Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC7D932467D911F0A52059C9DAE4EC9C.roa
File: EC7D932467D911F0A52059C9DAE4EC9C.roa (raw, json)
Hash identifier: QUUWRFRbPrwvTOvWMrJIWgXyzzeMHJSyJTcBGeEE6wI=
Subject key identifier: 54:B2:21:54:88:F7:24:90:41:77:80:7B:94:3B:9C:85:76:DE:92:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC7D932467D911F0A52059C9DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 15:30:12 +0000
ROA not before: Wed 23 Jul 2025 15:30:07 +0000
ROA not after: Mon 15 Sep 2025 15:30:07 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102210 (0x18f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 15:30:07 2025 GMT
Not After : Sep 15 15:30:07 2025 GMT
Subject: CN=68810004-3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:a7:b7:a3:e5:35:01:2d:c1:fc:10:a7:de:
75:3f:47:9a:be:21:cf:f5:c1:38:6c:d0:32:c5:19:
7d:e5:eb:d1:f8:0b:3d:1d:ed:f8:b6:3f:ad:4c:85:
71:20:e1:76:26:b9:14:c2:97:06:3d:27:a6:03:c8:
5e:83:9d:7e:e7:78:a0:a4:19:09:c2:52:f6:e2:03:
2a:3b:b1:72:22:c4:5c:5f:23:1e:e1:1c:0c:d8:43:
53:a7:b7:08:87:83:a2:d2:c4:0b:69:75:92:e0:3b:
7a:74:05:1f:2c:bf:14:5a:c5:77:f1:da:13:a4:c5:
66:e9:b5:c6:ac:ec:20:73:f5:f9:aa:40:51:c8:8d:
82:1c:20:a7:07:9c:0b:e8:32:6b:5f:03:32:9d:60:
bb:3a:5e:8b:47:7d:91:f8:70:0a:1c:45:35:39:a8:
b7:c8:a1:76:0f:d5:fc:fa:da:50:3d:1c:c9:5e:ae:
36:87:fe:c2:09:cf:13:9a:04:f6:ac:98:bf:c9:c9:
da:7d:a7:dc:65:bb:1a:8d:bb:6c:af:f6:dc:57:ad:
8e:0b:da:dd:df:3d:1e:65:cf:3f:18:34:3e:37:93:
30:fe:aa:d1:3b:14:2c:8d:28:90:10:ef:ff:3d:1c:
4e:f6:6a:69:48:0e:2f:f4:c6:3a:5f:b4:a2:8b:70:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:21:54:88:F7:24:90:41:77:80:7B:94:3B:9C:85:76:DE:92:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC7D932467D911F0A52059C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c3:c6:73:87:8f:c2:be:ca:05:b3:c5:f8:8a:59:6c:87:ec:
f3:4a:39:3b:d2:81:2b:4e:3d:43:39:d1:5d:08:bd:15:d3:b9:
9e:81:6c:45:0c:06:d5:ef:74:f4:7d:81:ca:01:98:8d:eb:ed:
77:86:86:ee:18:fa:62:bd:fe:4a:ed:7e:ea:05:5b:0f:05:ff:
2e:2b:d7:ae:32:20:cc:2e:d4:3a:f0:ff:fa:58:75:ab:21:c4:
ca:ab:4b:77:37:c2:7e:67:1c:cf:38:da:11:da:15:fe:73:f8:
19:7b:06:b9:68:ae:56:a1:e2:c4:ce:e6:5f:0f:6c:4b:16:f7:
44:dd:68:cb:4f:96:a6:25:a9:e6:1c:c8:85:f1:bf:0c:75:e2:
3e:ef:16:b1:0d:2f:2c:80:5f:38:17:5f:04:f4:79:42:5d:e5:
aa:91:6b:cb:62:ef:fe:9b:ba:15:1a:4f:03:49:64:06:ed:97:
ca:a6:5b:d3:75:f1:e0:fc:7f:6f:17:45:56:b7:3c:c0:60:08:
a3:f4:6e:6f:38:0b:fb:9d:aa:ec:66:12:4e:a7:4b:50:ee:b4:
87:03:e0:56:ec:5f:bc:b6:f4:01:62:e0:3a:8d:da:20:cb:da:
41:e4:a9:1c:d3:f2:1b:07:da:65:c8:18:06:3f:c3:49:39:9a:
9c:57:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:10 2025 by rpki-client