Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC82A32664F11F088FA31BCDAE4EC9C.roa
File: 7EC82A32664F11F088FA31BCDAE4EC9C.roa (raw, json)
Hash identifier: /vn71jUmdJtqTt76o1Zrvmte2AHFWzPOxaIWLKHKAMM=
Subject key identifier: 02:72:3B:1E:0C:4E:E0:35:4D:3C:C3:44:C0:BB:46:E4:ED:16:DA:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC82A32664F11F088FA31BCDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 16:26:47 +0000
ROA not before: Mon 21 Jul 2025 16:26:42 +0000
ROA not after: Wed 27 Aug 2025 16:26:42 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 10:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102027 (0x18e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 16:26:42 2025 GMT
Not After : Aug 27 16:26:42 2025 GMT
Subject: CN=687e6a47-c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:b8:0f:46:4c:5f:54:da:4a:b7:0f:45:66:
1f:c8:cd:9b:48:8f:6c:2d:83:0f:ea:7a:f3:5e:fa:
db:b3:9d:93:28:1f:7e:67:02:65:cc:1b:ce:d3:be:
dd:5d:cc:36:56:3e:c3:0a:fc:2d:ab:80:a7:59:b6:
86:ed:18:31:57:98:a4:a1:71:7b:14:f8:75:87:c9:
3b:ea:99:68:2b:f6:c2:39:56:f9:88:ba:95:25:54:
c7:c9:af:08:56:88:25:bb:d9:91:f1:fd:76:c5:2b:
e0:52:15:d0:70:37:2b:d4:90:2a:d3:c6:dd:e2:04:
78:83:f1:aa:15:d8:86:e3:1e:19:95:6f:36:cb:b0:
19:cb:7c:1c:82:8d:82:d4:5b:e4:18:28:b8:e6:61:
22:a5:73:52:bf:98:e6:ff:2a:91:c7:31:7e:f4:23:
c3:e2:76:83:47:25:74:4d:e7:0e:7f:d8:0e:4c:14:
ab:8b:2a:c7:79:c5:49:82:ee:da:87:8c:c5:8c:32:
88:8f:8b:23:a4:52:8f:44:86:72:8c:eb:9f:78:6a:
89:7f:75:38:de:be:7a:1f:88:4a:39:88:b2:6d:8e:
f8:f9:2e:3c:14:18:ea:7e:34:80:e1:5a:54:fa:b5:
c6:13:36:fd:2c:9f:9b:4d:e1:02:f3:ae:fc:e4:28:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:3B:1E:0C:4E:E0:35:4D:3C:C3:44:C0:BB:46:E4:ED:16:DA:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC82A32664F11F088FA31BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:9b:9a:18:5e:72:b2:92:39:4f:47:95:24:27:07:a3:89:05:
84:a8:ee:ff:63:c0:7c:eb:64:b6:df:b1:5e:ba:56:a8:2a:fb:
b9:d7:7b:da:ac:c8:88:7b:16:11:96:4c:bb:92:ba:29:74:8c:
d3:7b:34:62:67:fc:06:86:25:f1:c7:f7:01:dd:46:cb:11:c5:
55:b9:c4:fa:8f:62:ce:04:82:89:76:ef:36:a1:54:02:e3:6a:
08:fb:01:dd:31:d6:56:23:81:41:cf:b0:2d:33:17:fd:10:c5:
d4:ff:fd:11:ed:08:44:0d:c3:00:18:d6:52:2f:fd:d2:f8:f7:
92:f3:a9:6c:cd:e5:7c:f9:8c:5f:5c:7d:8e:4f:9e:b1:be:a6:
f7:b8:ca:12:3b:82:c0:67:26:0b:df:ba:6c:e5:8f:59:19:de:
ae:88:b0:07:a5:14:23:82:11:1d:5b:cd:e1:3a:ae:17:13:32:
35:90:8a:c9:99:80:d2:94:87:86:24:4f:2d:ba:ad:dd:b7:e4:
b5:d3:e5:6a:fd:3d:70:ea:84:06:bc:bf:dd:c6:af:70:8c:31:
32:23:bb:70:92:cd:94:49:5d:02:a1:64:b4:18:3b:6b:3a:c7:
b4:85:56:62:f0:dd:2f:1e:c7:b5:f9:c6:ec:71:4c:90:03:7f:
67:47:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:00 2025 by rpki-client