Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EF8150688411F09BC409A5DAE4EC9C.roa
File: 82EF8150688411F09BC409A5DAE4EC9C.roa (raw, json)
Hash identifier: VudQGQiymBaQ1jI66DaNFyc6AbRYEGTlXrqA1ZDsQ14=
Subject key identifier: A8:8A:AD:87:5B:CD:05:60:F4:C7:49:91:4F:9C:C9:D4:57:70:F6:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EF8150688411F09BC409A5DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:51:19 +0000
ROA not before: Thu 24 Jul 2025 11:51:15 +0000
ROA not after: Thu 28 Aug 2025 11:51:15 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102251 (0x18f6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 11:51:15 2025 GMT
Not After : Aug 28 11:51:15 2025 GMT
Subject: CN=68821e37-b829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:dc:18:36:10:95:fe:bb:db:88:46:b6:bd:
7e:81:cf:2d:c3:9f:48:07:32:d8:47:28:90:b6:c9:
7d:e6:f0:7f:a9:27:da:9e:dd:e2:4a:42:64:0d:73:
bb:33:bd:3d:50:5b:f7:e6:24:3e:83:3b:ca:5a:98:
63:fb:11:1f:ce:a0:bc:3a:b0:f7:23:92:6d:24:9f:
50:e8:26:e3:37:0b:9b:c4:66:c6:3e:0c:ef:01:d1:
ce:e8:de:b9:31:b6:5b:9e:0b:54:37:96:80:2e:f3:
a8:f7:59:91:4f:0b:68:0b:aa:a7:88:ea:d8:c6:5c:
f3:58:ce:b8:32:3c:f3:c6:66:d1:95:67:60:0d:93:
a0:9b:5d:36:e8:48:b0:ce:db:ab:51:f4:03:5e:b1:
41:63:ea:77:ef:5a:fb:6c:a2:96:36:41:de:de:a3:
15:3c:87:59:66:43:75:c3:5d:f4:74:ca:b3:48:75:
92:76:6c:c0:87:86:97:6b:69:6f:c8:3f:fc:06:db:
cf:40:c0:54:0f:ca:31:c7:6b:28:51:16:c9:b5:82:
6c:91:18:29:8b:d0:8d:ae:fd:62:30:6e:98:65:d1:
f0:a5:91:df:67:ee:c7:44:ed:bf:fe:82:4f:57:cd:
be:a9:0b:41:4e:61:65:6d:35:bf:c5:72:e2:38:98:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:AD:87:5B:CD:05:60:F4:C7:49:91:4F:9C:C9:D4:57:70:F6:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EF8150688411F09BC409A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
48:86:e8:1e:eb:e8:ed:99:3b:53:7e:c2:b1:d6:09:9d:c0:2b:
b6:ad:32:50:45:36:69:a8:2a:b3:58:6c:5b:3f:66:ab:cd:a8:
11:4e:37:06:36:f7:eb:3f:9b:da:dc:14:53:e5:e5:cf:80:ea:
cc:2f:ee:6c:f6:1e:40:a4:ea:9b:ff:47:56:97:51:89:fc:a3:
77:9b:da:83:00:33:e2:0d:cf:c9:e6:e5:ce:41:b3:33:d0:83:
c4:b2:49:1e:55:c3:ce:92:aa:b9:21:16:5f:14:68:c4:42:85:
96:b6:50:0b:9a:e9:4b:a9:87:43:03:34:d1:bb:42:d4:1b:4c:
09:16:23:da:d9:bb:b0:b4:78:28:2a:93:c1:16:eb:0b:72:ef:
15:40:e9:89:3c:b9:bf:e2:ba:17:15:84:77:f5:c2:f2:c5:f5:
17:c6:26:1a:82:2f:26:e9:02:0f:1c:db:56:fb:d2:bd:9c:44:
94:96:88:e4:19:f7:f9:6c:52:84:9d:6c:36:54:89:55:66:ca:
65:32:a0:64:07:bc:b1:17:7e:fa:36:cb:14:6d:7a:71:09:74:
c3:3d:a1:da:37:de:c6:f1:f9:ea:7e:37:a3:46:fb:bb:ca:a6:
3a:c7:1b:21:3d:dd:58:b6:64:dc:fa:db:13:45:c9:ce:b7:6a:
90:5a:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:48 2025 by rpki-client