Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB830AFC67DE11F0982222E9DAE4EC9C.roa
File: FB830AFC67DE11F0982222E9DAE4EC9C.roa (raw, json)
Hash identifier: Qrr0pvlKt+rHciXfhXQRfenyeiEqdzBM8Sv/1FT+1EM=
Subject key identifier: D0:65:66:47:AF:40:C0:38:DD:01:69:D5:46:56:43:36:05:E1:EC:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB830AFC67DE11F0982222E9DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 16:06:25 +0000
ROA not before: Wed 23 Jul 2025 16:06:20 +0000
ROA not after: Fri 26 Sep 2025 16:06:20 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102212 (0x18f44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 16:06:20 2025 GMT
Not After : Sep 26 16:06:20 2025 GMT
Subject: CN=68810881-9eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:02:b2:aa:36:c3:8b:17:17:0e:06:3d:7a:
30:7e:63:b3:0f:b9:d6:d7:24:41:0e:03:51:85:8f:
09:d3:ff:23:5e:e8:f8:29:f0:02:d1:6a:bb:63:cc:
63:36:45:99:0c:3d:4d:63:0c:4a:cf:8e:81:b1:a6:
5e:35:fe:c8:18:4f:21:bc:71:28:1b:96:25:64:1f:
71:c4:eb:8a:cc:51:b4:7d:06:39:81:f1:a7:fb:5c:
c1:d9:73:9c:58:83:32:14:6d:a2:7b:95:a2:95:1b:
32:e9:c1:1e:14:30:48:2c:79:61:74:c2:ed:69:37:
be:08:50:5b:62:b2:2b:5f:4c:a6:8b:88:1a:b0:fd:
3e:4a:8a:23:f8:af:74:c5:d7:b0:4d:d0:b0:e2:47:
05:2a:6f:ce:cd:8c:37:4e:8b:0c:b6:92:22:98:3b:
e2:0f:96:37:ec:4b:a1:61:c1:80:94:6b:54:38:6e:
f6:3b:a4:4c:d8:60:ea:0c:ee:f4:4d:eb:cf:32:1d:
8b:89:61:27:09:70:00:12:cf:c9:af:1f:20:2c:7a:
1d:0f:6e:2c:39:d5:dd:0c:ae:a2:60:c1:f7:e7:eb:
f4:b7:c7:69:b6:f2:5d:e7:fd:7f:94:95:42:5f:8e:
c5:c9:91:7d:da:b7:91:6b:12:bd:41:53:a7:9a:f5:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:66:47:AF:40:C0:38:DD:01:69:D5:46:56:43:36:05:E1:EC:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB830AFC67DE11F0982222E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1b:4f:bd:01:a1:e8:0a:54:84:b2:ad:6e:14:16:62:87:5a:
e9:83:11:ba:aa:13:07:c5:37:20:ee:cb:3c:e5:61:19:03:1d:
3f:7f:4f:a5:82:8d:55:fe:4f:9b:c5:08:94:70:aa:f3:fd:f5:
42:7b:7b:f1:90:b1:10:c8:06:fe:40:3c:ae:45:a1:95:c9:f0:
c9:4e:75:86:90:7f:60:f9:80:ec:af:9b:16:b0:9a:b4:e6:f7:
c4:e3:71:e5:05:08:5a:d4:39:b4:56:cf:86:e3:5c:db:f1:ae:
79:ba:97:e4:98:c1:46:be:4d:28:32:46:58:62:ee:4f:89:d5:
04:9b:20:0c:d8:22:7b:c2:00:22:1c:e8:d1:f7:9e:b9:b8:15:
7a:26:5a:ef:d5:68:8b:df:13:f8:0e:6e:1f:d3:74:b2:d7:27:
f3:24:c8:af:ea:a3:d1:99:b9:75:72:57:5a:3f:84:96:77:38:
8b:2d:31:5d:82:00:5c:c7:e9:50:4b:a9:78:41:75:96:ce:94:
1e:14:d2:46:ae:77:b8:24:df:d5:5a:c5:95:01:60:ef:37:c1:
f5:62:54:fe:1d:71:65:07:9e:e9:7b:6f:21:1b:f7:60:89:2b:
04:9b:44:8d:f4:24:dd:5b:3f:3b:8a:60:17:16:7b:db:ba:a4:
53:2e:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:07 2025 by rpki-client