Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC962F146FBF11F08C3E1AB9DAE4EC9C.roa
File: DC962F146FBF11F08C3E1AB9DAE4EC9C.roa (raw, json)
Hash identifier: lOQ/eOP0UiAai5L2c9+5tGam+Osw+JthH2VxfPl5G7E=
Subject key identifier: 0C:B5:11:D6:83:5D:DC:80:5E:25:EF:BB:66:A4:54:60:AA:E4:CF:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01904E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC962F146FBF11F08C3E1AB9DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 16:43:48 +0000
ROA not before: Sat 02 Aug 2025 16:43:43 +0000
ROA not after: Sat 06 Sep 2025 16:43:43 +0000
asID: 54801
IP address blocks: 154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102478 (0x1904e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 16:43:43 2025 GMT
Not After : Sep 6 16:43:43 2025 GMT
Subject: CN=688e4044-2b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:42:f5:45:90:0a:24:65:3b:72:64:5a:90:
e9:0d:31:35:75:d0:62:3b:22:9a:ea:4a:2d:4f:94:
b8:13:bd:0b:3b:20:ae:7c:b4:c7:ed:5e:52:5c:f9:
2c:fb:07:2f:89:98:5f:61:80:6a:93:94:71:fc:08:
44:26:dd:fd:14:a7:8a:89:f4:49:5c:81:fc:93:6a:
64:0e:9f:f1:9c:60:49:72:4a:a3:95:95:28:68:a1:
ba:bd:85:cb:e8:f2:ca:a4:1f:42:3e:85:07:15:3a:
37:eb:6b:ae:ba:43:16:95:98:73:c4:89:7e:ff:6a:
9b:d9:a2:e1:96:43:12:f9:6e:40:7a:c7:0a:90:8f:
f7:6b:96:6c:c3:4a:f8:5a:7b:65:e3:55:e5:bb:30:
b7:5c:b1:1e:31:93:cb:64:42:e4:8a:0d:87:14:fe:
00:9f:8d:7b:e9:00:84:b0:1d:40:e2:77:43:9b:6c:
9c:38:65:cc:96:e1:ac:e4:73:4e:b9:d4:b3:4a:aa:
57:a1:1d:cd:63:23:12:03:1c:a8:98:70:4b:75:ac:
2b:a3:ed:ef:af:85:8e:77:ff:b4:2b:7e:a2:9e:8d:
00:00:13:ff:29:10:80:ee:9e:da:8f:18:33:6f:1b:
60:41:bc:55:c6:5d:e6:a1:08:f5:9b:42:70:86:67:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:11:D6:83:5D:DC:80:5E:25:EF:BB:66:A4:54:60:AA:E4:CF:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC962F146FBF11F08C3E1AB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:3e:29:2b:29:5c:4b:68:8f:b0:47:2e:c9:58:7a:d4:30:e9:
1b:d4:5d:fe:a3:96:34:a9:7d:cc:d7:1f:46:8a:c0:5c:e5:a6:
69:0a:3b:87:aa:fc:f0:8b:52:51:70:be:18:ed:16:1a:b4:4e:
0f:e6:87:5e:32:8f:54:73:6f:fb:7f:bc:48:a9:91:6b:47:06:
a4:b1:c4:7d:17:01:5f:5c:19:df:57:35:94:24:65:0b:c7:18:
d9:e1:22:75:38:14:ab:57:86:31:3a:ac:3e:01:84:0d:a4:6b:
6b:76:6a:39:08:56:fb:ef:59:9c:10:28:c4:08:31:c2:83:e2:
a4:c3:e3:6e:38:51:d7:78:31:34:f4:7c:67:fb:45:79:76:8f:
fa:a2:b8:ea:62:31:36:d2:53:d7:e2:11:59:05:1d:60:81:f6:
62:93:c8:ac:d8:58:13:d6:e7:ed:f8:f7:eb:14:c7:bc:9c:e3:
71:de:9b:09:4c:3a:51:1a:ab:e9:10:cf:51:a0:47:4a:b7:f7:
f5:5c:34:fc:e1:b0:2d:72:ba:9a:86:a8:19:df:be:a5:17:2b:
70:47:ba:c5:e5:cb:ac:a8:8c:4f:63:9b:42:5a:bd:b3:59:d4:
02:e6:45:24:b0:82:81:65:70:0f:a5:45:07:6b:4e:a8:46:6c:
82:e7:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:21 2025 by rpki-client