Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7794712066C311F0A1323ABBDAE4EC9C.roa
File: 7794712066C311F0A1323ABBDAE4EC9C.roa (raw, json)
Hash identifier: CcFW0RFhFAaZZMD1FpYPJa87ShqtCrwiOZijFsayD3A=
Subject key identifier: EC:A0:C2:05:41:4D:16:B1:92:1E:E5:70:53:2A:76:FE:03:44:07:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7794712066C311F0A1323ABBDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 06:16:56 +0000
ROA not before: Tue 22 Jul 2025 06:16:51 +0000
ROA not after: Tue 26 Aug 2025 06:16:51 +0000
asID: 9009
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102065 (0x18eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 06:16:51 2025 GMT
Not After : Aug 26 06:16:51 2025 GMT
Subject: CN=687f2cd8-e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:2a:be:0e:ff:72:d0:c1:7a:c1:86:b1:03:
5c:3c:a8:b7:d7:3e:f2:b7:78:ee:79:9c:1d:16:13:
07:c0:ee:48:1b:7c:6b:39:a1:8d:63:75:3f:2b:7f:
55:6a:5f:8d:45:ab:ac:b3:2a:04:1f:c0:e2:f4:00:
99:97:b8:3c:4c:ef:e7:c0:8f:31:9a:80:c0:bc:d1:
31:be:9b:65:2f:28:43:ab:85:c7:e7:38:7b:d3:c4:
61:fd:25:04:e5:71:60:0d:fe:b3:6b:18:c9:da:bb:
7e:2d:a5:90:75:df:85:cc:73:f7:28:c7:e5:60:7b:
d9:b6:15:b1:06:3a:4b:1f:a6:f4:01:4f:8a:0f:f9:
54:a1:0d:de:a3:24:bc:f9:d6:4b:e2:ac:24:41:68:
33:54:2f:87:6e:46:05:d5:d6:85:9a:5a:c8:2f:a3:
0a:cc:3c:56:e6:c6:c1:54:ee:a2:fa:8e:45:ab:80:
42:bc:29:62:df:b0:bc:0c:21:9f:2c:d9:54:50:43:
aa:25:6e:53:02:90:ae:e4:5c:b7:38:ff:2a:e6:1e:
9b:2f:34:3b:ba:2d:9f:83:b5:f2:e2:a4:86:be:5f:
0a:ac:74:e5:86:1e:4e:e1:04:1b:ce:1c:53:39:bc:
d5:e0:77:75:9d:36:2a:d7:39:f6:af:2a:78:e7:8b:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:C2:05:41:4D:16:B1:92:1E:E5:70:53:2A:76:FE:03:44:07:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7794712066C311F0A1323ABBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
61:74:1b:b3:6b:46:f3:69:8e:59:49:4f:cd:a4:64:2b:5a:62:
8b:86:b9:da:12:e5:46:a6:77:5e:63:f0:3f:c1:66:bf:2f:df:
1c:ff:87:65:d4:1b:d2:09:07:ef:2b:d0:eb:ff:7c:06:2c:57:
69:43:1c:45:ac:30:91:de:52:42:2b:32:bf:17:92:d7:37:9b:
b6:77:75:b5:97:35:08:34:88:8c:df:14:63:a3:7c:05:02:e3:
e3:0a:ba:6d:f9:27:22:53:44:c6:92:04:02:e5:c4:8f:8d:0a:
ec:38:00:c6:ad:f5:d9:d6:c6:1e:25:b2:d9:23:5a:df:f3:cf:
ca:2b:07:1a:1e:b3:3f:72:f3:83:07:77:1c:a7:cd:d5:59:61:
c1:c1:40:c8:0c:d4:24:2f:34:a2:7f:05:4c:48:78:bf:56:c7:
9c:56:9d:5c:ff:d3:1e:d9:c2:84:3a:0a:95:ff:3f:fd:67:74:
39:e9:b8:05:a3:44:c8:b8:b3:5d:a0:7f:df:57:64:bf:80:a7:
22:49:a0:99:be:df:e4:f2:d7:d3:f9:d8:f3:27:f5:e0:fc:68:
6a:9d:0d:01:fa:d4:fc:c2:7d:ec:1b:df:97:bb:d8:5f:37:22:
5e:0a:8f:f2:07:f1:85:bb:b0:58:62:d6:15:38:e7:9b:e8:a8:
e2:ab:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:17 2025 by rpki-client