Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7431999E6F9311F08016289CDAE4EC9C.roa
File: 7431999E6F9311F08016289CDAE4EC9C.roa (raw, json)
Hash identifier: gqkOrZ+ic4Rvt55zg3Bb/APgysUQ1UYmtI9OPKuKvWo=
Subject key identifier: F5:18:EB:6A:2E:D2:AC:1F:D8:BB:62:AD:99:2A:37:AA:4B:31:E4:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01902C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7431999E6F9311F08016289CDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:25:55 +0000
ROA not before: Sat 02 Aug 2025 11:25:50 +0000
ROA not after: Sat 06 Sep 2025 11:25:50 +0000
asID: 20326
IP address blocks: 154.193.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102444 (0x1902c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:25:50 2025 GMT
Not After : Sep 6 11:25:50 2025 GMT
Subject: CN=688df5c3-178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:28:6a:58:8c:3b:1e:46:e1:a8:d1:95:03:
6d:ea:21:78:52:ac:e5:f9:1f:44:c2:44:33:27:88:
4a:66:04:7b:73:77:ef:dd:87:cf:56:18:79:7f:4b:
cf:ec:a4:bf:3b:a8:1f:8f:0f:6f:5e:99:e7:ba:ed:
37:81:95:a5:c9:f2:fb:5d:8d:f3:33:22:29:ba:4f:
4e:b7:bf:04:a4:a0:51:d2:dc:51:1c:bb:97:c7:0d:
f2:fe:4c:37:3d:27:70:1e:ee:62:48:7a:54:bc:4a:
33:9d:e8:90:35:1d:f0:b9:db:f6:7d:69:fc:a2:09:
05:9b:f4:48:86:d3:71:1b:54:52:12:98:b8:bd:24:
bf:52:88:70:92:6c:ad:cf:36:8d:7c:87:46:5d:e9:
fd:3c:e7:8f:02:68:0e:5e:8a:8f:e7:4d:3d:81:c7:
72:3d:cf:d7:ea:44:54:6e:c3:91:10:40:43:03:d4:
63:01:d6:40:8e:5e:da:a4:21:24:34:4b:a1:af:dd:
bd:25:0b:ac:40:2f:32:90:38:6b:b4:5c:70:e7:9b:
fb:1b:a7:65:f0:b7:13:9e:7b:e2:da:0a:f0:af:44:
09:af:8b:e2:74:f3:3f:47:1b:f3:db:e8:cb:b4:28:
a4:dc:0d:d8:94:01:ca:a0:45:61:77:eb:7b:e9:ab:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:EB:6A:2E:D2:AC:1F:D8:BB:62:AD:99:2A:37:AA:4B:31:E4:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7431999E6F9311F08016289CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:97:69:14:78:fe:49:02:30:75:3e:7d:c0:9b:80:fe:81:7c:
a7:58:5b:ad:e9:d3:23:bf:b6:7e:34:f0:ad:a6:ee:4c:9f:82:
05:b1:96:c2:96:9a:54:35:0c:f4:48:2e:4b:0c:3a:8c:9d:38:
64:6f:c9:f7:d3:40:24:05:c7:15:24:fa:0f:cd:22:60:ef:dc:
23:a1:33:be:30:1b:fb:cc:b9:f2:24:b5:4c:ea:c4:e9:89:9d:
dc:ef:21:bf:c1:31:9b:1a:df:ab:c2:c7:42:24:0c:5d:d7:83:
d3:f6:f7:17:b1:9a:11:e6:23:69:2a:c2:bb:37:c3:f5:13:f1:
ed:35:1e:9f:0a:46:f4:49:ad:95:67:cb:25:e0:55:b4:65:c6:
b5:0b:ef:0b:cc:22:d6:05:a5:f5:68:a6:fc:cb:e7:00:69:48:
a2:bb:d1:98:17:fb:14:e9:0d:f0:7d:93:1c:2e:0d:94:9b:ed:
35:5c:f7:96:0d:32:d5:bd:ef:e7:e6:58:db:cc:eb:30:5d:4e:
69:f0:35:b6:63:74:3a:b5:b4:6d:18:94:74:f3:27:08:68:c3:
e9:ac:81:4c:ec:23:cc:73:0f:50:57:0e:0d:7a:e0:98:ef:4f:
54:43:d9:d3:35:b5:61:c0:b7:2a:36:0d:47:38:bd:99:cb:89:
3e:34:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:57 2025 by rpki-client