Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CC55C46FDD11F0AE0F06F1DAE4EC9C.roa
File: 16CC55C46FDD11F0AE0F06F1DAE4EC9C.roa (raw, json)
Hash identifier: Khy76qoMut9sfVFrps+7RK31duStalbua7bIexQ3llY=
Subject key identifier: EE:78:A6:AB:07:E3:5B:06:70:88:54:3C:32:3D:A7:72:87:DA:D3:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01906A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CC55C46FDD11F0AE0F06F1DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 20:13:01 +0000
ROA not before: Sat 02 Aug 2025 20:12:56 +0000
ROA not after: Sat 20 Sep 2025 20:12:56 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102506 (0x1906a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 20:12:56 2025 GMT
Not After : Sep 20 20:12:56 2025 GMT
Subject: CN=688e714d-d360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:83:8e:e2:b4:a5:5e:88:85:3d:d7:47:a5:
9c:bd:a0:48:ea:5e:98:8c:8b:5e:e3:9f:6a:33:88:
fa:86:3b:22:11:60:06:a9:4d:75:5d:b9:87:bb:c4:
24:c7:ce:6e:47:e5:df:6b:0f:a2:fe:28:c7:03:22:
fe:e6:c4:f0:b6:43:b5:b4:02:e5:31:32:0b:aa:35:
ff:01:af:51:08:a3:17:da:e4:97:c9:8e:03:e6:8b:
80:4b:25:6b:ad:75:f8:93:f2:58:c5:48:94:bc:36:
08:fe:d4:d6:cf:01:1e:39:78:33:de:80:21:fa:6e:
1d:e5:f1:a0:54:1d:18:f6:55:81:b1:d0:9f:27:88:
92:a0:66:fa:4a:37:f3:6f:b6:36:34:24:b2:d8:ba:
c3:c6:cb:63:96:56:fa:5b:a3:8c:36:90:5e:20:73:
69:03:f7:65:8f:29:67:de:4b:6e:8c:ec:b8:9a:e7:
ff:a0:33:75:e8:0d:2c:b7:27:47:d9:2f:5e:7a:96:
13:ef:22:d9:de:56:db:4d:c1:64:25:b3:5e:6e:ae:
bc:ec:69:99:35:2e:9d:15:ca:26:aa:66:63:2a:3c:
38:b4:1e:52:14:75:fc:1f:53:37:82:76:c3:4d:5e:
c8:39:58:02:f3:5a:84:b0:c3:b3:74:d3:90:c8:69:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:A6:AB:07:E3:5B:06:70:88:54:3C:32:3D:A7:72:87:DA:D3:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16CC55C46FDD11F0AE0F06F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
78:33:58:2f:1d:ad:dd:ab:6f:4f:03:bf:68:f9:a4:f8:44:cd:
a2:79:04:29:32:64:cc:ca:8d:05:44:0e:42:98:f9:39:78:53:
21:55:a2:e7:d1:fe:0c:38:68:a8:3d:3a:b3:ac:02:52:e3:cf:
d8:f4:ec:cb:c4:82:db:c4:ee:4a:92:a8:e8:06:09:1f:34:65:
59:e1:09:52:de:a8:af:56:b7:66:66:65:02:e5:af:d7:92:90:
d4:f2:97:f7:81:e2:41:ba:92:a2:26:44:0b:a3:8a:cb:4c:32:
fa:ba:d3:75:9b:8c:87:ea:68:9f:24:a4:b6:ed:04:41:67:5c:
e8:12:22:8f:dd:c4:96:90:da:2e:2a:2c:f8:29:e7:a5:33:84:
0c:72:7c:6a:21:23:a4:82:0a:e4:b3:78:6c:54:5f:ff:b7:86:
b7:2c:79:24:da:46:e9:f6:2c:bc:da:37:d8:be:56:a9:7a:87:
2e:0b:eb:0d:52:2a:97:47:c2:4c:84:05:a1:59:e3:61:cd:89:
ab:e1:ee:68:50:61:3d:be:46:7a:72:a5:b3:65:b3:24:77:74:
50:0d:53:b9:a0:73:de:fa:ce:a2:5f:04:79:ca:3f:0b:8d:b9:
eb:bd:3e:c8:21:a4:ce:85:c4:d6:ae:ac:3a:0d:5c:c8:0f:5f:
98:20:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:44 2025 by rpki-client