Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450F12526D1F11F0A67F78A6DAE4EC9C.roa
File: 450F12526D1F11F0A67F78A6DAE4EC9C.roa (raw, json)
Hash identifier: xJjQccMAP7pOmLAhLhaPld/hsLUQF1wrlwylg4QaYsU=
Subject key identifier: A1:2D:8F:5C:5B:73:9F:CF:CE:1D:9F:61:4D:9F:4A:49:DC:28:D9:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450F12526D1F11F0A67F78A6DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:29:12 +0000
ROA not before: Wed 30 Jul 2025 08:29:07 +0000
ROA not after: Sat 01 Nov 2025 08:29:07 +0000
asID: 400175
IP address blocks: 154.203.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102397 (0x18ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 08:29:07 2025 GMT
Not After : Nov 1 08:29:07 2025 GMT
Subject: CN=6889d7d8-958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:93:7d:d3:60:a6:57:58:94:de:69:05:5d:
04:e1:c0:a7:d1:06:4e:fe:01:9d:5d:54:ec:87:a2:
51:43:44:d0:0d:48:fe:9a:4e:0d:ba:f6:74:4e:af:
73:48:2b:fe:50:d0:69:cb:51:08:95:40:3f:e6:b7:
c1:6a:af:0e:1c:2b:79:c8:02:da:1e:e6:bf:d3:71:
a6:a3:57:a8:13:d5:8d:37:b0:b9:d2:ec:fd:a8:55:
10:3a:71:c7:29:d9:74:6c:3d:30:3a:5c:1c:f6:f6:
6e:c2:10:b8:64:88:90:b5:89:7e:1b:c1:1d:6d:35:
be:9b:45:68:e7:23:fc:f3:a3:c9:b2:07:0b:a8:d3:
24:af:65:59:58:f2:16:c1:16:1e:d8:af:37:6d:b9:
ca:df:8c:f5:53:35:30:93:dc:5c:6d:d3:0e:cc:d3:
18:80:d9:46:13:d4:0f:60:d0:97:68:f1:0b:43:77:
71:bd:41:0f:22:82:e4:d9:e2:28:cb:cf:83:ce:5c:
22:c6:12:8c:b3:9c:63:22:f1:4d:e0:52:f2:47:ea:
66:64:de:f6:d1:15:4d:6e:fa:0d:68:f0:ef:60:9b:
06:22:56:b1:0a:0f:8a:e1:3c:c3:2a:c1:0e:98:33:
5d:5b:91:7b:a6:d4:ca:c7:b5:bc:f8:87:55:e4:e3:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:8F:5C:5B:73:9F:CF:CE:1D:9F:61:4D:9F:4A:49:DC:28:D9:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450F12526D1F11F0A67F78A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ea:73:2e:a9:85:f8:e7:f9:90:92:54:a5:b5:0c:03:05:72:
1a:ca:19:9a:d7:de:de:a6:0a:12:d2:7d:95:6d:c4:b7:6e:78:
a0:6c:48:94:6d:b7:5f:cd:61:62:b1:80:5e:09:a2:02:5a:77:
ce:19:a7:51:9d:e2:0e:8b:d0:3c:f0:4b:32:50:cd:1e:74:4f:
0d:5d:64:2e:a4:0b:c7:8e:61:9e:d7:84:55:52:7e:47:03:98:
d8:e7:54:33:4e:e7:e3:af:08:6e:01:14:08:4b:70:52:89:cc:
03:9a:a7:2b:8d:ac:60:f5:a6:a2:29:57:79:71:a4:b4:4c:8f:
47:79:54:a0:03:51:96:71:ba:6a:46:d5:5b:8f:3f:36:a5:76:
e0:ec:2c:c7:6b:88:bc:5b:0b:e2:35:a4:ed:a1:61:1c:69:48:
a3:9f:7a:99:27:86:6d:72:46:ef:d1:13:ac:c1:3b:cb:7f:18:
3d:13:8b:44:f2:b9:35:a4:c2:77:40:72:c8:1e:29:e2:23:5b:
ab:c6:54:ff:6e:1c:9e:66:f4:39:1d:2a:42:a7:30:ce:36:53:
0b:34:ef:eb:89:eb:0e:91:01:30:9d:0b:ac:8e:98:61:1f:3c:
49:ca:11:04:75:51:f5:06:db:71:1c:56:3d:39:bc:13:9d:8b:
d4:37:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:04 2025 by rpki-client