Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1691BF86FC511F0B5A1CCDDDAE4EC9C.roa
File: F1691BF86FC511F0B5A1CCDDDAE4EC9C.roa (raw, json)
Hash identifier: YbKyg1zuuJlTXIyHbTzBFP3oft1rbtYs2i2Bc2cJVJA=
Subject key identifier: 9A:08:CC:77:93:EE:E8:6D:DA:60:99:64:B2:44:CF:95:F3:F2:8A:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019054
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1691BF86FC511F0B5A1CCDDDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 17:27:20 +0000
ROA not before: Sat 02 Aug 2025 17:27:15 +0000
ROA not after: Wed 10 Sep 2025 17:27:15 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102484 (0x19054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 17:27:15 2025 GMT
Not After : Sep 10 17:27:15 2025 GMT
Subject: CN=688e4a78-23c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:9a:78:24:d2:9f:30:8c:07:38:c9:ab:1c:
89:1a:eb:00:32:53:b4:78:4c:b7:07:a8:22:c0:04:
bd:0e:ee:c3:1a:e0:ce:c3:d9:6b:dc:c6:06:5c:ae:
40:83:3e:89:73:e3:82:13:cb:40:83:71:9c:fa:82:
2d:d8:85:13:8e:be:5a:5a:e2:4c:ee:15:8a:64:cd:
5b:ed:f9:9f:9e:ab:c5:b7:da:ea:59:94:44:0c:7c:
1c:a1:d4:bf:20:31:9f:5c:83:94:77:fd:55:d1:38:
f8:b1:2f:b0:16:6c:00:9b:f7:ce:2d:c1:09:f0:56:
6b:0a:7a:43:f5:39:1f:fa:6e:b1:af:46:b8:c9:37:
f2:5e:33:d5:d9:d5:b7:20:31:45:dc:d9:b5:9f:de:
78:1d:27:c3:52:9d:a8:c4:ab:92:c9:68:fd:13:ea:
eb:80:18:58:1f:ec:8a:12:bf:53:f5:24:9b:bb:3c:
c7:31:67:2b:ef:c7:c7:b1:d6:e2:7b:cd:de:87:2d:
ee:a8:5c:e7:c4:ed:80:32:f0:18:4d:d9:b4:cd:ed:
b6:50:3b:4d:31:ba:a9:55:c3:01:83:61:2c:21:6f:
48:9f:d5:9d:bf:f6:6a:7f:4a:f0:96:e2:40:6c:c6:
62:62:a0:b8:06:d1:ec:f7:0a:97:15:b5:34:3f:fd:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:CC:77:93:EE:E8:6D:DA:60:99:64:B2:44:CF:95:F3:F2:8A:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1691BF86FC511F0B5A1CCDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:12:30:70:87:bb:32:78:cf:f0:06:34:6d:cc:11:90:84:58:
e4:9c:7e:22:ad:83:ce:29:17:03:f8:64:a3:f2:71:7a:c2:8c:
cf:d5:1c:2d:da:21:1e:1f:3c:75:ba:2d:9e:35:12:f6:18:63:
d3:72:8b:cb:ff:7b:dd:e7:6b:d1:f3:55:55:7c:b2:10:5f:5e:
25:ab:ab:04:e0:0a:73:68:16:54:f5:d3:a0:64:5f:bd:fc:67:
00:ac:d8:62:54:40:63:78:03:aa:81:2b:05:0b:03:30:3f:f5:
b8:3e:b3:fa:7b:19:d1:02:57:a6:ee:33:50:b7:52:76:1f:8e:
e8:01:ec:b7:f7:3f:0e:31:36:16:34:5f:b2:93:a4:d4:fc:5d:
b6:68:9e:18:5d:e8:28:9d:6d:9e:13:7f:32:04:12:26:97:de:
fa:0f:9a:95:e2:6d:86:2a:a2:0b:22:9a:cb:7c:75:40:42:0e:
02:67:81:3f:d7:3e:56:59:ed:5f:40:18:2a:fe:52:5a:bf:50:
26:86:2f:c2:cb:14:18:08:0e:4d:fb:6e:5f:4a:5c:b1:c5:d5:
2a:13:c1:19:38:0d:a6:8c:84:b9:e1:67:2d:8d:79:99:03:10:
f2:7b:43:d9:54:d6:62:53:4c:c3:dc:71:bc:9b:60:fe:6a:1e:
98:f3:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:18 2025 by rpki-client