Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916FF5D06B8A11F08D6D56D8DAE4EC9C.roa
File: 916FF5D06B8A11F08D6D56D8DAE4EC9C.roa (raw, json)
Hash identifier: MkgVrG2QuYcfJB62Uvi8Y5ZILd/RMPfkhxrmsEtSomY=
Subject key identifier: 2A:D2:CE:C4:95:CC:BE:06:7A:95:2A:45:4C:A4:57:F1:8D:69:45:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916FF5D06B8A11F08D6D56D8DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:12:14 +0000
ROA not before: Mon 28 Jul 2025 08:12:10 +0000
ROA not after: Thu 07 Aug 2025 08:12:10 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102334 (0x18fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:12:10 2025 GMT
Not After : Aug 7 08:12:10 2025 GMT
Subject: CN=688730de-fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:4a:c1:4d:cf:e1:39:78:7d:2a:dc:55:ac:
98:62:51:93:00:f9:ab:92:99:7f:33:a7:e7:2f:e9:
ac:89:d2:3a:91:44:4d:96:c0:80:ab:e2:7a:ce:e6:
8c:25:ba:6f:bb:82:ea:1c:f2:5d:61:e1:c0:10:79:
48:0c:54:27:36:47:29:c0:82:c3:8e:fc:ff:1e:a7:
02:c1:10:2b:58:f0:e0:32:61:dc:17:68:78:57:0d:
a5:65:28:dd:50:2a:47:ab:1b:bf:80:5d:cb:30:58:
16:21:05:2e:b1:51:e1:1d:c5:2f:15:b5:2d:4a:2b:
1f:8c:df:cf:04:10:db:45:52:05:bf:06:45:ff:37:
00:9e:69:4d:e4:c4:a0:40:b1:f8:1f:4a:10:f5:86:
65:50:71:16:60:99:09:7e:03:82:ba:37:23:59:a2:
bb:7c:31:25:74:6b:ac:4f:7e:54:59:d0:ea:77:bc:
99:c9:53:11:8a:0c:24:da:9e:f4:f6:d5:95:b1:3c:
37:db:02:30:14:09:7e:02:3a:c6:d5:73:f4:85:f2:
0b:cf:87:e2:80:5d:59:cf:d9:c1:13:8a:d8:1c:4b:
c6:4f:d1:04:35:4b:4f:22:d7:60:e2:25:0e:b7:ed:
7b:b2:aa:5c:b4:c3:45:b6:c3:76:9d:cb:c9:90:9c:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:CE:C4:95:CC:BE:06:7A:95:2A:45:4C:A4:57:F1:8D:69:45:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916FF5D06B8A11F08D6D56D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
07:a1:2e:e4:d1:cd:1f:c6:7c:95:0f:45:d9:c1:a6:67:10:fc:
00:b5:10:2c:48:a6:6d:d6:e1:55:7a:7b:4f:ed:8f:28:52:e0:
21:08:73:c2:4a:b8:f2:2b:26:34:8d:57:a4:ef:48:3c:77:eb:
4b:0b:74:b1:3c:30:6e:96:47:2f:24:32:5f:dd:5e:09:a2:b7:
4e:cf:ec:97:5a:8b:40:9c:a8:61:ee:28:59:86:e7:25:0c:f0:
c5:f4:6b:69:e9:0c:09:d6:1d:70:e3:24:e3:70:6c:14:40:cb:
a1:86:b9:4a:92:89:88:37:98:03:99:c8:0b:57:dd:5c:99:c5:
f3:03:44:48:d9:1a:d3:13:83:ae:a6:6a:62:32:69:25:3e:5a:
a8:67:7b:d1:39:fe:f8:27:be:01:3a:02:fb:e9:b4:63:a2:14:
ac:70:e8:00:38:98:d8:f2:e1:fa:98:a6:f2:a2:0a:ea:a7:6d:
a3:e1:bc:93:1a:a7:72:7a:91:7c:0f:b0:d9:cb:c7:29:8e:02:
44:25:74:d4:f3:78:68:b1:ee:96:f7:d6:54:50:a5:58:fb:7f:
36:a6:e6:19:9a:52:2c:50:2c:06:99:23:17:65:e1:c4:ea:7f:
7b:2c:d6:61:2e:56:ba:71:72:9a:8c:32:38:ee:3b:c1:e6:e5:
4c:a7:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:16 2025 by rpki-client