Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40F1A04A67AC11F0B7728CA3DAE4EC9C.roa
File: 40F1A04A67AC11F0B7728CA3DAE4EC9C.roa (raw, json)
Hash identifier: M7U/mz36N6LAoDW6aD66M13f20emdeDPihBFb1KHGEk=
Subject key identifier: 58:EB:6E:1D:3B:5A:31:F0:6E:7D:AD:37:46:54:B4:17:8B:58:AA:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40F1A04A67AC11F0B7728CA3DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 10:03:17 +0000
ROA not before: Wed 23 Jul 2025 10:03:13 +0000
ROA not after: Fri 29 Aug 2025 10:03:13 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102141 (0x18efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 10:03:13 2025 GMT
Not After : Aug 29 10:03:13 2025 GMT
Subject: CN=6880b365-44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:25:69:b4:47:0a:58:e4:a2:e1:13:e4:15:
49:c9:d9:cf:50:04:da:a2:3d:fb:8d:7c:46:68:2b:
78:87:ab:20:33:d3:50:60:da:f5:c9:d4:b0:e9:67:
df:a9:98:85:7f:8d:75:1c:b4:e9:41:0d:8a:49:39:
28:99:cd:7f:a8:7d:ba:2e:5b:60:a9:cd:cc:e4:41:
71:94:cd:00:b0:e3:6b:39:ff:be:bb:99:f2:5a:d3:
3a:96:93:ee:09:fb:fc:d8:84:9a:50:61:d9:3c:5c:
fe:23:8b:66:84:b3:c1:7b:f3:6d:64:6e:98:ea:09:
97:18:b0:9f:07:1f:0c:b6:d4:f4:67:34:f9:60:36:
66:33:eb:aa:88:d3:3a:b4:ca:73:98:2c:2c:93:29:
b6:04:4f:10:b5:2c:d7:62:50:b2:66:de:5e:46:6b:
ea:20:d7:8f:3a:bf:e6:4c:8b:5b:ec:6c:fe:4c:b4:
f2:0f:f3:0f:87:d9:87:b1:70:4d:3d:06:bb:57:c7:
63:11:53:c5:6b:82:2f:a0:bd:37:5b:95:48:48:93:
21:5f:80:f1:5f:32:10:e6:81:68:d5:cc:8d:17:39:
fd:0c:dd:b3:8c:2c:40:08:c6:c6:4a:c0:b2:3f:89:
22:74:c5:39:06:35:07:4c:da:b5:78:70:82:c6:87:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:6E:1D:3B:5A:31:F0:6E:7D:AD:37:46:54:B4:17:8B:58:AA:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40F1A04A67AC11F0B7728CA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:bb:d5:15:fa:aa:9d:4a:e8:c6:8f:43:22:18:9f:20:2e:37:
ec:f6:34:b3:c0:5f:46:5f:f9:07:2a:ea:7f:75:80:0c:b3:1a:
c9:f2:43:3e:20:6a:34:10:97:b7:a8:d0:14:45:0a:c9:0d:16:
70:e0:57:ff:5d:a6:47:92:62:d9:ef:0f:0d:73:7b:30:d8:99:
c7:1f:d5:65:26:e3:11:b8:83:7e:e1:1f:0b:76:78:70:2d:d8:
5e:9e:aa:16:bc:45:1e:21:08:b2:17:70:e5:b9:aa:a1:a5:ba:
78:94:82:ed:62:74:93:90:f0:e4:96:f3:b0:3b:3d:0f:69:1b:
6f:f1:f6:a6:3d:9a:c0:fc:10:04:b4:23:e7:31:0b:3f:6b:c2:
05:44:fd:10:1f:8b:10:32:fe:17:21:20:5b:a6:a0:ad:2b:fe:
1b:32:b5:f2:b9:ba:36:90:ef:c0:7d:f1:62:a1:73:4b:28:62:
74:cd:85:7c:9a:33:d0:a0:be:01:72:85:36:15:da:a0:7a:57:
99:d3:a2:7b:5c:a1:57:ca:ee:3c:5d:9b:3c:ac:53:37:78:e6:
f6:15:fb:6a:2e:cb:86:6d:14:82:3a:42:32:c8:8c:66:36:b9:
53:ad:48:b4:38:0d:00:ce:aa:d6:4d:62:40:fd:8e:96:df:46:
98:a5:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:40:40 2025 by rpki-client