Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A879978693911F088BE79C2DAE4EC9C.roa
File: 9A879978693911F088BE79C2DAE4EC9C.roa (raw, json)
Hash identifier: qp3aPa3VVKck5GrB/alN9CKop9VuT7dTFAMNlyp1zBY=
Subject key identifier: 71:E0:DE:4B:62:52:0C:11:5C:95:87:F6:07:BE:56:FA:D6:9D:83:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A879978693911F088BE79C2DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:27:38 +0000
ROA not before: Fri 25 Jul 2025 09:27:33 +0000
ROA not after: Mon 25 Aug 2025 09:27:33 +0000
asID: 174
IP address blocks: 154.197.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102313 (0x18fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:27:33 2025 GMT
Not After : Aug 25 09:27:33 2025 GMT
Subject: CN=68834e0a-5d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:e6:a8:c4:71:76:c4:37:09:9f:ae:76:65:
b2:75:73:1e:c7:9f:f2:16:b3:4f:0e:f5:4a:34:09:
fb:b7:83:8b:a8:07:71:01:e0:9f:75:6d:a7:cb:88:
46:b1:57:78:8b:40:93:40:3e:10:24:75:09:fa:97:
a4:60:8c:f0:2b:e0:12:4a:40:af:fd:c8:ef:81:f2:
2e:d4:bf:63:a6:c7:4c:b0:39:a4:8e:42:70:72:3e:
19:67:91:9f:8f:51:13:a3:b8:63:82:41:af:fb:4b:
7c:03:57:49:f8:17:78:02:46:db:4f:13:b5:4e:a4:
72:56:e5:48:75:5f:aa:c2:a2:1d:dc:2d:fa:4d:4b:
4a:fd:fe:7b:4b:bf:0c:26:93:0b:d3:b3:04:0b:e3:
d8:01:62:13:ef:62:1e:12:48:92:ac:02:e4:4b:15:
e3:9a:52:fe:b4:d2:44:fb:22:41:1f:b7:4f:5a:a2:
10:7b:ba:e7:b9:f6:6e:84:61:3f:4d:50:f0:59:2d:
87:fc:54:79:e5:4d:c3:8a:37:bb:61:f3:e4:e8:5b:
fa:0b:c0:5f:6f:16:aa:a6:4b:4f:ae:ba:b2:c5:78:
9a:99:e3:52:28:d9:87:78:4d:07:90:f3:2b:c5:9b:
0f:4a:b2:54:a8:e0:cf:62:68:7e:ac:07:f1:26:03:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:DE:4B:62:52:0C:11:5C:95:87:F6:07:BE:56:FA:D6:9D:83:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A879978693911F088BE79C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.62.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9b:3a:22:d8:e3:55:95:ad:1a:22:02:f9:11:46:a0:08:c0:
f9:22:98:5d:b3:35:81:86:2e:d3:4f:31:4f:7b:25:df:d9:fa:
47:76:44:02:4f:48:18:9d:e3:47:0c:16:24:3f:95:13:79:8a:
e9:56:c2:fb:2f:0c:31:42:6a:3e:5f:3d:ad:d0:cd:d9:14:92:
9e:c9:a2:f0:c6:e6:6f:7b:12:ea:04:3d:37:e6:4b:65:04:54:
48:b8:17:86:f7:59:ca:dd:83:6d:e7:0b:7a:ed:bd:1d:5f:1e:
a8:d7:08:10:1c:15:e3:b4:ec:b8:b1:98:94:04:1b:ec:76:9d:
f6:30:d2:2d:0c:31:ba:2b:04:e3:a0:5d:d9:18:f1:cd:8e:ad:
d8:75:c9:8b:09:d6:47:e3:66:a7:bd:9c:02:aa:1c:5b:c4:de:
3a:b0:b1:dc:c8:58:1e:bf:95:b3:15:9b:fe:55:5b:5e:a1:10:
45:6f:49:4a:e0:1b:a4:b0:e1:77:13:fa:c2:71:0c:a0:93:1c:
34:03:0c:29:c1:9d:04:41:85:f6:75:50:e6:ee:83:40:32:df:
ef:75:ff:53:a3:ef:c4:15:89:26:67:18:f6:13:e5:7c:d4:2e:
b9:b6:00:a2:21:5a:6d:39:05:3d:df:ce:2c:8b:06:5f:01:16:
8b:eb:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:56:56 2025 by rpki-client