Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB6D400E9D6911F0A396ECE0DAE4EC9C.roa
File: EB6D400E9D6911F0A396ECE0DAE4EC9C.roa (raw, json)
Hash identifier: QrY/lLrYuB/Cx4vGezH/GfrLwe8mxK7A9iLrVvsTlUI=
Subject key identifier: D8:17:49:35:CA:48:C2:65:37:95:F1:A5:41:C7:BE:4C:04:B7:9D:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB6D400E9D6911F0A396ECE0DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 19:24:30 +0000
ROA not before: Mon 29 Sep 2025 19:24:25 +0000
ROA not after: Sat 01 Nov 2025 19:24:25 +0000
asID: 200373
IP address blocks: 156.225.56.0/24 maxlen: 24
156.225.57.0/24 maxlen: 24
156.225.58.0/24 maxlen: 24
156.225.59.0/24 maxlen: 24
156.225.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97761 (0x17de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 19:24:25 2025 GMT
Not After : Nov 1 19:24:25 2025 GMT
Subject: CN=68dadcee-04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:a7:de:bc:61:8b:a6:51:f7:1a:f9:34:8b:
9d:b0:6c:e7:ad:6b:3b:b6:05:84:ff:84:57:89:3b:
16:e8:e6:98:22:90:ad:f4:34:d0:71:f9:52:a5:94:
c0:64:32:bc:6b:8a:cf:5c:02:bb:21:6d:9e:0d:db:
97:4b:99:5e:af:63:43:6e:f8:43:cc:71:a3:ac:6f:
ea:8d:82:32:bb:d5:67:24:4e:35:f3:82:b7:52:ee:
32:60:35:62:3e:ad:ba:f1:ff:fb:c3:f1:dd:89:ab:
cc:a5:96:e2:84:ef:97:4d:a3:66:8b:d7:32:1a:a3:
b0:e0:00:43:ca:28:39:6d:60:f0:6d:41:75:2e:9f:
a2:68:8e:58:d3:97:7c:2e:06:ba:74:bc:01:6a:85:
5c:ad:7e:00:c1:a8:56:d5:15:71:89:a2:57:2e:c1:
eb:25:c3:4b:db:43:e8:3e:c9:47:eb:3e:06:68:b3:
db:e3:a3:be:3e:c4:6b:7b:8d:93:9e:b2:b8:c7:d0:
09:91:18:ad:49:08:7e:4d:fc:4b:89:cb:75:c7:cd:
80:9d:92:7d:53:ba:0a:a7:87:56:78:2d:f1:b8:d7:
f2:7c:f1:05:2c:69:13:ac:68:24:36:5e:71:60:0b:
a0:89:8c:b7:a5:d7:3e:ca:35:68:ef:2e:f4:9c:19:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:49:35:CA:48:C2:65:37:95:F1:A5:41:C7:BE:4C:04:B7:9D:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB6D400E9D6911F0A396ECE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.56.0-156.225.60.255
Signature Algorithm: sha256WithRSAEncryption
00:67:f7:65:e5:90:0f:55:dd:96:c7:9d:34:e5:4c:09:76:5a:
56:f5:e5:65:05:49:cd:22:8a:01:0f:7e:f5:fd:ef:a4:d8:48:
86:26:a5:0c:9b:b7:cd:6b:e3:be:7f:1a:40:26:5e:13:d1:f1:
f9:32:38:58:bf:b0:d1:16:8a:de:14:bf:7e:46:54:0b:b9:d8:
84:3c:e3:e0:bf:d1:83:e9:e2:01:14:c1:e8:78:7f:8d:f0:7e:
7f:ad:65:21:2f:35:49:d8:70:80:a5:55:00:ed:2b:2a:5f:70:
56:99:11:35:64:8c:c6:bb:5d:c9:43:31:80:70:e8:39:04:8f:
34:2c:44:17:60:00:b4:b8:44:78:e8:04:ec:c6:25:c7:e0:4d:
68:3b:cc:19:36:9b:3f:76:91:ae:a6:91:61:0a:33:88:a6:67:
ee:54:c6:33:a7:b1:4b:b5:21:b3:41:6d:f3:95:93:31:f0:7a:
04:df:fd:58:e7:9f:d7:93:39:8f:cb:55:14:fd:e0:d7:74:ce:
cc:ad:a3:aa:64:10:e1:96:f5:1e:3f:c6:b1:0e:15:d4:19:5c:
39:21:7c:c0:fc:6d:57:77:85:6d:9a:7f:7e:a4:37:67:cf:b8:
4e:9d:da:fd:ac:e2:a5:32:9d:cd:d7:5a:cd:cb:fe:11:c1:08:
0a:66:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:44 2025 by rpki-client