Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4FCE886FAC11F08D3852B8DAE4EC9C.roa
File: 2D4FCE886FAC11F08D3852B8DAE4EC9C.roa (raw, json)
Hash identifier: zFpqSuKgO2k110IMuyJPuAQB7nyESOm0M+Fq4kb1cgo=
Subject key identifier: DD:AA:BF:F6:AF:86:06:89:9E:9A:4C:40:3F:A5:70:7E:E7:6F:5C:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019044
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4FCE886FAC11F08D3852B8DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 14:22:54 +0000
ROA not before: Sat 02 Aug 2025 14:22:46 +0000
ROA not after: Wed 03 Sep 2025 14:22:46 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102468 (0x19044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 14:22:46 2025 GMT
Not After : Sep 3 14:22:46 2025 GMT
Subject: CN=688e1f3e-3a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:2d:f4:ee:a7:83:a7:2c:86:b4:63:b0:6c:
83:34:56:29:85:d3:26:fe:23:2c:00:b7:8f:75:0d:
54:4b:07:a4:0b:6f:16:f8:9c:64:8d:8b:af:59:f0:
af:c2:e4:e8:29:dc:31:57:45:08:27:b1:4c:cd:48:
a0:b4:b8:11:49:fd:58:31:e8:24:0a:e7:b8:71:66:
24:22:5b:96:c3:4c:a2:02:5b:23:17:36:58:51:d7:
d7:83:48:52:8d:b3:bc:a7:be:ca:2e:e1:1d:01:fb:
8e:ef:0b:bc:cd:b6:df:73:9f:59:b1:70:f4:4a:00:
7c:78:d8:9f:ff:b1:66:b5:98:4c:a4:f6:b7:c4:ed:
4e:90:82:44:ae:9f:ba:42:a3:10:1f:b6:7b:12:1d:
4f:47:d9:44:cb:47:41:fc:85:85:33:7b:32:31:3a:
bd:8f:53:ed:4c:15:8f:ec:ac:28:2b:63:52:ec:1e:
9e:0d:10:e7:3e:0d:13:68:36:78:c0:5f:67:f2:08:
c1:e1:e2:11:11:b4:19:9b:c2:06:1e:c3:c0:78:81:
ee:b5:3e:04:b5:6a:95:4f:74:ff:43:2b:30:b0:13:
1e:38:c3:8c:c5:90:d4:79:76:64:8a:09:40:1b:7f:
0b:a8:c1:b7:e4:fa:14:ed:ac:fe:4e:61:1a:12:f8:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:BF:F6:AF:86:06:89:9E:9A:4C:40:3F:A5:70:7E:E7:6F:5C:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4FCE886FAC11F08D3852B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:93:69:96:fd:d3:6a:e2:f3:6a:8f:40:55:71:38:ab:47:34:
a7:de:11:5f:1b:81:70:3d:95:f3:09:16:db:6b:0a:3c:52:d4:
84:8a:d8:47:ac:aa:3e:93:86:52:88:2f:9a:ba:72:bd:a9:31:
7c:5a:4c:9c:88:2c:a3:97:42:e4:4e:38:7d:12:8f:09:d5:ef:
78:df:b3:ce:3f:01:2c:af:a2:85:38:16:40:23:a7:ad:37:fb:
49:d5:8b:52:90:40:2e:66:81:24:bf:59:83:e6:51:36:0c:85:
a6:5e:c9:eb:23:63:14:d1:e5:be:83:21:65:81:2d:2f:c6:29:
d0:76:ae:7a:4b:0f:7d:c6:4e:b7:cc:9d:b5:cf:49:ce:60:5e:
e6:d0:51:e8:d2:01:9b:71:54:c3:99:51:01:40:e8:42:07:d6:
66:4c:97:32:f0:b1:d9:0a:99:c6:26:4a:45:7e:55:9f:c2:b0:
05:38:2d:9b:66:9e:bb:b3:96:c5:ad:ba:34:04:f5:23:22:28:
3e:90:c3:e7:0a:b6:81:5b:05:77:04:e0:0f:83:b9:00:cb:9b:
04:0b:fa:bc:3d:26:57:05:ae:6f:fb:2d:08:6f:e6:04:fa:a7:
7f:d9:5b:eb:f4:ec:d0:79:d4:f3:8a:29:73:0e:cd:d8:6f:be:
87:26:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:23 2025 by rpki-client