Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F94D2A646ED311F0A7E9E5BBDAE4EC9C.roa
File: F94D2A646ED311F0A7E9E5BBDAE4EC9C.roa (raw, json)
Hash identifier: W2qMLMVecGLYbO3H8E7FAOjtmY2t4sU2oTNcbs42bLM=
Subject key identifier: 03:50:DB:B0:90:D5:46:D8:0C:0F:4A:62:36:3D:ED:81:5B:D8:E1:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F94D2A646ED311F0A7E9E5BBDAE4EC9C.roa
Signing time: Fri 01 Aug 2025 12:35:15 +0000
ROA not before: Fri 01 Aug 2025 12:35:10 +0000
ROA not after: Mon 01 Sep 2025 12:35:10 +0000
asID: 149940
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102433 (0x19021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 12:35:10 2025 GMT
Not After : Sep 1 12:35:10 2025 GMT
Subject: CN=688cb483-f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:c0:98:80:52:2a:37:a0:1a:3c:5a:78:b8:
10:0d:12:b1:c7:92:b9:44:41:ae:77:79:92:fb:e1:
00:7e:d4:5e:8d:e4:da:af:81:29:2d:d1:e2:bc:12:
3e:40:b9:c1:7c:39:81:c1:2b:79:fa:34:49:2a:7f:
eb:0e:67:01:b0:6e:b7:36:74:70:56:a5:6f:7e:ab:
46:48:15:af:66:bc:bd:d5:5e:86:dd:8d:6c:8b:3f:
89:61:82:de:b5:d3:44:17:5f:a0:8b:28:8a:9e:0f:
1e:4d:df:06:dc:e3:da:ee:be:6c:3d:36:e8:7b:70:
72:bd:d7:c7:81:c2:74:82:8b:82:ac:78:52:7f:5c:
4f:50:a5:89:46:8a:df:45:fe:63:a5:a8:e8:bb:ca:
26:5f:8f:bc:7b:9a:09:9c:fe:fb:c3:c2:f0:aa:3c:
5c:02:91:79:4e:86:c5:1d:df:62:40:f3:dd:6c:2e:
64:2f:e5:62:2c:be:5b:40:fa:bd:9b:58:98:a4:ae:
0b:81:61:94:4a:b5:d5:bf:51:f3:c0:72:e7:43:bd:
e6:14:39:10:bd:5d:1b:e0:65:59:e0:d7:7f:70:1c:
18:47:fa:48:5b:5a:a0:5f:42:a7:97:62:b1:63:c6:
26:bd:b6:95:a7:e4:cd:04:a3:d0:d9:cb:dd:24:15:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:DB:B0:90:D5:46:D8:0C:0F:4A:62:36:3D:ED:81:5B:D8:E1:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F94D2A646ED311F0A7E9E5BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:15:38:92:1e:a6:ff:3a:55:b4:e9:62:65:8d:67:17:d9:fa:
d1:b9:4b:dd:b9:f5:2e:7a:24:22:a0:2e:71:f2:f6:b4:18:31:
ca:4a:f2:49:89:b8:4b:7c:70:22:03:68:a8:c0:09:0c:95:0f:
57:1a:8b:ff:75:c5:f5:dd:15:8d:e2:1b:9d:6a:55:48:1d:3b:
af:cc:37:b1:38:de:67:5e:91:24:ba:ee:75:4c:3d:24:a7:5b:
aa:b6:91:52:e3:56:c4:c3:a7:6d:5a:9f:98:0c:39:27:91:56:
e3:0a:4e:7e:7e:f5:ca:dc:e9:62:39:27:0c:4c:b0:f2:79:10:
e2:ed:b5:63:37:4d:5b:3e:23:94:0a:26:23:a6:e6:e7:36:d0:
6a:be:2a:e1:3d:4a:e1:a7:39:4a:e4:bd:5d:fb:0f:4c:29:b0:
fc:bf:de:67:b2:5c:d1:12:50:af:3e:73:f7:96:af:21:75:58:
44:cc:f6:86:d6:19:ec:29:9b:62:7b:38:ee:fa:eb:ab:0e:56:
36:35:08:8a:fd:ae:34:9e:5a:e1:7a:99:87:8a:29:9c:6f:bf:
27:eb:75:81:42:82:42:4b:ef:ad:e5:68:37:4b:e4:5d:aa:f3:
e1:7b:43:c7:9d:20:f8:c1:48:19:45:33:d5:7d:f1:c9:45:b8:
ae:d8:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:36:55 2025 by rpki-client