Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D93294BE67E711F0BEED58A3DAE4EC9C.roa
File: D93294BE67E711F0BEED58A3DAE4EC9C.roa (raw, json)
Hash identifier: yMBIdxnt260WxASctvEAvJSSi5o73j/chmlW1mDiQUQ=
Subject key identifier: A9:62:A0:CA:43:55:12:0F:8B:D4:A4:BD:A6:10:8F:94:31:04:30:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D93294BE67E711F0BEED58A3DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 17:09:53 +0000
ROA not before: Wed 23 Jul 2025 17:09:48 +0000
ROA not after: Sat 04 Oct 2025 17:09:48 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102230 (0x18f56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 17:09:48 2025 GMT
Not After : Oct 4 17:09:48 2025 GMT
Subject: CN=68811761-1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:73:7d:88:6f:c8:2f:75:09:fa:21:de:f2:
61:8f:3c:22:a2:13:d6:b1:8f:9d:b7:a2:29:86:d8:
a8:0e:44:53:27:46:74:26:a9:ab:b6:19:9c:65:f0:
a7:98:e4:e3:37:20:6e:34:b3:73:5d:a5:3d:fb:f1:
95:bb:b1:ee:e4:4a:96:56:e1:ad:d0:77:d5:81:a3:
db:ee:ff:2c:25:8c:e0:88:56:9a:dd:c8:35:41:af:
f5:cc:df:98:fa:57:2e:3b:ac:30:b9:80:24:20:84:
28:03:a3:2f:6b:73:4b:a5:b5:b8:56:de:17:a6:05:
aa:c8:a6:52:67:0c:56:15:21:e3:4c:ce:c1:40:8d:
9a:e6:26:8d:4d:99:60:ea:a7:c0:67:8a:24:f4:05:
1f:10:6c:7e:7a:4a:27:8a:34:b3:8f:de:92:b4:a3:
68:6e:86:85:ea:9e:6b:85:37:01:ff:85:44:38:53:
5f:a1:cb:de:9a:b0:2a:dc:ca:bb:42:db:6f:e2:1d:
8d:c5:c9:bd:ba:17:5d:14:49:1c:8a:1a:b6:9c:19:
5e:09:79:8e:52:30:a4:00:d1:98:ae:10:cb:58:0a:
86:83:d9:61:40:44:d1:c8:7a:cf:ea:22:6f:18:11:
ee:7e:37:18:00:81:e4:57:4d:07:9f:de:9f:f1:8e:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:A0:CA:43:55:12:0F:8B:D4:A4:BD:A6:10:8F:94:31:04:30:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D93294BE67E711F0BEED58A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
79:4a:60:59:0e:57:52:3b:2a:d0:05:c2:4e:8f:36:39:55:1e:
cc:d4:88:09:fe:6b:da:fb:a0:83:e4:38:1f:1d:f3:c5:c4:cd:
4e:eb:77:52:91:3a:cc:c6:78:e0:cd:9e:cc:07:55:63:75:39:
92:8b:83:be:08:ed:6a:90:b5:48:27:f9:12:97:95:60:e9:8d:
21:33:b3:ed:b5:bc:06:7a:a1:fb:82:04:31:81:9c:86:da:25:
e0:b7:18:c4:a8:af:bc:1b:03:7d:e9:b6:6b:1a:02:78:5d:7b:
81:7c:7e:ea:c5:c0:94:1d:45:a9:d5:11:93:87:07:99:5a:81:
d7:37:e0:47:6d:68:e8:f2:9f:6c:be:58:41:ae:bc:9e:68:f4:
ab:27:21:37:f8:b6:1c:1e:8d:3d:26:31:97:2b:9f:59:7d:9c:
ea:8c:87:f5:6d:76:05:a9:41:37:d8:ff:0b:d7:bd:56:27:f6:
14:b6:8d:d0:06:57:29:07:5c:7e:d2:0b:c7:cf:0c:cb:e4:10:
f0:db:2f:6a:10:a7:bf:10:59:ac:b5:58:8a:a0:db:eb:82:2b:
27:d7:45:d8:23:14:d3:78:ca:99:43:02:28:b0:04:22:6a:8e:
ba:9a:d0:37:ee:88:5e:55:64:c1:e9:8f:e8:79:7e:fd:59:6f:
5d:0f:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:00 2025 by rpki-client