Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76985A9A6F9A11F09EFEDEC8DAE4EC9C.roa
File: 76985A9A6F9A11F09EFEDEC8DAE4EC9C.roa (raw, json)
Hash identifier: C5gvT54X3y8ahEp/Ejf1fe5YSyUFhkLo/NzXABsjnrg=
Subject key identifier: 9C:95:0A:E0:27:9B:CE:4D:34:B5:19:93:B5:04:3D:6A:08:12:CC:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019032
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76985A9A6F9A11F09EFEDEC8DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:16:06 +0000
ROA not before: Sat 02 Aug 2025 12:16:01 +0000
ROA not after: Sun 07 Sep 2025 12:16:01 +0000
asID: 7029
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102450 (0x19032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 12:16:01 2025 GMT
Not After : Sep 7 12:16:01 2025 GMT
Subject: CN=688e0186-0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:b5:2e:fa:03:ee:69:64:61:c7:fc:d2:64:
7a:6f:62:b9:62:c8:19:0b:63:8b:78:37:a8:15:5b:
71:75:86:9a:c0:ba:5f:f1:48:20:7d:5f:24:49:3c:
d8:50:54:5e:03:09:c5:a8:6b:8d:bd:17:24:3d:fd:
be:7d:b6:29:08:51:15:ce:7a:d3:e1:29:50:65:f9:
4f:95:13:98:9a:1e:5e:36:a8:7d:82:83:b7:5a:08:
24:a6:c6:fb:c5:b5:7b:9b:35:c2:5e:56:dc:6c:39:
ee:33:11:fe:43:91:c5:f9:4b:94:37:9d:a8:6c:c1:
35:1f:6a:65:d6:42:51:27:32:c2:16:a0:57:04:dc:
1e:2b:58:8f:9e:db:a7:4f:72:ce:30:e9:d1:59:24:
01:d4:be:84:e4:af:6c:0b:be:2d:c3:74:33:c6:50:
fa:17:b7:8f:38:3d:18:d3:d4:b3:26:9d:d4:54:2b:
db:c3:8a:8e:8b:fe:25:e2:42:fc:a4:1d:9d:0e:95:
12:8c:39:b4:a9:1f:e9:ba:31:e5:a9:d7:ae:59:11:
40:05:bd:ab:7f:f9:36:c5:ee:b4:46:15:f1:e4:6b:
0b:43:2e:d4:e2:43:80:0b:ab:3b:28:6c:98:c1:58:
e2:de:db:45:2f:56:2b:17:89:fc:1d:5e:e9:3b:c6:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:95:0A:E0:27:9B:CE:4D:34:B5:19:93:B5:04:3D:6A:08:12:CC:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76985A9A6F9A11F09EFEDEC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0-154.194.27.255
Signature Algorithm: sha256WithRSAEncryption
07:64:b4:be:96:0a:d7:62:db:c4:d3:64:90:5a:b9:bc:22:69:
a3:95:84:6e:58:f5:0c:fd:4d:64:38:63:ab:26:5c:1b:97:e8:
9b:ae:56:ab:a8:52:c0:d4:89:fa:d6:21:5c:70:c3:56:c9:3b:
39:47:ae:c5:00:42:9d:82:1a:ee:cb:b7:a5:80:f4:b7:2a:34:
62:76:90:d8:58:cb:1f:e7:bd:0e:b2:c9:90:5d:d1:71:6d:1d:
54:d5:fe:76:ba:ea:bf:46:e7:c8:9c:ce:95:dd:73:8d:90:4d:
ea:90:40:db:59:aa:e5:f5:58:90:39:be:a2:2b:b0:d6:97:0c:
fd:6c:c2:cd:12:3a:d3:76:25:9b:f0:51:e2:d6:2d:76:e5:17:
4c:c6:9a:2e:b0:be:32:0e:e4:50:c3:32:27:26:03:79:74:05:
a3:21:be:a2:88:d6:5b:e4:f1:9c:3d:d8:96:3a:f2:ec:d4:e8:
a4:8e:56:b4:77:c2:fe:78:4a:fa:5f:d1:e1:b1:9b:b6:73:5f:
7c:f5:69:7f:89:ea:96:47:16:79:ce:f3:08:81:53:f2:0e:d0:
b3:c7:d3:46:e0:8b:8c:46:8c:37:97:ac:91:c2:a2:91:ca:a3:
8f:b3:35:87:83:5e:63:d4:e7:44:32:39:be:6d:8b:3d:21:c0:
3c:5e:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:09 2025 by rpki-client