Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209959D666D111F092ABF294DAE4EC9C.roa
File: 209959D666D111F092ABF294DAE4EC9C.roa (raw, json)
Hash identifier: eZ1xudBRXqv3+wQa0u/dU1zVfzom0X446rdY51ImrvI=
Subject key identifier: 21:EC:81:E6:F7:A8:80:C7:63:93:69:0C:CC:0F:B7:D1:9A:0F:29:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209959D666D111F092ABF294DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:54:43 +0000
ROA not before: Tue 22 Jul 2025 07:54:38 +0000
ROA not after: Thu 28 Aug 2025 07:54:38 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102080 (0x18ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 07:54:38 2025 GMT
Not After : Aug 28 07:54:38 2025 GMT
Subject: CN=687f43c3-7dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:50:0d:41:ea:ce:41:d1:da:2b:60:01:a0:
bf:c3:68:1c:22:5d:97:e4:56:3b:3b:4d:9e:e8:84:
80:22:01:cb:98:4d:f8:35:d7:29:68:65:7f:1a:18:
99:7c:5b:d6:e2:e3:8c:ee:a4:69:f4:56:79:11:d7:
32:38:e4:f6:60:46:50:a1:b1:6e:aa:87:fe:b8:ba:
4f:fe:b7:98:9d:82:1e:28:54:cb:b0:80:67:59:ac:
73:fb:56:ee:c7:38:37:33:56:fc:03:e4:8a:93:4b:
2b:82:85:57:22:66:7d:74:8c:63:21:64:0b:ef:e6:
72:57:1a:ed:99:65:54:db:a0:68:42:6e:25:0e:c9:
74:17:20:0b:a3:e7:1f:aa:00:b0:18:37:4c:fa:83:
a6:44:e3:73:51:e2:f7:d8:eb:08:bc:36:ac:9d:0f:
cc:d2:21:c3:b6:a1:f1:af:16:e5:94:65:86:a7:79:
fe:ae:ad:11:d6:f5:2b:36:e1:42:da:9d:17:2a:85:
0f:74:d8:67:88:83:61:67:bd:58:c2:62:7e:49:ee:
45:58:14:9a:52:66:d3:24:1f:5e:2a:be:66:c5:cd:
57:f7:18:21:ce:fb:e5:26:24:38:37:27:d4:5e:96:
c8:c6:6a:f9:51:79:e7:52:b6:60:32:46:54:91:4a:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:81:E6:F7:A8:80:C7:63:93:69:0C:CC:0F:B7:D1:9A:0F:29:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209959D666D111F092ABF294DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:5f:f7:86:9c:29:fa:4b:a1:ce:84:25:ce:a2:64:bc:cc:2d:
21:7e:2b:40:b6:b7:d4:25:65:01:c0:7e:bb:3d:72:89:65:a2:
73:a0:87:8b:90:15:19:56:81:be:44:86:99:17:82:40:74:71:
f9:c9:24:86:79:39:1d:5e:ed:79:72:03:61:2a:7c:7a:77:f3:
df:1e:3e:51:c6:44:2c:4f:55:0d:91:66:c8:ad:bc:51:20:c9:
dc:92:aa:bb:50:5d:d0:cc:67:b7:ae:c3:0e:d2:7e:00:96:17:
6c:7b:6d:19:28:bf:7d:00:ec:10:00:a9:40:6a:9a:ca:9c:15:
f7:f2:3b:88:9d:a7:ea:80:89:bc:c4:8f:b8:02:67:06:c7:47:
5b:b2:52:4a:40:21:c9:87:cb:f1:ec:34:98:ac:cc:95:db:43:
af:6c:09:23:db:ef:c4:51:36:ac:b8:e4:59:a5:3b:4d:d8:33:
69:67:85:e4:cf:b6:31:1d:79:b9:05:96:21:47:16:89:15:90:
60:bd:e4:bd:c9:d5:e7:0b:c3:d6:31:e2:64:65:97:6c:e3:60:
e2:3f:1d:f8:d9:52:96:bb:26:19:24:d3:25:ae:09:c6:23:3f:
00:7c:46:e8:9d:7c:12:24:74:24:2c:b4:a3:a8:a8:da:c5:b8:
6b:80:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:06 2025 by rpki-client