Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B97190687C11F0997CBAF2DAE4EC9C.roa
File: A9B97190687C11F0997CBAF2DAE4EC9C.roa (raw, json)
Hash identifier: BrasEHGfSZc1bjq8KMNR4saACqZ0D6OInpO/iLq+r3Q=
Subject key identifier: B8:D4:2F:82:D1:4B:15:D6:73:DE:7F:AE:0B:D6:92:0D:9B:91:63:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B97190687C11F0997CBAF2DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:55:08 +0000
ROA not before: Thu 24 Jul 2025 10:55:03 +0000
ROA not after: Sun 31 Aug 2025 10:55:03 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102243 (0x18f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 10:55:03 2025 GMT
Not After : Aug 31 10:55:03 2025 GMT
Subject: CN=6882110c-aa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:14:75:20:24:8f:6b:82:d6:a5:f5:d9:44:
6b:e9:14:a2:01:81:5d:19:e7:b6:11:1d:65:f0:5b:
b0:f6:a2:da:1e:57:3c:5f:65:6b:63:a7:eb:0e:5b:
f1:14:76:95:12:d3:f7:e1:6f:55:5b:ce:9a:75:57:
ab:c3:2e:62:e4:13:22:53:08:07:72:49:4d:31:33:
ed:47:b3:ee:8e:87:f7:0a:7d:c4:05:22:70:cc:88:
ad:51:14:cf:0d:29:32:05:12:4d:c5:43:58:86:27:
02:c8:e3:d7:ee:bb:3a:5f:c8:c7:48:2d:3e:aa:27:
65:80:a8:91:4f:d4:7c:a5:44:f1:48:17:56:fb:09:
de:ca:37:14:ea:d3:c2:f6:62:b6:d2:42:7a:c4:56:
d4:ee:28:a9:26:ae:52:8d:2a:18:d4:0b:94:ec:90:
5f:7d:e2:c1:14:fd:38:44:2d:22:33:52:9e:aa:54:
d9:86:d2:cb:43:1a:b6:4a:a1:69:1b:fd:a8:23:a9:
d9:12:f6:0a:25:9c:57:c3:3b:79:9f:31:c4:9f:fb:
5b:7a:c6:7a:66:27:ec:3a:81:b7:d3:e0:4f:1e:e4:
ba:86:b1:95:d8:ef:c0:25:26:eb:c1:45:24:fa:3c:
79:92:2d:a8:7c:96:04:4a:bf:6f:25:6b:03:dc:9b:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:2F:82:D1:4B:15:D6:73:DE:7F:AE:0B:D6:92:0D:9B:91:63:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B97190687C11F0997CBAF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
49:50:de:2b:b1:a1:14:f9:90:f7:e3:61:56:c7:88:63:7b:d4:
03:d6:ef:39:d1:cf:89:14:23:13:e1:df:53:15:b4:6d:2b:dd:
6e:48:cf:68:82:df:55:e0:1d:97:86:03:9f:b2:5f:8a:c5:8a:
2f:87:71:f6:d9:79:cf:71:1c:ac:d0:54:93:34:9d:bb:34:b3:
27:f1:4b:93:e0:fe:6a:a7:21:87:0d:72:97:d0:e7:e9:bc:a1:
5e:19:e8:95:17:ad:ea:3a:ed:45:fc:04:53:be:3f:24:a3:5b:
7a:bb:0c:d9:45:d2:f1:db:fb:3b:6d:4f:84:04:b2:af:e1:24:
ea:db:7f:b4:b0:4b:ca:9c:1a:77:58:33:c3:60:27:1f:b6:c8:
77:69:21:05:32:cd:27:84:b5:fa:2a:91:85:f7:46:22:34:cb:
ea:02:e8:c8:35:0f:91:1e:37:60:21:37:88:78:30:10:b0:8a:
21:61:d2:b5:3b:02:89:22:f2:6c:e8:06:97:da:67:ee:b7:6e:
84:e6:85:c3:0a:65:d1:f7:1b:81:4d:40:0e:2f:bf:2e:90:77:
70:cd:99:1f:78:c2:1a:74:3c:1c:b8:f5:b9:a3:bc:6c:b4:66:
cc:6c:d6:12:c3:6c:32:38:ea:4f:35:ee:d2:d0:49:2f:ac:e5:
72:22:23:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:20 2025 by rpki-client