Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/725B2300840C11F094E796B0DAE4EC9C.roa
File: 725B2300840C11F094E796B0DAE4EC9C.roa (raw, json)
Hash identifier: vn7LM2BmfGylqK/BDWCJnc6qFqUvp+1sdnLP+XXQmzs=
Subject key identifier: AD:90:F3:60:2D:2F:14:76:9D:B3:77:B0:60:80:FB:EA:66:10:77:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017299
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/725B2300840C11F094E796B0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:42:25 +0000
ROA not before: Thu 28 Aug 2025 12:42:17 +0000
ROA not after: Mon 29 Sep 2025 12:42:17 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94873 (0x17299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 12:42:17 2025 GMT
Not After : Sep 29 12:42:17 2025 GMT
Subject: CN=68b04eb0-7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:97:d5:42:5d:02:21:88:cb:86:92:d9:b9:
b7:9b:ce:8c:8d:a9:2b:fb:d4:d5:9b:99:37:12:ae:
9f:cd:37:40:fc:02:3c:fc:06:eb:eb:41:4b:f1:06:
7e:18:d3:a1:f6:03:ae:aa:c5:4a:13:0d:94:51:d4:
ac:2e:69:aa:45:8c:48:39:e7:91:69:6b:fd:e9:b5:
76:fa:56:c6:51:16:58:fa:05:5a:15:4c:b0:20:6c:
45:07:0f:fc:cf:78:3b:32:f2:fd:22:2f:b5:59:8f:
6e:de:ea:52:3d:90:3d:0d:43:51:53:5b:61:53:d7:
89:50:2f:8f:c7:14:67:20:d9:b6:a5:1a:69:60:a1:
e4:2a:9a:7b:d2:67:c4:a4:88:5d:d8:55:d3:6a:c2:
2a:4f:de:de:65:fe:0d:f8:d0:9c:9d:45:6a:96:40:
cd:69:7a:ff:1e:da:50:9d:24:76:52:2e:b9:ab:96:
3a:f1:af:bb:2d:e9:f8:e4:73:84:3d:a3:91:c0:1e:
64:46:70:a9:6a:d9:ea:3f:38:d3:80:68:f3:6b:03:
49:7d:fa:f5:50:c7:bd:25:ae:ed:42:eb:5f:63:6a:
52:0e:68:cf:8b:e4:a6:7c:e2:06:37:30:fe:12:3a:
10:c6:a5:35:a2:72:3c:17:6a:9f:23:b9:b9:21:8c:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:F3:60:2D:2F:14:76:9D:B3:77:B0:60:80:FB:EA:66:10:77:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/725B2300840C11F094E796B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
81:56:b0:0c:22:7a:53:29:41:61:cf:c3:34:ea:43:4c:6c:20:
92:31:ad:03:71:fb:4b:7e:16:8f:e3:43:a7:35:d9:4f:eb:ce:
c4:99:e5:5f:b2:5d:2d:3f:c5:09:f4:37:93:66:e1:00:e2:eb:
a1:87:57:67:a4:09:42:42:c6:df:7b:12:d7:69:3b:74:05:bd:
88:0e:64:1f:78:17:8c:f3:40:4b:c2:58:ef:a7:a2:09:ac:dc:
48:ca:d7:e4:cd:48:8e:62:ec:f4:a7:5a:48:38:70:79:61:45:
18:49:21:a3:4f:0d:e8:f2:97:08:97:a5:ef:71:cb:00:5a:57:
8c:56:3c:57:3a:ce:ce:95:aa:08:94:2e:5c:6b:54:9d:39:89:
1d:00:48:90:a2:2f:dc:27:b2:aa:5a:c1:f1:85:86:a3:24:85:
57:13:68:b4:3b:ab:5e:29:5a:26:fa:c6:51:c0:8e:c1:50:d0:
f4:d1:28:3a:43:a2:b6:91:29:a8:3a:73:b1:00:52:fb:12:e7:
49:21:0c:c8:57:4b:99:0c:4a:64:40:a0:04:4c:f7:41:7b:e5:
3a:ad:fd:8c:7a:27:e6:71:59:13:20:a2:1a:93:35:4b:85:8f:
29:4f:6f:79:94:5a:4f:e9:3f:a6:bf:b4:6e:f5:7b:3d:ba:19:
ef:a4:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:45 2025 by rpki-client