Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAFB57E5CE211F09108A981DAE4EC9C.roa
File: 8BAFB57E5CE211F09108A981DAE4EC9C.roa (raw, json)
Hash identifier: J1PWdEG26VGxlCQcJ7NjnmD00+eQu7BYBXqOprKTKpI=
Subject key identifier: 8D:E3:65:9E:C2:11:51:8E:87:DE:16:BC:D5:8A:76:3F:E9:D9:98:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016422
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAFB57E5CE211F09108A981DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:34:13 +0000
ROA not before: Wed 09 Jul 2025 16:34:08 +0000
ROA not after: Wed 13 Aug 2025 16:34:08 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91170 (0x16422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 16:34:08 2025 GMT
Not After : Aug 13 16:34:08 2025 GMT
Subject: CN=686e9a05-a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:d3:6f:94:94:b1:98:24:7f:e8:34:62:5a:
03:c0:b1:86:e0:a2:15:53:b6:16:3b:52:9e:18:13:
1a:a4:d5:3a:22:17:30:09:be:83:91:f1:30:1b:11:
b4:48:1e:d6:08:59:af:c5:bd:c5:5d:e9:11:e0:71:
2c:b7:24:67:72:80:6f:e3:a0:22:80:79:1a:14:17:
c2:8d:d7:0c:e0:12:9e:19:a1:9a:4a:5b:78:8b:72:
b7:dd:06:8c:41:50:bc:aa:48:d9:d1:37:73:c1:b2:
62:e8:f6:00:f8:3e:eb:3f:b2:e9:71:c7:36:07:bc:
96:21:59:d2:85:c9:2b:62:ba:bc:1d:a6:d0:ca:60:
2b:5d:38:33:41:b9:7e:b6:9e:e0:08:75:59:e6:02:
f2:b2:12:09:e0:e4:b8:95:10:c4:89:0f:fd:74:6f:
27:df:b5:1c:55:d6:39:38:90:dc:f8:d0:6f:b6:10:
03:48:c5:21:df:13:9e:b9:cb:0a:09:8b:9b:cd:c4:
06:0f:ba:6d:51:0a:58:78:41:5e:11:4d:53:27:50:
8d:3e:43:2e:5a:c1:29:6d:26:50:f8:08:7d:4f:eb:
d8:77:fd:09:bd:b1:fb:0c:a7:1d:34:dc:5a:9f:e0:
c1:63:c0:28:39:7b:63:f3:a5:b4:b7:86:2f:60:37:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:65:9E:C2:11:51:8E:87:DE:16:BC:D5:8A:76:3F:E9:D9:98:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAFB57E5CE211F09108A981DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:01:48:79:ad:e1:0d:74:b9:20:a6:dc:21:8f:75:1a:8d:e2:
5e:55:8f:08:9e:19:ee:c9:7a:de:fe:dc:30:b5:58:86:a6:a1:
5d:6d:73:ae:a4:30:0f:63:23:c7:99:a7:ee:a1:08:15:98:29:
cb:e7:57:44:ad:0b:08:e3:51:2b:7f:52:c2:7c:c3:68:92:c8:
17:be:fe:3e:55:26:8e:24:31:5f:60:91:3f:7c:82:78:72:71:
da:95:09:44:6f:51:eb:31:5b:29:a9:a7:a9:48:b8:14:32:dc:
f4:18:01:40:e6:d3:fb:e3:13:de:8d:57:e0:a3:65:2e:f5:2e:
14:c1:e0:c8:db:7d:43:1f:bc:52:9b:a0:1b:43:b8:bf:ed:7a:
b1:ed:4d:e6:86:af:8b:9d:49:1c:35:bb:bf:23:43:25:7d:36:
b8:07:89:d0:84:33:06:22:69:a6:6d:b5:76:ee:e8:5e:03:9d:
89:08:1e:ea:89:e8:f6:27:6c:07:02:c5:11:b6:a9:99:6a:af:
a5:7c:08:60:fb:69:a2:91:da:b8:9b:93:6a:c1:5c:5e:63:64:
af:e7:2b:8e:0a:09:a2:05:78:54:84:cc:c0:24:39:4e:1d:6c:
38:be:5d:31:2d:bf:3c:3e:21:f3:41:7d:f0:ba:68:a2:ce:fd:
fb:a2:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:40 2025 by rpki-client