Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBD9A586FF211F0BDC8D77CDAE4EC9C.roa
File: 9BBD9A586FF211F0BDC8D77CDAE4EC9C.roa (raw, json)
Hash identifier: y53EhVROaXAB3rbJ0TSicm4ot6lBZdQATWRybeAnA9Y=
Subject key identifier: 62:92:54:7D:B7:EE:9A:91:05:22:56:EB:11:1A:37:B2:05:5C:E4:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01908A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBD9A586FF211F0BDC8D77CDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:47:05 +0000
ROA not before: Sat 02 Aug 2025 22:46:58 +0000
ROA not after: Sun 05 Oct 2025 22:46:58 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102538 (0x1908a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 22:46:58 2025 GMT
Not After : Oct 5 22:46:58 2025 GMT
Subject: CN=688e9569-42ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:03:91:03:97:cc:64:5d:cb:a8:d1:a7:c3:
85:f8:12:3d:ae:bd:a5:dc:c2:7b:62:9a:96:71:a9:
7a:43:9c:7e:e3:9b:10:36:e0:d9:9b:ef:96:88:90:
d7:0d:03:75:d4:fc:b4:2c:d6:8b:9e:b1:ee:fe:04:
28:54:ed:18:29:35:9e:e3:e0:a5:b8:ae:e5:cc:6d:
15:f2:ae:cb:8c:6e:22:96:0a:9b:df:dd:58:ba:93:
b0:76:d6:64:98:7d:5c:bf:12:82:b0:40:03:be:eb:
f6:dd:1b:1b:29:96:84:59:51:b4:ff:92:7b:70:a0:
33:1d:0e:a0:54:83:31:75:48:72:1d:af:2c:52:3e:
4d:7d:78:39:02:a9:26:48:7a:85:41:b7:8d:a4:c8:
a5:ec:df:d5:7c:30:1c:2c:ba:fc:d2:9e:a7:4f:93:
6d:4f:a4:3d:88:40:5f:6c:69:e6:66:4b:82:e8:f2:
2f:7f:02:36:3c:98:2d:dc:78:44:d0:ab:05:a6:68:
ab:d2:be:37:fa:ca:b7:65:51:58:fc:fc:a6:b5:b5:
51:ae:df:b4:d8:28:e7:8b:dd:7a:cc:1d:e2:eb:6d:
76:e3:19:a0:d1:b7:82:e8:d9:17:b4:97:46:39:35:
35:d2:1d:ae:eb:fc:4c:bc:1a:f3:5e:4a:58:ed:7b:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:54:7D:B7:EE:9A:91:05:22:56:EB:11:1A:37:B2:05:5C:E4:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBD9A586FF211F0BDC8D77CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
46:e0:7c:d4:56:13:9a:b5:ad:1e:c6:a5:a2:d3:c3:cb:ef:4b:
88:4b:ed:4f:5e:d2:a7:1a:cb:45:4b:3f:51:06:91:86:8b:18:
c0:91:2d:5a:49:6b:2d:c7:2b:d5:ba:88:83:da:2d:c7:63:f4:
ef:20:96:11:32:49:e0:49:ac:6c:c3:53:1c:64:cf:bd:a7:cc:
45:91:22:c6:72:8e:53:b5:5b:83:65:f6:84:f5:c0:c6:ac:9e:
20:8a:8b:b0:b6:14:e8:2f:bc:c9:10:cb:ff:6e:95:0f:51:c2:
93:5f:45:30:3f:fe:d7:ae:a0:85:f0:0d:85:d6:7c:2c:e5:53:
91:69:20:11:8a:b3:0c:58:e7:e8:77:d6:e2:7c:bf:a8:1e:e7:
e1:dd:82:a4:af:29:85:29:a1:99:a6:47:6a:22:d9:05:cf:79:
56:7c:f0:8f:73:df:9d:6e:80:6e:5a:1c:1c:8c:d4:be:b5:28:
ff:6f:85:dc:68:b3:ff:d1:d6:e9:74:c2:01:1c:ad:ad:bb:d5:
7c:4b:83:5a:ff:b5:ea:62:a0:fc:d8:d7:75:88:d2:11:fa:53:
e3:62:e4:0e:64:29:77:4c:b3:5c:90:6d:ca:af:22:35:f4:76:
9d:fe:8a:1c:fb:0d:f7:a1:4e:7d:49:03:a1:e1:73:07:ad:35:
12:26:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:25 2025 by rpki-client