Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B001DE6B9E11F094EF1EDADAE4EC9C.roa
File: 87B001DE6B9E11F094EF1EDADAE4EC9C.roa (raw, json)
Hash identifier: iXQda/Qojr2efNby0CUlqT4+50eAWCoDjaciOLwMHV4=
Subject key identifier: 26:94:06:68:59:74:9F:C9:65:8B:16:42:F4:56:5D:A0:C0:35:7A:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B001DE6B9E11F094EF1EDADAE4EC9C.roa
Signing time: Mon 28 Jul 2025 10:35:08 +0000
ROA not before: Mon 28 Jul 2025 10:35:03 +0000
ROA not after: Tue 02 Sep 2025 10:35:03 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102350 (0x18fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 10:35:03 2025 GMT
Not After : Sep 2 10:35:03 2025 GMT
Subject: CN=6887525c-8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:98:f6:79:c0:3e:5a:12:2d:08:d0:fa:7b:
86:93:15:f2:ff:d1:d8:d9:73:c3:25:5d:79:fa:c0:
53:51:58:18:a3:0d:79:c1:69:ef:c7:f6:4f:20:4a:
a2:64:12:aa:d3:2f:42:9d:4a:2c:4c:78:fa:7f:4d:
25:15:0e:05:81:94:2d:e8:c7:cb:44:ef:f2:7b:ec:
84:1b:82:02:64:6f:98:10:84:ee:d2:14:23:20:cc:
e9:7e:13:96:97:4a:56:2d:66:6f:de:c5:2d:ee:32:
01:61:f0:e5:59:b1:a8:39:77:9f:45:65:7b:01:e9:
d2:d5:c1:d1:cc:28:3f:52:b4:23:c8:88:be:4f:0a:
23:3a:d7:8e:55:c8:90:97:21:99:bd:17:f1:70:3f:
e9:74:92:e5:11:da:5a:d6:a8:63:d1:49:ac:4f:78:
e4:06:ef:3e:12:12:30:49:39:19:62:35:7b:d9:98:
c8:8e:f5:11:4f:ab:fd:fd:fb:be:f3:a1:14:bb:e0:
f3:94:63:fa:33:f1:74:9f:35:c5:e3:fc:28:cd:6d:
69:fe:41:db:c4:31:e1:2a:cf:c2:74:c6:0a:6a:2c:
06:db:e5:cd:27:33:ca:45:4e:e5:a5:e3:69:fd:e2:
33:cc:46:46:42:78:17:e0:c8:7d:2f:44:ac:55:a5:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:06:68:59:74:9F:C9:65:8B:16:42:F4:56:5D:A0:C0:35:7A:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B001DE6B9E11F094EF1EDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b5:65:aa:95:89:db:39:a5:b1:c8:bd:1b:d7:32:6e:40:ce:
fa:a5:d9:62:e9:71:72:67:3e:46:5f:68:90:89:62:cc:49:fc:
a2:ed:7f:11:0c:bb:84:9b:74:31:17:62:88:6f:98:0c:4c:b4:
c3:cc:e8:2a:80:fc:47:5f:29:72:55:17:54:77:3e:bd:95:45:
52:29:58:a0:1e:bf:5a:e5:c6:12:9a:79:b3:bf:87:c0:03:02:
f0:31:9a:cb:8e:fa:fb:72:83:cc:da:59:93:2b:7b:da:2a:4b:
b3:7a:0a:a7:7b:d9:9b:e3:d3:dc:45:58:14:58:4f:5c:ed:a1:
ba:4f:c5:88:af:27:46:49:62:40:a7:79:12:fc:ef:a0:54:43:
19:89:4f:0f:93:f8:9b:f8:19:a7:dd:aa:4d:d3:62:59:74:7a:
b5:df:45:f5:9d:bb:a4:aa:f2:ba:87:73:a3:aa:28:4c:f4:eb:
0e:74:90:0c:c1:9c:56:9d:d0:68:6d:cc:1e:82:82:4d:c8:88:
f2:e7:95:b3:e9:94:fd:1e:17:eb:70:56:64:c3:db:ea:61:b1:
63:64:d9:88:c2:3c:ee:30:a5:ac:3a:35:cc:80:23:fa:96:d7:
60:6a:fb:1f:17:97:87:62:f2:e3:77:4e:7c:31:d3:60:80:ca:
24:3b:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:03 2025 by rpki-client