Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7DE7026FCB11F087B07C82DAE4EC9C.roa
File: 7F7DE7026FCB11F087B07C82DAE4EC9C.roa (raw, json)
Hash identifier: MTm9eZS4htwlKCwrQSzwfmlZ0jyeX2Hi6Pw5kv/xz50=
Subject key identifier: 14:FC:76:97:6E:D5:03:00:E1:A0:C7:7E:B8:9A:31:EB:9A:A9:FB:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01905C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7DE7026FCB11F087B07C82DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 18:07:06 +0000
ROA not before: Sat 02 Aug 2025 18:07:01 +0000
ROA not after: Wed 10 Sep 2025 18:07:01 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102492 (0x1905c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 18:07:01 2025 GMT
Not After : Sep 10 18:07:01 2025 GMT
Subject: CN=688e53ca-2286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:70:aa:c2:ba:0e:20:8f:da:03:b9:fa:cf:
79:95:30:cd:95:a1:d7:cf:98:48:d5:8b:c1:aa:97:
b2:50:5c:9a:91:72:65:1a:7a:85:f7:be:c8:df:e5:
ba:fa:14:72:02:ca:7e:f1:53:c2:59:57:d1:99:f5:
6f:1e:59:41:63:49:e2:40:ca:1a:2c:75:98:a9:50:
13:fc:68:08:a1:3c:01:49:4d:be:dd:6b:c5:fe:f9:
66:72:c5:75:2a:a0:b7:18:48:78:3c:fd:c8:cf:5e:
1e:51:97:37:3d:ca:d4:76:ec:b3:46:01:55:61:06:
7d:60:4b:d7:2c:84:ca:de:a0:76:e8:d3:14:3a:88:
1a:9a:10:75:24:94:6a:96:fa:9d:ce:66:2d:75:43:
75:70:06:0b:ca:6a:92:a7:0e:c4:95:64:9b:53:4b:
be:bc:7c:50:9c:ed:b9:ed:a1:18:a6:7f:0d:6a:88:
4d:a1:40:53:b3:36:83:51:ad:8c:c5:9e:85:06:75:
49:3b:de:87:12:18:7f:43:ff:45:91:83:0c:7d:14:
a2:a4:1d:f7:03:75:7b:d7:f6:b8:2d:1f:94:65:02:
8b:98:c8:30:89:82:2a:c9:d5:1e:85:b4:69:ed:6a:
5d:b0:6d:82:88:51:19:0d:a9:e8:dd:bc:39:d6:b1:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:76:97:6E:D5:03:00:E1:A0:C7:7E:B8:9A:31:EB:9A:A9:FB:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7DE7026FCB11F087B07C82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
15:2d:15:81:8a:f9:48:26:f1:48:35:c1:33:99:59:ba:ac:51:
ec:38:ff:98:a9:57:fb:41:e0:46:d9:02:64:1c:c7:dc:40:d8:
3f:27:d4:53:fb:8e:61:6d:86:35:e4:1a:e3:4c:43:c1:6f:69:
b3:27:83:29:12:a5:e6:93:70:e7:78:84:4d:e0:22:e4:e4:37:
2e:9d:f6:25:d3:73:d0:94:cf:1d:97:02:ea:9d:df:e3:22:8f:
11:38:dc:20:8a:c9:99:71:d3:46:f9:6b:60:40:ce:87:75:25:
22:a0:5c:e3:c2:65:83:57:14:1d:d7:bc:9a:99:bc:7d:fe:8a:
4f:8f:02:b6:ca:6c:c6:bd:c7:43:4c:fd:a9:9a:e1:8a:f5:0b:
50:06:e4:0f:fd:8d:65:a0:a0:f7:f1:58:82:52:51:20:b4:5a:
8a:ed:6e:ce:f8:87:02:8c:d6:4f:a4:62:41:a8:da:b2:69:a5:
d3:cb:03:29:0a:6a:80:73:9e:4c:46:fa:3d:ce:75:04:18:a4:
6f:17:56:84:6e:ab:c3:c3:9d:a7:7f:7b:22:8d:62:f9:f7:45:
ce:7b:73:81:5f:fd:07:9d:08:23:dc:de:70:1c:2e:8f:11:a4:
dd:98:8d:41:41:aa:81:74:fd:ae:4f:30:89:15:ca:21:e3:1f:
c9:97:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:11 2025 by rpki-client