Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5951FF2665B11F09F9E9C8DDAE4EC9C.roa
File: E5951FF2665B11F09F9E9C8DDAE4EC9C.roa (raw, json)
Hash identifier: p6Q0SH5razmX/v634DQf5aZyQQ3PSbyzWZIqKVRk8+I=
Subject key identifier: 74:22:7C:93:B8:84:63:2F:E3:6B:E6:DA:99:05:29:0B:A0:E4:86:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5951FF2665B11F09F9E9C8DDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 17:55:33 +0000
ROA not before: Mon 21 Jul 2025 17:55:28 +0000
ROA not after: Mon 21 Sep 2026 17:55:28 +0000
asID: 142629
IP address blocks: 154.82.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102039 (0x18e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 17:55:28 2025 GMT
Not After : Sep 21 17:55:28 2026 GMT
Subject: CN=687e7f15-ecf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:d3:14:9b:8e:15:a7:f9:20:a4:0d:f8:a1:
4f:e0:01:aa:65:2f:49:ad:a2:c1:74:b7:1e:35:bd:
74:63:37:7c:c9:23:5d:18:ed:ec:89:a9:e2:0a:31:
62:60:54:08:07:3d:5d:d6:d5:d1:23:a7:d4:d3:38:
50:32:85:ef:8f:2a:44:ed:31:b7:46:6a:3d:2a:12:
e5:02:3d:5b:49:3b:c1:92:83:44:03:ba:70:d2:b5:
1b:d7:df:ee:20:23:99:30:fd:28:02:0c:2c:33:e6:
3e:01:ad:2a:4f:58:fd:f1:52:a7:a0:2a:b9:75:14:
6e:1f:cb:4a:fa:47:fe:bf:23:55:51:16:67:f4:a5:
b4:08:35:43:f9:46:0f:f6:81:6f:70:52:97:23:01:
f5:0f:a8:ad:fb:65:f5:a2:93:54:09:94:5e:fa:71:
60:66:a9:0d:2f:f7:29:30:f4:cf:80:49:c0:a6:18:
a7:27:59:f8:16:ce:94:c0:11:68:8f:13:71:f9:6d:
6d:56:ea:a9:48:0a:44:90:65:dc:c1:9f:ef:30:31:
20:ed:4b:79:08:5b:8e:9f:b1:e6:70:a7:3c:bf:e3:
b2:a6:b4:17:e6:bf:64:1f:60:3d:89:18:f8:9a:fc:
91:fd:24:38:2c:2a:f4:82:11:77:cb:44:14:c4:45:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:7C:93:B8:84:63:2F:E3:6B:E6:DA:99:05:29:0B:A0:E4:86:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5951FF2665B11F09F9E9C8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.133.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d0:94:75:44:7c:25:e8:78:05:f7:0f:61:db:cf:51:02:c4:
f7:ff:9b:d7:7d:5a:10:be:8d:e9:a1:29:76:08:1b:96:09:c1:
89:26:b5:36:b8:c6:e4:15:eb:cf:4c:38:27:57:18:20:71:cf:
dc:33:27:22:fc:fb:bc:00:c3:6b:37:87:6d:d6:d9:78:23:73:
83:be:0b:43:09:01:55:de:f2:04:cd:05:04:13:eb:fa:15:cd:
bc:f0:6a:5a:4c:e6:ba:ac:95:7e:de:49:ab:bf:6b:1d:a0:f2:
52:13:ee:33:1e:ad:33:06:6e:84:bb:1b:28:bb:c5:89:c1:37:
40:9d:1e:b9:95:64:56:a6:52:34:66:48:d5:4a:1f:4c:ec:66:
51:84:5d:1e:cb:25:5c:18:b8:aa:d7:39:3e:92:b8:78:94:a5:
b6:0c:81:6e:27:ad:73:96:e7:48:a1:34:82:0a:33:fc:93:d6:
21:e8:25:b2:7f:d0:ae:46:f3:b0:e4:61:34:59:e0:eb:3f:09:
3b:4d:c4:ff:a1:20:97:3c:3a:3f:84:9c:ab:84:58:e7:15:9c:
42:20:eb:f7:5a:f7:c9:4e:a2:d2:fc:d1:ad:9d:23:ab:66:fd:
e2:56:be:dd:78:35:6a:eb:24:8c:ea:c0:51:cf:7c:41:d3:d8:
3a:75:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:13 2025 by rpki-client