Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E439A27A6FAE11F09435C0CADAE4EC9C.roa
File: E439A27A6FAE11F09435C0CADAE4EC9C.roa (raw, json)
Hash identifier: nqJOqixlt2EuPewwgOQdRtDc/nNQduLdrUzBNGk4Qm0=
Subject key identifier: FB:0A:6C:20:1C:D2:C9:CC:ED:AC:64:9C:19:54:D7:32:78:D5:93:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019046
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E439A27A6FAE11F09435C0CADAE4EC9C.roa
Signing time: Sat 02 Aug 2025 14:42:20 +0000
ROA not before: Sat 02 Aug 2025 14:42:14 +0000
ROA not after: Fri 17 Oct 2025 14:42:14 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102470 (0x19046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 14:42:14 2025 GMT
Not After : Oct 17 14:42:14 2025 GMT
Subject: CN=688e23cb-5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:be:84:96:8e:3e:e5:20:c0:bb:1d:31:25:
ee:35:f7:01:0d:fd:55:bf:cb:83:f8:ae:86:02:51:
5d:10:58:5e:0f:8a:33:d2:1c:13:44:7b:e1:ff:14:
96:91:7d:0d:16:f8:57:f9:97:e1:27:2e:4e:e5:05:
b7:94:d4:92:dd:28:3c:8e:c0:fc:23:43:6d:0f:14:
15:8b:8b:10:41:5a:50:60:a2:36:0c:6e:94:2a:9b:
e0:66:84:0d:a0:bb:63:19:f4:d9:2e:e9:7f:04:00:
2d:10:4a:a9:fd:f3:e4:b3:a8:ae:9b:48:2c:ca:47:
5d:dc:48:95:bd:f5:fc:93:51:07:9b:6f:06:16:88:
16:b3:ef:ab:e6:7c:72:b9:f5:ed:8e:7b:df:80:0e:
35:f2:c3:e7:37:e9:93:9f:ca:73:c6:4a:4c:eb:cf:
71:83:bb:f3:dd:15:51:4d:d5:86:10:2b:d4:97:7b:
bb:92:86:a8:de:62:a7:4b:0d:c1:df:4a:69:45:0f:
6f:e2:bd:9d:fe:5a:a2:48:4c:fa:3c:09:67:41:b0:
87:66:01:87:d4:30:25:d5:2c:43:7b:8f:95:00:6d:
be:5a:c0:3c:29:12:52:9b:8d:4a:a9:92:cb:a2:ad:
72:ab:b8:e2:7c:18:29:08:83:36:cc:5b:c9:4d:be:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:6C:20:1C:D2:C9:CC:ED:AC:64:9C:19:54:D7:32:78:D5:93:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E439A27A6FAE11F09435C0CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
2d:f9:a7:a3:8d:90:66:66:df:f4:2f:92:44:97:bd:59:df:8c:
ac:3e:17:26:96:fc:5d:35:b6:8d:f6:53:50:7e:e1:bb:c8:28:
d1:d2:89:40:f8:03:32:3f:a8:2a:9b:0b:46:f7:4e:af:ab:03:
5c:17:03:37:20:87:e4:e0:65:43:43:ff:89:7d:55:bd:a4:94:
e6:2c:ef:5a:fe:1f:b9:87:81:d3:2b:d4:f5:0f:5b:58:26:68:
d0:ee:e7:bd:57:b7:23:25:3d:7e:ed:06:30:0f:88:f3:fd:97:
01:27:96:82:b6:c6:91:52:e3:77:ac:56:8d:b4:24:31:60:04:
19:5c:87:d8:94:14:3d:f3:d7:33:45:42:f5:c1:8d:de:7b:e2:
7e:ff:41:fb:04:2b:71:a9:c3:00:d2:18:2d:67:11:6c:34:ab:
8e:9d:89:a7:a7:03:aa:f1:af:b8:16:a1:db:e8:27:f4:9d:2b:
74:c4:2b:34:ba:4b:2f:5f:ef:bc:db:b5:db:5e:19:17:0b:1a:
b5:7e:23:72:3f:5c:54:56:02:77:25:f8:89:07:59:1f:85:37:
95:23:00:1c:34:25:56:28:59:3a:09:83:7b:a9:26:0a:0b:26:
6f:41:5c:6c:89:01:b4:20:be:42:92:a9:f0:06:6d:5e:e9:a1:
59:22:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:07:39 2025 by rpki-client