Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050BFC82591611F0BD553BBBDAE4EC9C.roa
File: 050BFC82591611F0BD553BBBDAE4EC9C.roa (raw, json)
Hash identifier: T149K4U7f3y19Y5JdXaywbhUqijAF0FquTLdMkHcp0U=
Subject key identifier: 9C:EF:DF:A0:5E:3F:98:A0:8B:2E:A1:85:D0:31:E7:E1:7A:4F:B8:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050BFC82591611F0BD553BBBDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 20:32:36 +0000
ROA not before: Fri 04 Jul 2025 20:32:31 +0000
ROA not after: Fri 17 Jul 2026 20:32:31 +0000
asID: 139923
IP address blocks: 154.193.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101044 (0x18ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 20:32:31 2025 GMT
Not After : Jul 17 20:32:31 2026 GMT
Subject: CN=68683a64-8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:58:ec:7e:e7:ab:ab:03:a9:c6:3e:db:56:
5d:e0:52:3c:b4:c3:df:d3:ac:e4:84:a7:0c:a2:41:
87:18:55:6a:4c:af:15:b8:4b:84:cd:79:4f:68:a0:
38:40:ba:dd:5c:b4:42:e0:d5:a4:cf:29:55:78:ee:
49:e2:f3:cb:79:31:86:05:90:fe:8a:e5:14:23:5c:
ac:4a:12:9f:36:90:c5:35:50:9b:88:6d:87:93:f3:
b3:c6:fe:65:ff:14:21:35:f5:02:79:80:b3:27:6c:
78:13:25:2e:4e:a4:2b:5c:ef:4d:57:54:0f:ce:5b:
c5:02:fb:12:6f:8d:9e:02:47:d3:19:c8:f5:82:4a:
bd:44:2c:16:53:a1:97:1e:c7:64:50:13:9b:81:23:
5b:ec:d6:01:3a:2e:ff:df:aa:4d:89:26:b3:f4:61:
b4:61:52:af:c3:ac:b6:a9:14:61:bf:69:7d:74:cd:
c7:45:73:38:21:e5:fb:22:30:e2:39:a0:6c:54:43:
0b:c5:18:95:98:72:98:2a:9d:5a:c9:a9:7f:38:44:
e7:c6:eb:59:80:88:27:7e:c0:a7:96:f9:98:68:59:
a4:e7:98:92:32:74:74:00:5b:fc:13:42:31:84:fb:
41:61:56:a1:ea:a9:1b:db:15:92:4f:96:20:ef:fc:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:DF:A0:5E:3F:98:A0:8B:2E:A1:85:D0:31:E7:E1:7A:4F:B8:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050BFC82591611F0BD553BBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
91:a8:ea:73:04:63:8c:b1:77:1d:a4:d6:ee:95:ac:8e:55:bc:
47:0f:a7:59:95:a2:f6:7f:1a:6e:d5:19:1f:e9:b4:cb:cf:bf:
7c:e0:75:1a:7a:eb:67:59:83:c5:20:33:3d:8b:bf:e4:e0:64:
0e:2e:c2:42:ab:16:2a:f8:a0:73:9d:a4:54:b0:1b:a9:91:75:
a7:e4:77:b1:50:94:46:df:c0:a8:e4:56:5f:7a:d2:c4:6f:d1:
b2:4e:e8:b2:f2:e1:15:49:e8:d2:25:9f:b1:7e:6c:06:9a:dc:
a0:bf:95:83:fe:0d:f6:96:90:af:99:7b:1d:a4:fc:41:35:a6:
96:26:77:c8:fe:5a:c2:53:34:f3:e3:1d:c7:7a:90:77:6b:fb:
6c:1c:35:41:cc:b3:7f:67:d0:dd:77:2d:89:54:c5:87:1c:56:
2c:2d:05:69:61:52:be:3e:d9:73:57:a0:fb:95:ed:bd:fd:e3:
b5:4a:d9:eb:e5:af:09:88:11:cd:39:28:47:58:e9:ea:95:9c:
b3:58:71:59:cc:91:86:14:88:63:b2:a3:86:8d:2a:f0:83:39:
b2:ee:2d:f6:b0:33:24:a8:0e:60:70:bd:6c:e3:c1:6d:33:ff:
ec:f8:7c:2f:be:8a:08:32:8c:4d:5b:0b:65:25:8c:0e:00:7b:
cc:98:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:34:28 2025 by rpki-client