Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/130AFA9A706811F084D38385DAE4EC9C.roa
File: 130AFA9A706811F084D38385DAE4EC9C.roa (raw, json)
Hash identifier: m3nytBgWZJWgTMGS0WgO7b4ONZ29tG3dEb8clOqmDpQ=
Subject key identifier: 71:39:FE:B0:A2:31:33:5F:99:A0:81:03:17:15:B3:20:11:2B:C8:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01909D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/130AFA9A706811F084D38385DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:47:55 +0000
ROA not before: Sun 03 Aug 2025 12:47:50 +0000
ROA not after: Wed 08 Oct 2025 12:47:50 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102557 (0x1909d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 12:47:50 2025 GMT
Not After : Oct 8 12:47:50 2025 GMT
Subject: CN=688f5a7b-ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:6b:0d:1f:ee:eb:9c:68:37:21:bd:fb:d8:
dc:e9:69:c4:85:b4:e1:dd:35:19:57:59:a0:c9:ee:
3b:97:2a:53:6f:b6:65:d2:1f:31:1d:a4:fa:42:d1:
36:9e:3f:0f:bc:71:d1:4b:95:3d:a3:00:f9:d3:cf:
ca:d5:9d:5a:87:2f:6f:11:4e:8f:08:67:6a:24:f4:
92:ea:8b:45:f2:ee:95:f1:17:85:5e:17:ea:1c:f4:
d7:3f:ca:7d:bd:fa:09:2b:3f:0b:31:9d:83:dd:e1:
35:12:4f:2d:28:c9:f7:13:cf:18:35:9b:99:dc:90:
ff:99:5c:07:11:54:eb:9d:e9:4a:0d:d3:0e:67:ad:
e5:4f:8d:e1:19:49:de:fd:9a:dd:cd:3e:52:48:ae:
c2:06:c2:98:2e:21:89:6f:92:52:56:31:83:69:8b:
f6:bc:b0:ba:5c:0f:31:be:88:13:22:99:c9:0b:7c:
15:a9:15:ac:ba:e8:97:46:b5:c8:64:c6:06:ae:bc:
28:e8:69:bb:35:56:60:9f:52:b0:d9:70:f8:50:8d:
ce:f6:58:ed:2e:5b:6b:c7:09:81:bf:46:1c:71:39:
c4:59:24:44:1e:14:a6:e0:26:f6:8f:e0:72:97:aa:
e4:ab:60:5c:8c:ef:5d:5d:cc:59:7a:a0:f4:f4:ea:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:FE:B0:A2:31:33:5F:99:A0:81:03:17:15:B3:20:11:2B:C8:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/130AFA9A706811F084D38385DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b3:3b:48:c0:a1:bb:3c:75:c8:5c:0a:c2:9a:63:ae:a0:ee:
05:d8:06:fa:a3:3a:90:7e:c3:c8:52:ce:d7:19:e9:19:46:7e:
34:ad:3d:7e:49:ab:de:1a:08:31:a4:e8:f4:54:ad:6b:57:e1:
44:ab:79:7b:12:39:44:89:6f:1f:79:7b:cc:63:94:cd:fa:b1:
86:1a:e3:c6:87:10:3a:c1:52:18:37:61:52:a4:0d:43:d8:28:
b5:57:12:8c:a4:19:66:4d:78:e5:4e:1d:43:f2:14:b4:d8:2c:
7f:97:8c:1f:16:26:47:bc:c0:94:99:7c:48:6a:56:7d:3e:cc:
b2:6d:ed:b8:53:39:53:ae:34:7e:79:37:d1:08:f9:a7:bb:a9:
2e:d1:01:87:77:4b:5e:7a:ee:62:af:ad:c1:21:27:0d:05:59:
b4:7e:df:9d:e8:06:9f:b2:bf:57:e7:97:4f:4b:e5:38:db:bc:
fb:3c:32:10:62:d2:88:da:16:b8:b8:9d:22:73:7a:79:4e:c1:
17:d9:6b:7a:15:b9:95:0e:79:10:cf:48:ac:bb:7a:b0:ed:cd:
26:b4:e7:e8:18:a8:a2:c0:f4:12:d2:d5:32:44:d7:b7:d3:19:
ac:6e:8a:2f:30:83:bf:91:76:9b:e7:94:b3:65:41:89:1a:9b:
49:a1:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:10 2025 by rpki-client