Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A169027C6FCE11F09BD4CA97DAE4EC9C.roa
File: A169027C6FCE11F09BD4CA97DAE4EC9C.roa (raw, json)
Hash identifier: Is5rTAtjIhvvOJxXVPgCrvhFKtIeJ/zuW30+n0a3Hh4=
Subject key identifier: 09:0C:49:83:55:9F:C8:9E:C6:E0:D2:5C:1B:5D:E9:7B:88:52:B9:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A169027C6FCE11F09BD4CA97DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 18:29:31 +0000
ROA not before: Sat 02 Aug 2025 18:29:25 +0000
ROA not after: Wed 10 Sep 2025 18:29:25 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102496 (0x19060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 18:29:25 2025 GMT
Not After : Sep 10 18:29:25 2025 GMT
Subject: CN=688e590b-565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:68:36:db:43:a3:9e:55:2d:e7:c0:cc:fd:
73:9a:58:47:11:82:bb:c3:42:51:1c:98:e6:83:ae:
34:c7:92:ee:a7:15:e9:ab:4f:93:c4:03:f6:6b:98:
5a:5f:21:54:9a:40:8a:b1:06:2e:4d:a5:d3:3e:97:
76:80:b1:21:c1:b9:19:31:2c:1a:10:9a:a6:17:68:
ec:68:bd:d9:ad:4e:0e:77:dd:d7:7f:8b:91:8a:b1:
61:8b:3a:5c:28:41:b4:d2:d9:35:82:b9:1f:50:cf:
12:68:8f:b0:13:a5:c1:4c:b3:61:5d:d5:4f:64:b0:
61:d2:a1:04:dd:b9:27:43:3b:e6:a9:a7:66:e3:9f:
39:16:0b:2b:57:1d:c2:2c:41:bb:a4:16:18:a6:73:
42:44:3f:7e:f8:5f:3f:6a:2c:06:3e:f4:51:61:ca:
64:64:86:97:c6:6d:da:94:b6:aa:33:0d:ec:cc:f7:
72:4c:5c:e3:99:6d:84:b2:e4:68:45:b4:fe:40:1c:
5a:b4:92:98:22:39:62:ee:82:46:c1:a7:56:7c:36:
aa:99:a6:3d:96:f2:03:d3:fd:2a:6a:ff:cb:7d:ff:
a2:d2:94:f7:5b:3c:06:a2:fc:e7:ce:20:23:e4:ab:
bf:58:0d:55:d5:ba:95:f5:82:f1:ac:81:e5:02:6f:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:49:83:55:9F:C8:9E:C6:E0:D2:5C:1B:5D:E9:7B:88:52:B9:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A169027C6FCE11F09BD4CA97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c6:1b:83:af:52:c1:67:2a:54:8f:3d:a1:2e:82:1e:cd:e0:04:
5e:8c:57:1b:d7:ae:39:ab:af:d3:a6:e5:bb:f2:ee:8a:4c:60:
e8:2b:48:c0:3b:1f:b2:53:d7:f6:49:aa:1b:86:55:25:d1:c8:
da:5d:7c:29:31:a6:e6:ab:6c:1d:1a:11:05:17:e7:12:2e:e8:
e7:f5:7b:96:85:78:66:4b:69:e6:17:f8:f9:f5:cc:01:9c:ac:
d6:2d:34:89:95:d3:1c:17:fd:24:52:88:a8:a3:0f:cd:70:d7:
4b:43:6b:8d:ea:ec:99:7f:2f:24:e9:1e:ca:da:0b:ec:41:be:
d4:a9:9f:b7:15:66:61:8a:ed:46:ff:f4:68:c2:71:e1:41:5e:
80:d4:58:28:71:ae:15:f9:c0:a1:85:d4:2b:d3:c2:6f:64:1e:
f6:26:2e:9f:52:88:5e:aa:19:7a:0e:0c:b4:9d:e8:3a:78:e2:
8c:8a:8d:2b:fe:ae:ab:07:6e:b7:53:b1:64:15:39:32:19:f7:
06:d9:34:19:39:4e:0b:ce:30:15:25:8c:00:74:da:49:24:d6:
30:d6:95:55:59:5f:ee:5f:e8:50:9b:82:46:33:f7:4a:9e:e4:
76:64:77:54:1c:5f:3d:ce:01:0a:36:af:3f:d5:e9:05:c9:44:
52:6a:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:55 2025 by rpki-client