Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAD5D08687611F0BDC56FCADAE4EC9C.roa
File: 6CAD5D08687611F0BDC56FCADAE4EC9C.roa (raw, json)
Hash identifier: OqBs0P0xt/uDhlsJtWKjdrNsuXVCZK7uCyCKB5nG2QY=
Subject key identifier: C8:D7:83:26:19:03:40:B7:C3:AD:FE:35:0F:88:6E:6C:5F:1F:9B:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAD5D08687611F0BDC56FCADAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:10:29 +0000
ROA not before: Thu 24 Jul 2025 10:10:24 +0000
ROA not after: Sun 26 Jul 2026 10:10:24 +0000
asID: 4760
IP address blocks: 154.88.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102235 (0x18f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 10:10:24 2025 GMT
Not After : Jul 26 10:10:24 2026 GMT
Subject: CN=68820695-f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:53:f3:0a:70:c1:d5:89:bc:ef:80:d0:68:
f5:37:c0:d6:51:78:ce:1c:ba:43:23:d1:0d:44:c1:
9c:fd:cf:1d:aa:84:ac:a3:67:b2:52:aa:f9:dc:36:
c8:ba:e3:03:8c:ba:15:04:fb:58:2f:e2:1c:27:0c:
3c:2f:15:6a:56:3c:9f:50:6e:7e:43:45:2a:73:43:
9f:de:d4:b0:67:2a:43:a7:0b:7a:11:12:6f:14:36:
2a:34:c2:1f:e0:f7:3c:65:fe:23:4a:76:5d:f7:28:
f1:2c:a2:83:e8:27:5c:c5:35:6b:ba:12:59:0d:a4:
b8:58:e4:2d:8d:90:ee:15:e8:c3:bf:c3:19:ab:ab:
0a:b5:0e:ed:58:7e:8d:49:99:95:52:50:2d:36:69:
40:0a:a7:f3:34:e9:c7:4e:8c:64:42:87:44:9a:dd:
f5:45:42:cd:d1:f7:71:81:35:92:25:62:06:e2:ce:
17:49:d3:b4:29:47:ea:fe:b3:f5:a9:29:32:69:94:
b5:58:5b:cc:3c:fb:2d:d4:86:f7:a9:9b:5e:ef:87:
63:fb:0d:49:0a:eb:64:de:6c:78:7a:80:fc:4e:12:
97:3d:68:14:fa:a0:21:de:42:a5:98:eb:1b:92:fb:
2c:24:c0:9e:e6:17:9e:8f:9a:59:d4:88:70:d4:7f:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:83:26:19:03:40:B7:C3:AD:FE:35:0F:88:6E:6C:5F:1F:9B:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAD5D08687611F0BDC56FCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:01:4d:34:91:48:07:39:de:a3:ab:60:58:3e:d3:d7:da:01:
37:7f:2d:b6:46:f7:8d:e4:3a:cd:a0:05:42:b2:ae:17:a3:e8:
bf:0c:e8:af:38:86:5c:49:92:11:ce:90:d2:68:ce:eb:c1:f0:
19:ca:54:a0:49:9e:84:0e:cc:aa:3b:05:6d:66:35:9e:cb:33:
7c:ac:9c:f9:26:15:cc:ff:2a:45:ad:f7:6f:6d:3c:20:cb:36:
c6:2d:b1:38:12:97:40:40:6c:3d:cf:9b:63:0a:21:3b:3d:00:
29:d5:15:ff:15:5d:63:99:83:d4:d2:9e:6b:33:cb:02:1b:ce:
b5:44:5a:61:a1:0b:03:f4:d6:0c:60:a8:eb:29:9e:d3:5d:5d:
a5:18:1f:30:5b:b5:07:a2:54:ea:8c:1c:21:ec:86:cc:ab:6f:
48:3c:2a:06:94:9d:14:92:aa:ec:14:50:de:f5:23:6c:28:02:
e0:71:80:7b:82:31:83:1d:78:5a:61:ff:11:64:41:cd:23:c8:
8e:39:49:32:70:b6:9c:83:ae:b8:eb:8e:ee:57:f9:9c:61:58:
55:20:69:ae:20:70:33:0b:eb:f4:5e:de:e5:57:95:5c:73:82:
36:eb:fb:a2:f6:21:fb:3a:db:5a:ca:04:5f:38:61:90:cf:b5:
2a:b6:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:07 2025 by rpki-client