Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/614B40D0664911F0A5671A95DAE4EC9C.roa
File: 614B40D0664911F0A5671A95DAE4EC9C.roa (raw, json)
Hash identifier: mJ1aN0Wa/GVSE+tQtUWcYAHwOiGK/js86Keyq8HKk4o=
Subject key identifier: 75:DD:ED:5D:2B:3C:FE:35:65:FE:A4:19:45:4E:16:34:23:95:3A:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/614B40D0664911F0A5671A95DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 15:43:00 +0000
ROA not before: Mon 21 Jul 2025 15:42:56 +0000
ROA not after: Tue 26 Aug 2025 15:42:56 +0000
asID: 9009
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102025 (0x18e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 15:42:56 2025 GMT
Not After : Aug 26 15:42:56 2025 GMT
Subject: CN=687e6004-8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:7b:14:c0:95:1c:61:a0:18:33:c5:50:2f:
22:95:c4:e7:04:5a:51:41:0c:af:39:fb:ed:a4:84:
ab:4b:9b:1f:f0:61:6d:b3:b0:87:9f:cc:19:d3:99:
8b:b8:a6:95:82:25:61:87:d5:49:34:61:2e:d3:65:
af:90:10:30:4a:8a:aa:6d:92:5a:70:ac:6f:e8:5e:
c2:7b:ce:d8:b1:44:4d:4c:bb:62:b2:ef:49:c4:b9:
ad:75:66:12:1e:21:93:30:86:b8:8f:c3:dd:37:09:
9e:67:69:43:f9:c4:d3:1a:5b:85:7d:16:b1:59:03:
bc:64:ee:b5:f8:35:e4:eb:bf:25:be:ea:15:80:22:
65:76:20:fd:d0:b2:57:c9:ad:75:98:52:26:ea:be:
9a:80:4d:74:a1:e4:cc:ae:0d:e9:b9:e2:b7:f3:e6:
42:1e:2f:f6:ee:b6:9d:6f:8d:68:46:aa:61:0f:02:
b0:33:c0:f1:12:13:30:67:6f:70:4c:e2:cc:29:04:
0c:39:c6:4a:3e:4c:c5:c1:7b:eb:ed:9c:ea:1d:d4:
e1:3d:6d:12:d0:c0:23:6b:14:91:17:d5:5c:b2:b1:
94:94:94:6c:e9:8a:3e:aa:90:25:13:61:8e:1d:a2:
61:22:ff:c5:a5:5b:3e:29:79:b2:e9:d6:c0:80:52:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:ED:5D:2B:3C:FE:35:65:FE:A4:19:45:4E:16:34:23:95:3A:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/614B40D0664911F0A5671A95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:54:08:41:24:94:65:d4:11:15:6d:0e:87:47:c7:6a:14:bd:
da:24:d4:66:ab:bf:66:f5:2e:e9:86:40:0a:cd:59:bc:17:ee:
b9:7c:2c:91:d0:ab:63:98:4a:c4:d8:af:dd:60:2a:b5:05:03:
cc:eb:84:71:ef:24:7c:da:dc:a9:91:61:be:57:25:53:e4:ee:
e0:e4:0b:99:ed:10:f2:73:98:89:1b:29:77:ab:b1:2f:dc:d8:
d4:f3:db:2e:78:65:29:29:9a:05:2e:6e:9f:56:2a:6f:36:f4:
51:d2:b8:c1:c7:cb:90:d4:cb:a1:58:c0:6c:15:fb:25:bd:02:
9f:59:a0:8b:0f:2d:ec:c6:2e:00:58:b8:67:8e:81:0f:a5:40:
4a:92:e4:3f:33:1f:d3:ba:30:54:e2:e8:f9:1c:8f:a9:90:cf:
ed:ea:de:f5:a8:54:1a:a7:1d:67:bc:24:78:ca:3f:9a:10:32:
f6:42:d9:09:55:ba:c8:d4:4f:03:7c:f8:16:ef:82:e3:77:25:
47:86:0a:36:65:b0:0c:6d:3b:55:b0:c9:c1:54:f9:a8:9c:46:
ec:7c:13:d4:c1:2e:da:9c:7a:ef:ef:9a:47:06:c8:4d:c3:21:
39:21:a1:62:01:9f:74:b8:32:ed:f7:23:c8:f5:48:ec:5b:c1:
78:92:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:48 2025 by rpki-client