Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD29C0486FF011F08BF242F2DAE4EC9C.roa
File: FD29C0486FF011F08BF242F2DAE4EC9C.roa (raw, json)
Hash identifier: IHd97pNJuwtZjAFXXrx+Wm+rYt1nhZdgcIxc1Jta/y4=
Subject key identifier: 39:66:F0:8D:CA:F3:CC:6A:AC:C9:AE:4F:79:3D:A5:03:D0:45:3A:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019086
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD29C0486FF011F08BF242F2DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:35:28 +0000
ROA not before: Sat 02 Aug 2025 22:35:21 +0000
ROA not after: Sun 05 Oct 2025 22:35:21 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102534 (0x19086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 22:35:21 2025 GMT
Not After : Oct 5 22:35:21 2025 GMT
Subject: CN=688e92b0-67f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:a2:bc:49:e2:2a:97:01:b0:d2:b9:43:b7:
18:67:d6:66:0d:e9:6c:cc:a4:d7:73:c3:a3:9e:58:
26:58:cd:a6:93:df:13:db:4b:60:1f:1e:67:93:a6:
15:f0:f5:a4:47:ed:fe:e6:6e:3d:0b:9c:d9:d5:f3:
dc:b5:6b:c9:be:05:d5:ea:0f:4c:9b:5b:85:f1:38:
83:fe:8f:3c:26:a5:6b:4c:49:ea:bc:6b:2f:e9:54:
90:2b:ec:1b:34:c1:cb:90:56:70:04:f7:dc:a9:4a:
fc:b8:a1:9c:33:26:4e:f9:78:a4:a9:08:59:26:d0:
8a:b8:19:63:78:b2:4b:9f:42:2b:94:b7:43:04:11:
0b:8a:70:7d:50:43:29:d3:17:e5:61:ce:84:cc:3d:
1a:b5:4e:b6:00:2c:c1:d9:a4:ca:b1:cb:d8:0a:4e:
40:4b:b8:01:0c:97:9d:b5:60:30:65:1e:60:36:e1:
b2:1f:d6:06:c6:da:ce:ca:39:9b:6e:c0:d4:6a:14:
ce:19:91:0c:97:e5:08:5b:8a:02:03:22:1a:fc:96:
63:c0:e1:dd:b4:bb:ce:7e:be:81:a6:b3:12:80:c2:
e7:18:25:05:55:0b:9c:d8:bd:e9:d3:8e:49:21:87:
57:6f:cd:da:65:02:34:53:16:7c:72:18:81:76:bf:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:F0:8D:CA:F3:CC:6A:AC:C9:AE:4F:79:3D:A5:03:D0:45:3A:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD29C0486FF011F08BF242F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:f4:09:a1:ae:dc:3a:d1:d6:c6:e0:64:59:2b:84:6f:da:d7:
ba:4c:f1:4f:74:61:84:96:44:f7:0c:51:d4:f4:37:33:c3:e8:
08:70:64:54:f0:a2:54:e5:31:16:1b:c0:81:dd:96:37:9b:5c:
5b:29:5b:4f:3d:f6:96:d9:fd:93:a8:eb:36:0a:05:91:2b:c4:
4c:49:a1:c4:e6:e4:62:2a:4c:a3:b2:be:33:f6:1b:4b:f0:9c:
91:22:7a:e5:34:39:36:f6:91:f1:6e:cc:fa:13:f4:9a:89:9e:
ae:9e:67:bf:3d:dc:3c:6a:ed:04:ac:11:c0:c6:11:32:d9:2b:
3d:4f:98:a6:b0:a3:f5:33:1f:3a:dc:33:b3:07:eb:5f:3d:cc:
64:b1:7d:6a:4d:86:d9:17:bf:5f:d9:25:d8:1a:84:cb:a2:b4:
03:b8:e7:ed:28:80:78:18:a5:56:eb:24:96:c5:28:d2:cd:20:
3a:cc:db:b8:5e:59:ee:b1:e2:40:2c:79:a6:e9:0a:57:1f:f4:
ce:21:a9:e6:4c:2b:bb:0d:ff:aa:2b:24:96:9a:72:7e:30:66:
92:e0:48:cc:b3:31:0d:04:17:68:d8:73:0f:5f:dd:30:81:23:
d4:fd:69:47:78:1d:2e:a0:01:9b:57:45:54:e7:23:a8:ab:b5:
03:22:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:08 2025 by rpki-client