Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/140A55DE688511F0A30A38A9DAE4EC9C.roa
File: 140A55DE688511F0A30A38A9DAE4EC9C.roa (raw, json)
Hash identifier: xXIl9MK7srrqpqNbkGS7npFTLwnSjAw0dCzr0Yr9MdU=
Subject key identifier: EE:D1:56:AD:56:85:25:ED:90:2A:48:82:54:A9:44:E2:1E:F8:95:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/140A55DE688511F0A30A38A9DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:55:23 +0000
ROA not before: Thu 24 Jul 2025 11:55:18 +0000
ROA not after: Thu 04 Sep 2025 11:55:18 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102254 (0x18f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 11:55:18 2025 GMT
Not After : Sep 4 11:55:18 2025 GMT
Subject: CN=68821f2b-fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:10:de:7a:80:74:40:57:3e:fc:f1:a4:a5:
13:2e:fc:6e:40:9e:f9:f6:29:d9:2f:ac:fd:51:36:
b1:ae:15:7a:c6:6a:93:fc:a5:ac:46:ed:6d:75:3b:
0f:89:8e:64:7c:ce:c1:c3:14:7a:32:f8:1b:a8:56:
04:98:e4:62:36:a9:36:76:05:7d:d5:bc:48:a9:bb:
08:69:9c:88:da:19:52:11:d5:87:31:d9:58:1d:03:
de:9f:b0:c2:72:2a:57:c1:74:53:68:23:e9:df:2d:
83:4c:0e:26:2a:53:87:28:e8:13:f4:35:54:67:8f:
e5:54:2d:2c:e7:5c:8b:de:ce:ef:c0:75:31:76:f1:
23:c3:e2:6a:1d:bc:34:94:73:25:61:15:f2:6d:ac:
b9:44:4a:7f:20:d5:fd:d8:03:93:df:fe:df:7b:6c:
69:24:4a:04:c7:dc:a5:6f:c6:6f:d5:96:14:12:9a:
8c:06:95:16:0a:cb:53:8c:d3:c4:7f:bf:55:c9:86:
78:ea:1a:0d:39:df:f5:b5:c5:4f:43:f5:e1:e2:f5:
d7:27:13:07:96:7e:88:4c:31:ae:ed:be:90:fb:b2:
d9:89:1f:90:98:f0:6e:97:bd:cb:d6:7a:02:aa:fa:
85:a8:5a:e4:e3:e4:37:93:c1:b3:8e:c8:0d:c5:68:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:56:AD:56:85:25:ED:90:2A:48:82:54:A9:44:E2:1E:F8:95:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/140A55DE688511F0A30A38A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:e9:a0:3c:66:ec:44:d4:a1:41:5c:8b:cd:40:6d:56:82:52:
95:1b:2c:40:9f:25:2d:33:1a:a4:03:bc:cb:66:60:4a:bd:9c:
88:fb:90:a2:5a:e0:3a:1e:2e:a6:57:1c:11:b8:7f:91:f0:72:
df:73:9e:a8:92:71:61:0c:3a:43:3e:56:3d:a9:b0:52:9d:c4:
25:c9:7e:ac:e0:24:56:a3:df:16:c9:7a:43:43:2f:a5:69:07:
c8:fc:b7:75:3d:34:f5:9e:dc:bd:5b:b4:50:11:57:e3:d1:95:
f1:82:87:33:dc:a5:31:45:ae:73:47:02:b3:ad:03:f3:8b:e5:
39:bd:b2:01:32:ba:14:96:68:94:85:c5:00:f4:26:4d:fb:60:
a3:9d:4e:85:3d:9d:b4:10:33:e4:66:38:ea:e3:4d:1e:9f:18:
ad:2b:79:cb:61:62:5f:f0:56:68:b6:23:78:57:cd:da:7d:02:
37:2b:63:6f:d0:4f:61:23:4e:3c:a1:5c:3a:8e:94:de:fa:da:
23:6e:66:5a:86:77:99:45:9b:5f:f9:93:44:0f:6a:eb:aa:33:
6b:79:2d:3b:3a:c2:75:65:25:d3:54:75:53:e4:6a:45:3e:9e:
5a:ba:81:a1:92:c0:ea:d7:4e:82:f7:4a:d0:66:8d:9b:cc:e2:
1d:b0:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:29 2025 by rpki-client