Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17ABEC0A689B11F09D3697B4DAE4EC9C.roa
File: 17ABEC0A689B11F09D3697B4DAE4EC9C.roa (raw, json)
Hash identifier: b+BchUi+Zjyx8cebG+MegEnhpHdXt+Gfso38JpSBT9Q=
Subject key identifier: 23:7C:13:71:00:B1:CB:4A:B4:EE:AE:9C:0D:A1:EF:E7:DC:63:80:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17ABEC0A689B11F09D3697B4DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:32:58 +0000
ROA not before: Thu 24 Jul 2025 14:32:53 +0000
ROA not after: Fri 05 Sep 2025 14:32:53 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102288 (0x18f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 14:32:53 2025 GMT
Not After : Sep 5 14:32:53 2025 GMT
Subject: CN=6882441a-5350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:b9:bf:de:b7:7b:ad:8a:49:7d:40:14:f6:
53:b3:93:2a:ea:d1:23:bf:2e:6c:27:68:cc:e9:1c:
ae:a4:43:d1:d6:34:fc:08:e3:b9:58:d8:2e:da:17:
59:01:f1:68:62:6b:a3:eb:0c:ea:2b:18:59:94:96:
85:4b:c3:02:6f:8b:3f:ad:57:1d:71:ba:36:04:fd:
7e:67:09:59:7c:41:fa:05:44:e6:3e:22:a2:12:ab:
bf:95:37:a2:c6:72:f9:55:ea:72:42:74:fe:fa:7c:
17:fe:5d:f5:c8:a0:71:06:b9:f7:c6:a0:c7:71:b1:
2c:b5:ee:26:e2:37:f9:74:0b:f9:a3:04:6c:df:32:
aa:2e:bc:7d:be:94:e1:57:eb:a3:f6:13:53:84:ed:
93:8f:99:97:11:7d:04:89:fb:b2:0c:e1:8e:0b:d7:
5b:83:30:c0:18:9a:cb:b4:b6:eb:71:2c:22:a9:45:
57:4a:da:24:e5:ca:4a:70:83:86:c3:cb:90:04:14:
67:40:7e:7b:13:32:e9:62:39:46:bd:75:40:8d:5b:
f0:a8:cb:cd:8a:7c:40:4b:c1:18:57:68:de:3c:31:
c6:6a:d3:61:6d:95:67:65:23:c5:7b:92:da:11:54:
98:c2:d5:42:12:7a:cb:e1:7e:ed:b6:e0:c7:3b:ab:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:13:71:00:B1:CB:4A:B4:EE:AE:9C:0D:A1:EF:E7:DC:63:80:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17ABEC0A689B11F09D3697B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:cc:9c:82:b2:67:95:fb:e8:99:d4:3f:a9:d2:e9:a4:25:1c:
13:10:95:1c:01:4e:0d:9f:2f:9c:08:f0:2b:58:8c:66:c0:23:
28:eb:d9:f6:4c:6c:8f:9d:83:1c:ea:c8:85:a5:d1:c9:8a:15:
8d:44:cf:fc:0d:35:c9:16:95:d5:b5:8a:79:0a:a3:d9:76:1f:
29:76:88:e8:62:cb:c9:94:56:a4:6d:19:f3:9a:39:f4:b3:29:
c0:5d:70:ac:e1:3a:03:c1:bf:36:84:82:85:a4:af:02:2d:89:
a1:54:51:47:4b:51:ba:a3:7d:f4:f2:a8:19:d8:60:45:64:08:
27:a2:9c:e8:95:cb:55:8d:7d:ee:25:f3:ad:c1:5c:cc:62:db:
c9:40:44:f6:41:ae:d0:2e:ad:aa:e7:3e:a1:99:0e:92:d3:ed:
a2:26:e9:91:fa:be:1f:24:f0:3d:ba:bd:66:47:d9:5b:7c:50:
03:6b:86:ec:35:28:fd:1e:7f:45:dd:71:de:b7:3f:04:11:e3:
c5:94:c7:ee:2d:36:1e:c4:98:28:b6:f6:c5:c6:bc:20:70:55:
9d:6b:43:bf:ca:5a:8c:f4:11:ba:27:6a:c6:71:29:f8:4b:86:
22:62:93:17:99:60:de:d5:35:53:b6:ce:90:68:46:27:7a:17:
f4:e9:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:22 2025 by rpki-client