Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DA46CE6D1811F0A54237F5DAE4EC9C.roa
File: 20DA46CE6D1811F0A54237F5DAE4EC9C.roa (raw, json)
Hash identifier: zApA4b3m5s3y8OCcxx29mjwo6b/TmclPBRdBXhOq1yA=
Subject key identifier: 1A:13:FE:9B:AB:9D:3A:2C:43:EF:E1:C5:0F:EE:0F:95:28:6D:54:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DA46CE6D1811F0A54237F5DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:38:05 +0000
ROA not before: Wed 30 Jul 2025 07:38:00 +0000
ROA not after: Sun 31 Aug 2025 07:38:00 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102387 (0x18ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 07:38:00 2025 GMT
Not After : Aug 31 07:38:00 2025 GMT
Subject: CN=6889cbdd-2a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:0f:1e:5f:5e:f2:e6:81:b5:a5:ee:fa:28:
5c:8e:90:37:be:f0:84:48:a7:53:7a:75:c8:8b:98:
da:da:e1:d3:10:55:66:28:d8:31:b8:7a:69:e2:8c:
aa:f8:8b:69:0f:96:09:e7:81:bc:c8:a7:4f:b0:a5:
fe:fc:f6:8b:6a:da:b1:1d:4d:23:7f:d7:52:f3:6b:
11:ed:61:61:8f:b8:6f:24:8a:13:22:df:2a:f6:fc:
d1:a2:d3:bf:43:15:2d:d6:98:a1:58:a4:80:c2:01:
d0:3b:7b:1c:90:43:33:98:20:4d:10:df:d1:8d:ea:
18:3b:f8:f7:da:9b:1c:a4:89:f1:1d:9e:41:65:13:
9d:f1:74:58:8b:68:18:d7:fb:4c:f9:95:11:45:55:
c8:69:41:ac:9b:c8:54:3f:44:b5:24:90:fb:be:e0:
f3:d2:18:34:08:ea:7d:01:cd:59:75:31:02:20:44:
6a:dd:9d:38:5d:96:69:dc:47:57:ce:33:0a:08:d4:
db:c0:71:b9:fc:0e:1e:21:ec:43:cd:e5:9c:03:50:
1b:e8:44:64:b4:9b:77:35:cd:29:54:1b:5e:4a:7e:
e3:0d:65:b2:55:fb:ce:ca:43:f5:da:6f:2b:7f:25:
b7:db:52:31:5e:78:15:01:96:8a:1f:57:aa:61:55:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:FE:9B:AB:9D:3A:2C:43:EF:E1:C5:0F:EE:0F:95:28:6D:54:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DA46CE6D1811F0A54237F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:52:14:7c:62:f9:bd:3e:6f:88:bd:73:1d:ee:f4:44:55:9c:
86:fb:04:28:68:c7:40:f9:44:84:1a:8a:05:7b:18:17:3c:a3:
02:b6:bb:4d:4f:90:d3:e9:0b:34:32:68:2f:7a:68:86:8b:aa:
f5:93:62:c5:b4:2e:08:0e:6b:f7:9d:61:46:ec:32:36:af:71:
27:cd:01:4c:f7:69:20:df:64:a8:70:37:46:5e:a7:80:e9:6a:
91:da:d7:29:42:80:ad:55:94:24:85:96:f6:b9:72:aa:ce:56:
97:32:73:f6:d9:4e:ec:e6:be:7f:89:47:68:52:d8:c5:6a:85:
c0:ed:c0:51:ff:12:e3:94:91:85:aa:58:bd:f1:bf:4e:33:27:
17:34:7f:02:69:21:cb:6f:e4:60:ba:36:79:2a:f2:ee:a7:19:
36:94:4e:e7:46:88:8d:ec:d8:5a:ac:80:25:8e:eb:9c:fe:36:
fc:b8:bb:5c:05:86:c9:b0:aa:71:73:0b:78:64:27:e9:fa:dd:
b4:71:6e:f7:13:51:6a:a3:b7:69:a0:e7:4f:d3:14:91:22:e1:
13:73:32:19:35:52:ea:e8:a9:91:d8:8a:a3:9d:88:df:22:ad:
62:79:0d:a4:be:15:5c:f6:44:c6:33:2f:01:37:19:88:d2:44:
53:36:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:59 2025 by rpki-client