Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1736B71C66CC11F0BE8F7FF4DAE4EC9C.roa
File: 1736B71C66CC11F0BE8F7FF4DAE4EC9C.roa (raw, json)
Hash identifier: UYXAu0/Ni+x0z4OeAndyDShnV9ALcs80IMRn5pmh3q4=
Subject key identifier: 9A:A4:04:4A:F0:35:12:EA:EE:18:65:3B:66:1A:CB:47:45:9E:1D:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1736B71C66CC11F0BE8F7FF4DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:18:40 +0000
ROA not before: Tue 22 Jul 2025 07:18:35 +0000
ROA not after: Wed 27 Aug 2025 07:18:35 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102076 (0x18ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 07:18:35 2025 GMT
Not After : Aug 27 07:18:35 2025 GMT
Subject: CN=687f3b50-e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:25:60:79:55:1d:86:32:72:1d:7d:3d:d4:
f7:38:fb:f3:78:df:b2:83:f4:82:27:7f:3c:2a:44:
37:41:2f:c3:99:ab:fb:b9:a7:05:5f:ba:60:00:46:
41:6a:6e:ab:0a:fd:ab:69:93:81:53:0d:e4:a4:15:
02:a9:0f:60:0f:66:f2:16:47:ae:4b:dc:55:04:44:
29:02:cc:ee:64:35:34:19:6d:38:98:25:35:7d:33:
40:df:3a:8c:22:f8:ce:86:fa:8c:2a:8e:df:dd:c9:
12:0c:8a:a7:67:42:86:47:25:52:42:f5:9f:a5:61:
6e:fe:fd:3f:4c:1a:27:1d:90:d1:29:7e:54:cf:c8:
b3:93:4b:f2:ac:d7:37:be:6a:06:f7:ca:d4:39:85:
7b:9c:fb:71:7d:d0:c5:8b:9a:12:ad:a1:4e:33:bf:
b9:3e:a9:e5:59:b6:19:f2:82:44:92:7c:1d:9e:b3:
17:49:2c:83:e2:56:6c:d7:f1:27:64:d2:52:42:a6:
71:6b:f6:55:3e:80:71:4e:3c:77:30:9f:9c:05:94:
5c:34:0c:5a:b2:b3:28:45:43:d7:a5:dc:64:a1:27:
b7:50:bb:96:fc:c8:e8:33:f6:dc:28:5a:1a:cb:9a:
36:71:c2:9b:34:18:e3:63:c4:eb:33:d3:cc:ac:fc:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:04:4A:F0:35:12:EA:EE:18:65:3B:66:1A:CB:47:45:9E:1D:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1736B71C66CC11F0BE8F7FF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
09:2d:10:a0:ea:47:8c:10:fd:9d:69:5a:63:c2:32:22:4a:21:
50:e7:a9:4b:b3:9c:7e:1e:9b:c7:1f:2e:d5:76:d7:40:b9:a9:
02:ac:3a:17:e0:89:56:64:49:90:6e:0b:da:c0:b0:9c:00:7d:
4f:c0:6c:01:dc:9f:0c:a9:3e:fb:b3:db:39:2d:98:f8:79:33:
27:8c:9b:28:67:20:85:3a:5a:aa:14:69:d0:d0:a2:df:6d:e3:
74:b7:d8:98:a6:08:9e:94:3e:1f:93:81:f0:18:3b:ac:17:53:
41:e0:c6:b7:cc:ec:7c:45:58:11:e2:9b:e8:fc:d4:bb:d7:a3:
23:f5:0d:0a:f9:ad:2c:40:fd:c8:2a:75:77:6e:0c:d3:d9:02:
1a:c3:63:4e:fa:c7:bd:cd:73:0d:7f:4f:58:3a:9d:41:0a:62:
4e:d6:c9:9a:2f:d0:dd:5e:c8:4c:40:9b:1f:51:bf:3c:2c:e9:
c3:24:11:b2:fb:78:a2:1a:a3:79:26:5f:64:08:91:b3:e0:ea:
86:65:ec:04:b4:6e:85:20:a9:d7:11:53:c9:f0:89:1d:b7:9e:
b5:65:35:18:33:81:06:16:8b:79:31:33:12:52:fc:dd:1e:e5:
05:a4:1f:f3:c6:2b:88:c4:d3:a8:93:0c:e9:39:31:42:ab:86:
12:74:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:10 2025 by rpki-client