b:36:6a:19:e4:75:53:71:
7e:ba:ee:95:ac:3f:cb:9d:96:a9:cb:29:3b:66:ea:59:28:27:
c0:7b:d3:b8:38:7f:31:15:8b:d7:27:68:ea:16:97:b9:5f:a6:
08:78:37:28:46:94:38:32:5b:c2:f2:1c:91:16:49:99:24:66:
55:b5:f4:74:65:07:6d:80:03:c0:63:e5:69:c1:e2:3e:1f:cb:
97:3f:f7:90:d8:4d:25:49:40:f8:cb:a9:c4:32:cb:97:65:94:
ec:d7:84:59:b8:2f:4c:11:6f:67:0c:7a:0b:ca:b4:7f:e3:f8:
87:cb:cb:62:6e:56:dd:1e:0d:01:cd:68:82:27:d1:5c:49:5c:
85:9f:5c:ed:21:8a:28:4e:6a:a8:9b:24:22:1a:78:d7:a4:96:
31:ac:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:42 2025 by rpki-client