Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8472C326FAF11F0BD4124CFDAE4EC9C.roa
File: A8472C326FAF11F0BD4124CFDAE4EC9C.roa (raw, json)
Hash identifier: HSpTkNvAW4/qpCZYc8eGMdlQ4Z6NMv53U6IW0t62ZUs=
Subject key identifier: E3:BD:AD:A0:7D:F7:0B:7F:98:3A:7D:7F:87:4E:B4:D0:AB:DF:8D:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019048
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8472C326FAF11F0BD4124CFDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 14:47:49 +0000
ROA not before: Sat 02 Aug 2025 14:47:41 +0000
ROA not after: Thu 04 Sep 2025 14:47:41 +0000
asID: 20326
IP address blocks: 154.194.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102472 (0x19048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 14:47:41 2025 GMT
Not After : Sep 4 14:47:41 2025 GMT
Subject: CN=688e2514-8d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:d8:9b:66:e4:76:85:c5:31:43:3d:e9:15:
9f:d9:fa:a7:94:65:20:00:bf:94:ff:bc:89:ae:83:
dd:2c:b0:7e:be:f3:54:1e:a4:0a:51:5d:4f:39:8a:
80:61:ea:be:ad:c3:07:3e:be:df:cc:46:a6:83:3d:
2e:c6:06:b4:b2:ff:e4:ec:3a:ce:7f:69:a7:09:4b:
ee:8b:d9:e6:b2:c3:45:87:b0:ce:b7:ed:bd:a7:c7:
43:49:5c:ca:a7:00:d6:76:7c:e5:94:0f:f9:60:5a:
25:63:3f:f2:3e:04:eb:3b:70:09:f9:38:4c:b4:5c:
98:85:15:9a:2e:35:cb:2d:f1:81:9d:f7:6d:1b:2e:
35:26:e1:30:36:a7:04:fb:de:8d:de:1c:5e:d5:fe:
c7:fe:2a:cf:d5:53:86:ea:61:de:7e:ff:9b:6c:23:
df:a9:72:9d:27:27:d6:03:5a:59:12:50:81:e4:a3:
c1:fa:d6:ac:15:cd:18:f8:36:ed:e3:13:e5:40:1b:
85:46:9f:02:48:6e:d7:e0:bd:8f:58:64:e4:84:eb:
7d:5a:6f:c5:f1:33:4f:10:29:2f:96:ca:07:98:7b:
fa:ef:d5:37:86:de:81:b4:8b:e5:e4:0b:15:39:6e:
36:d6:2a:5c:e5:38:5a:44:01:9c:e2:4a:17:76:5d:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:AD:A0:7D:F7:0B:7F:98:3A:7D:7F:87:4E:B4:D0:AB:DF:8D:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8472C326FAF11F0BD4124CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c9:88:14:33:31:fa:9d:b8:34:5d:c1:7a:01:d4:70:d8:a4:
10:95:24:b0:8e:72:cc:1e:f7:2f:a6:16:7d:9b:fb:11:09:c5:
e9:73:84:a2:0e:b1:58:a3:85:3c:0b:97:8b:5d:e7:7d:64:23:
33:dc:cf:99:b0:3b:c0:41:16:4c:0e:08:46:9a:29:2d:bc:c0:
ff:67:2b:75:50:9d:73:19:04:5b:27:ae:6a:c2:1e:94:99:3d:
7b:9c:5d:22:d0:39:1b:84:0a:5f:f0:51:fa:cf:9f:2e:92:cc:
b4:fa:e1:bf:0f:68:a8:6a:1b:41:78:fd:37:4a:25:cb:ba:39:
a0:ff:a2:12:78:7e:f9:81:ea:64:1c:1e:7a:f4:52:e4:58:fd:
79:af:45:77:c4:3f:d0:36:c1:eb:cb:5f:fa:24:ff:2b:a1:80:
d8:6e:37:22:79:67:bd:73:47:86:a6:e9:44:67:93:43:0b:68:
66:7d:f2:99:af:cc:4d:5b:1f:3f:07:60:2e:e8:30:95:24:61:
74:03:41:38:00:a0:18:ae:bb:80:d0:46:66:01:f7:3f:e0:f6:
40:44:99:c2:14:9a:72:45:66:63:6f:27:ce:58:a1:13:a5:59:
85:3a:72:c2:a6:96:66:f1:f3:78:82:71:35:2e:ca:82:01:e6:
04:7b:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:43 2025 by rpki-client