Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B016BFEA664511F09F45BE7EDAE4EC9C.roa
File: B016BFEA664511F09F45BE7EDAE4EC9C.roa (raw, json)
Hash identifier: l0l+QKzOmRla3efIGYAyPW8nBlm9dpSoIpQt8/yz/Tc=
Subject key identifier: C8:49:5B:27:73:48:31:EA:14:5B:E6:11:17:1F:FE:AA:DF:2E:CC:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B016BFEA664511F09F45BE7EDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 15:16:34 +0000
ROA not before: Mon 21 Jul 2025 15:16:30 +0000
ROA not after: Wed 03 Sep 2025 15:16:30 +0000
asID: 135377
IP address blocks: 154.83.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102017 (0x18e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 15:16:30 2025 GMT
Not After : Sep 3 15:16:30 2025 GMT
Subject: CN=687e59d2-1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:00:f4:e4:ff:4c:0e:a7:81:eb:fd:ec:4e:
23:4a:92:a2:da:8a:1b:59:f7:e3:ad:73:44:39:0f:
1b:ee:9d:f4:46:8c:34:61:54:49:9c:5e:2a:c5:2e:
fe:c8:49:75:d3:e5:f8:bb:e9:3b:03:00:26:c5:80:
09:4c:4f:24:37:43:7a:d1:90:0d:0f:0b:ea:21:7a:
d6:59:4a:78:d3:de:1c:56:d6:40:97:67:4b:0f:cf:
bd:d9:12:b9:92:cb:5d:c4:a4:28:dc:ae:09:96:db:
1e:66:ae:30:da:6e:0e:d1:dd:09:8e:a6:d7:78:b7:
02:bd:7e:2b:ca:94:34:9d:73:c8:25:9c:70:33:59:
50:ce:d6:c7:b6:4d:c5:ca:0e:fe:ee:ac:90:47:3b:
d5:5a:48:7c:dc:fa:49:b7:9c:d6:cf:ca:04:cd:f3:
33:99:54:48:1b:10:bf:23:93:d4:25:c9:65:0f:71:
aa:2d:b5:3e:ce:b1:9d:fc:7f:96:25:d0:15:7a:89:
c2:93:29:aa:28:5c:37:b9:3d:bb:21:60:72:d6:f4:
4e:d5:ba:36:e6:bc:04:ff:04:f7:dc:77:2a:c2:6c:
0f:99:fe:cf:d9:9c:3c:76:c1:5e:ec:67:69:5d:33:
3b:9c:68:de:f0:0e:72:fa:d0:d9:5d:eb:c6:5d:5c:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:5B:27:73:48:31:EA:14:5B:E6:11:17:1F:FE:AA:DF:2E:CC:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B016BFEA664511F09F45BE7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.199.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2d:29:a1:6c:86:f2:f2:24:1a:e7:71:f2:b5:32:d9:3c:32:
4d:01:ec:f9:a5:de:47:e2:e8:a3:d3:2e:81:3a:22:d2:a7:d8:
c8:80:46:22:5a:ed:79:00:29:a2:72:fa:06:56:ca:e4:22:64:
75:a3:35:fa:a5:3b:17:18:80:06:06:0c:3a:b9:d6:1e:77:bc:
95:61:f2:39:73:10:d2:b1:5b:38:d6:ec:2f:00:4a:11:2a:db:
69:0d:55:2c:df:90:b7:34:c0:7c:b7:6d:13:95:31:05:41:83:
52:56:f7:20:93:17:73:9b:5b:2c:fd:17:c0:f2:0d:ac:ac:61:
06:f2:7e:b2:16:8a:2e:cc:14:37:d5:1a:68:9f:95:aa:6b:e6:
47:00:67:29:16:d7:ed:8b:ab:8c:c5:ce:9d:d3:55:84:4a:d0:
de:09:0d:cb:b7:50:68:b7:4f:fe:a4:3d:6b:5b:88:d9:2b:d1:
e4:35:ce:7d:34:1c:b2:cf:b7:c3:e8:b6:50:7b:a0:a4:a1:ad:
92:05:13:e6:87:ef:e0:11:c4:ef:00:82:48:91:44:ce:b2:59:
11:5e:c7:16:bf:0c:d1:fb:80:86:dd:11:81:c7:7b:96:b5:e6:
45:cf:f4:ae:f8:f3:e0:c4:28:21:6c:9b:5e:de:da:7c:28:56:
24:99:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:37 2025 by rpki-client