Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/493C597E6F9B11F0811154CDDAE4EC9C.roa
File: 493C597E6F9B11F0811154CDDAE4EC9C.roa (raw, json)
Hash identifier: wEn7FrEwsE8pByfSJiubIxtU4BC1qNViiej6LuAx5ak=
Subject key identifier: 43:6A:96:20:EB:77:1C:B9:D3:5D:A1:F8:23:71:3E:32:0A:7F:C1:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019034
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/493C597E6F9B11F0811154CDDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:21:59 +0000
ROA not before: Sat 02 Aug 2025 12:21:52 +0000
ROA not after: Thu 14 Aug 2025 12:21:52 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102452 (0x19034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 12:21:52 2025 GMT
Not After : Aug 14 12:21:52 2025 GMT
Subject: CN=688e02e7-7923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:ef:78:66:a9:61:dd:7a:8f:b1:f2:5f:aa:
1b:bf:5f:4f:2f:40:fd:31:89:4c:1b:86:d9:a7:fc:
ff:9d:c4:3d:1b:29:93:ad:e1:e2:a0:73:ab:09:97:
e0:a6:7d:83:b3:d6:52:2a:b9:f5:94:b7:33:79:15:
3d:a7:fb:3d:9a:6f:20:04:dc:2d:e6:dc:62:29:f2:
d2:e7:32:ac:c3:5f:bb:91:87:2a:d1:41:20:7c:12:
7f:61:e1:56:6f:c1:6c:4e:46:94:cf:d5:3d:71:7b:
05:64:31:9a:71:0e:14:11:5a:f4:68:b6:13:b3:10:
f4:dc:bb:b8:9a:8f:89:95:71:3a:45:4b:e0:02:cf:
84:38:9f:3e:ad:de:40:c3:53:00:6b:92:d3:2b:52:
9e:20:44:46:05:31:d8:21:99:9d:69:9b:40:9f:4d:
c7:0f:e2:6f:b0:b8:dc:71:70:09:c0:7e:19:76:ee:
ca:59:89:bc:10:c2:da:59:e7:25:0d:bd:3d:9e:d2:
61:a2:3a:66:65:d3:58:bb:40:58:21:f0:c4:ab:5c:
2a:4d:ac:a2:f0:3f:21:f0:eb:45:72:c1:31:fc:b8:
8d:d6:a1:24:98:67:28:fe:bf:b8:42:5f:42:52:97:
a2:07:5e:fa:71:0f:66:4a:f9:cf:29:a7:c9:e8:fd:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:96:20:EB:77:1C:B9:D3:5D:A1:F8:23:71:3E:32:0A:7F:C1:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/493C597E6F9B11F0811154CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
71:ac:f3:32:db:ff:3e:4f:e8:5e:d4:a7:86:59:85:b2:0b:8b:
53:60:c9:07:74:48:7e:3f:ee:91:5c:35:29:59:5a:78:ac:d9:
6a:55:3b:01:60:7f:7f:a4:88:c2:e0:08:f2:a1:4f:eb:53:37:
f0:35:04:f4:9b:c3:59:80:38:7a:43:a8:ab:93:f8:4a:1f:7c:
c3:2d:6b:00:16:62:16:d3:05:dd:38:4c:6b:e0:ef:7d:a9:1c:
1e:28:44:35:ef:ad:fa:04:85:89:50:64:f9:b5:b1:9e:d6:4a:
41:1b:08:56:5e:8a:3f:0b:c1:05:a2:76:ac:a4:77:17:62:4a:
f0:d3:ad:e5:fe:bf:20:b3:62:8f:87:26:89:90:d1:c5:28:77:
9a:18:8f:a7:45:87:b5:3f:00:dc:f0:0a:42:f6:64:04:c6:b9:
ec:af:79:5f:47:dc:fb:ab:de:54:ce:6b:00:f6:9f:1e:9c:6f:
84:d1:96:7b:43:5d:3d:3d:09:b9:53:3e:9a:55:ce:ba:68:84:
cc:95:4c:d9:fc:0d:62:2d:12:22:61:b3:29:e7:4e:7b:32:0d:
09:3b:01:e3:f4:a0:5c:bc:40:94:72:60:e9:9b:fb:d8:c6:a6:
12:46:88:c0:09:c9:39:42:95:74:ac:7d:43:7a:f4:4f:d5:0c:
54:2c:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:41 2025 by rpki-client