Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C14B4067E811F08EB6FAA7DAE4EC9C.roa
File: A2C14B4067E811F08EB6FAA7DAE4EC9C.roa (raw, json)
Hash identifier: 631a+gUrcqB6PDJuXMhrWyjbHKmhvsot5kDSCCdXqsc=
Subject key identifier: 0C:2E:1C:08:98:78:D5:E8:B1:D8:36:63:E7:C1:36:85:36:DA:83:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C14B4067E811F08EB6FAA7DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 17:15:31 +0000
ROA not before: Wed 23 Jul 2025 17:15:26 +0000
ROA not after: Sat 04 Oct 2025 17:15:26 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102232 (0x18f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 17:15:26 2025 GMT
Not After : Oct 4 17:15:26 2025 GMT
Subject: CN=688118b3-2e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:11:64:37:0f:c3:f3:09:48:7a:80:52:9e:
79:35:54:e2:45:54:f8:4d:c5:b9:cc:4a:9d:d4:cd:
d7:b1:c8:3d:ef:4d:fd:64:63:05:ff:b2:6f:5a:f3:
aa:8f:0c:bf:05:c1:a3:e3:6b:ff:f6:10:64:24:90:
28:7b:55:e0:b8:9f:f0:de:00:bf:84:fa:ea:99:27:
0d:ce:0e:a0:e4:5d:fb:cb:71:bb:59:46:a3:74:0b:
ca:dc:67:a9:d7:a8:f1:52:ad:17:9b:b4:66:22:d3:
f2:58:e0:22:f0:9f:7d:69:53:33:d1:b3:2c:0a:09:
e9:73:c1:b1:16:f0:0a:ef:61:a3:c7:38:1c:e1:ce:
61:64:03:06:9b:55:50:05:60:98:0c:3d:b4:cd:5a:
3a:e2:77:55:7c:55:a8:e9:0c:61:ce:36:e7:86:f8:
40:66:9a:f8:f4:bb:9d:c3:7b:83:7d:d0:4e:03:5d:
81:10:02:51:63:7a:19:8b:47:4c:6d:cf:cb:9c:ba:
19:b0:77:11:c6:9d:a5:56:9d:ae:51:d3:4d:23:e7:
c3:e4:5b:d5:97:11:ed:0b:7d:05:1a:a3:e2:d7:ba:
ca:e4:03:9d:a3:0a:5e:a5:85:3d:5f:3c:04:36:0d:
15:1a:2e:c1:fb:cf:e5:4d:3b:fe:6e:6b:ff:f4:ed:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:1C:08:98:78:D5:E8:B1:D8:36:63:E7:C1:36:85:36:DA:83:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C14B4067E811F08EB6FAA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f9:4e:7b:fa:1b:50:15:f3:5b:ef:47:b9:38:b2:21:e8:11:
6a:f6:9b:dd:9f:d6:e7:ef:48:5a:f6:79:c6:07:95:6d:1c:71:
42:c5:a1:19:8a:fa:a4:2a:7c:90:1a:9f:a9:b0:86:e0:0e:23:
57:ff:6b:f0:d8:23:7d:04:df:4a:45:ad:63:29:fb:b9:50:61:
3f:cc:80:19:8d:8f:98:f1:bb:32:56:29:68:2d:37:bb:3e:19:
e3:87:c3:5c:73:85:94:d0:07:a3:a6:d2:52:e6:16:cd:cb:ca:
56:b0:12:82:1d:63:e2:ac:1b:92:79:54:f4:d7:13:b7:92:a8:
48:89:c1:44:22:82:fe:4a:c7:e0:48:02:3b:99:e8:41:fe:17:
be:be:5c:d5:f1:a2:9e:0d:9c:c6:23:9b:2a:f3:ba:0f:88:08:
c7:e1:e7:56:8d:ef:bd:67:29:48:d0:a1:c6:cb:8c:85:c9:42:
61:a2:e2:a4:d6:82:7b:39:01:9b:73:bc:e5:0b:be:4d:19:03:
d0:d5:e5:4e:6d:9b:c6:19:86:07:fd:fa:03:c1:82:c8:b9:b8:
66:9b:e3:47:67:2a:9a:c2:30:22:d3:d4:48:32:a5:23:27:63:
88:23:ee:61:e5:08:b3:7c:ee:c3:c8:f9:27:55:cc:eb:da:ff:
d5:f0:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:19 2025 by rpki-client