Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57A77EA6BB011F0BFD134CEDAE4EC9C.roa
File: B57A77EA6BB011F0BFD134CEDAE4EC9C.roa (raw, json)
Hash identifier: 2XjHxlfEW2NuM3NOTxj+XUq0xFXa1CgtpgiALy5w4AI=
Subject key identifier: BC:40:91:9A:FA:8B:E3:7D:CE:BD:47:4F:88:06:32:D0:43:1D:52:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57A77EA6BB011F0BFD134CEDAE4EC9C.roa
Signing time: Mon 28 Jul 2025 12:45:15 +0000
ROA not before: Mon 28 Jul 2025 12:45:10 +0000
ROA not after: Thu 04 Sep 2025 12:45:10 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102352 (0x18fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 12:45:10 2025 GMT
Not After : Sep 4 12:45:10 2025 GMT
Subject: CN=688770db-be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:4c:34:be:d8:4b:3d:57:f3:b7:e0:57:06:
3d:04:c6:95:71:3b:b7:c0:78:6d:93:8e:cc:96:1a:
13:be:91:ad:38:93:b7:a1:47:d7:d4:d0:5e:60:73:
d9:e7:63:2a:70:d2:63:9b:eb:ed:e3:4a:b8:ce:51:
23:fc:68:3c:24:07:fd:e2:ae:42:46:8c:dc:b0:e6:
be:6d:57:a5:e0:96:fb:25:8a:84:cd:c2:79:4f:dc:
21:94:89:88:db:fc:ab:b5:7b:fe:af:f3:bd:25:7c:
c0:60:e3:5e:15:41:0c:f7:d3:38:57:bb:f4:83:ca:
54:f2:6b:22:72:bd:53:b4:79:eb:88:33:ba:6c:a0:
30:6f:f0:94:42:f2:ed:0f:8c:9a:a0:2d:35:0c:e8:
50:ae:39:7f:91:75:5d:bd:ee:b8:82:70:a3:ca:e6:
69:7e:11:80:30:eb:5e:86:00:5e:cb:93:4a:55:3b:
58:37:e0:d3:2c:55:64:fb:3f:6e:12:49:b3:52:e9:
83:a7:db:e7:d2:35:f0:ab:37:fc:81:92:08:67:cd:
53:b5:09:c7:6a:28:b8:78:8d:2d:3b:2d:fe:f2:ed:
d4:a5:a9:ee:31:ad:13:f2:51:fa:0c:35:c5:4e:66:
ff:7d:0c:7a:ee:c6:e6:80:f1:07:85:4f:1c:21:10:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:91:9A:FA:8B:E3:7D:CE:BD:47:4F:88:06:32:D0:43:1D:52:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57A77EA6BB011F0BFD134CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7c:9c:90:76:85:cf:79:fb:65:8d:c8:fd:44:59:ff:82:fa:
ae:25:63:d4:d5:cf:b1:54:14:4b:55:cf:d4:50:09:2f:41:97:
60:66:11:4d:2f:e5:09:57:f5:98:a7:35:b4:be:ef:ec:4f:15:
20:01:71:40:03:5b:97:c9:5e:2f:d8:9a:18:a1:bc:98:60:84:
bd:11:f5:06:19:d9:16:61:3d:b4:22:88:1f:76:17:c0:a8:16:
82:1d:09:48:9e:a1:e3:cf:b7:6e:45:be:f2:a1:39:15:ff:ee:
5a:a7:6a:d0:5c:2f:0d:76:33:ec:ea:a1:ad:4d:08:36:22:d0:
ad:2e:8d:46:12:88:bb:0e:02:c1:26:7e:25:98:da:98:49:ad:
10:86:b8:fa:c7:2a:c7:39:b7:9f:3f:00:df:b5:5e:e4:1d:69:
ab:ce:94:be:67:ec:a8:f2:0a:03:e2:e3:29:92:03:4d:77:e0:
df:27:3f:4b:c1:a3:44:2c:60:5b:ed:48:de:13:fb:05:d3:e1:
96:8e:43:69:2e:a6:38:6b:61:5e:6e:4c:ea:a0:d8:c1:11:72:
cb:49:4d:66:95:6a:05:47:fa:2b:25:e0:de:bc:9f:37:f3:20:
75:c7:17:1e:2c:37:1f:7c:eb:d9:ce:5d:db:0c:cf:28:03:17:
a7:46:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:25:42 2025 by rpki-client