Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131D836E613F11F08CB032BFDAE4EC9C.roa
File: 131D836E613F11F08CB032BFDAE4EC9C.roa (raw, json)
Hash identifier: YBCWbb5NZ7lNixAJ+aCWhBDVvEBDtIYh/9amZPwvSaw=
Subject key identifier: EB:30:A5:A0:BA:BA:42:14:31:B7:A0:1B:F1:CE:EC:C0:6F:DE:38:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131D836E613F11F08CB032BFDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 05:46:38 +0000
ROA not before: Tue 15 Jul 2025 05:46:33 +0000
ROA not after: Tue 21 Apr 2026 05:46:33 +0000
asID: 13335
IP address blocks: 154.207.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101826 (0x18dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 05:46:33 2025 GMT
Not After : Apr 21 05:46:33 2026 GMT
Subject: CN=6875eb3e-c12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:b1:fe:35:62:e9:1f:12:45:38:3a:03:16:
af:ca:e4:7e:29:44:c6:54:58:70:fb:51:34:3e:ef:
d2:16:ad:90:9a:92:27:43:63:4c:f7:b3:64:64:7a:
93:a9:a7:d5:75:7f:9e:e6:b9:c7:1a:fc:96:6b:c7:
40:6e:23:6b:86:6b:de:f1:61:d0:35:1d:75:95:73:
75:d3:e4:72:e6:0e:94:4d:31:23:68:eb:10:63:67:
21:7c:2a:15:f5:ed:cc:5e:75:61:a7:31:b5:ab:9b:
06:26:3f:99:39:f8:7a:55:3c:30:6f:e7:d1:f8:6f:
c0:41:13:55:40:3c:81:84:97:97:d1:15:06:21:3e:
59:ef:c0:46:57:4b:0a:29:05:35:b5:40:99:4d:8a:
b3:f9:e5:bf:6a:e0:cc:c1:32:d1:0b:23:ba:59:fc:
96:52:56:db:f3:a5:07:81:a1:69:32:d2:8c:47:da:
dd:43:83:d3:df:47:87:62:5b:46:71:7c:08:95:40:
8f:8f:69:18:82:e3:aa:58:54:bd:13:48:6f:c2:e8:
8c:cf:af:dc:3f:87:b2:42:0e:53:ed:2f:ad:4c:17:
10:03:3d:03:dd:77:28:16:82:c6:2d:7d:c2:36:94:
cc:7d:f9:83:7c:09:24:af:55:ac:06:df:4d:31:2f:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:A5:A0:BA:BA:42:14:31:B7:A0:1B:F1:CE:EC:C0:6F:DE:38:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131D836E613F11F08CB032BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:07:56:96:27:86:33:e3:a4:83:08:4a:f5:56:be:a2:70:d5:
99:a7:1b:67:4d:83:a2:ab:6c:1c:19:fb:37:01:72:f4:1d:f1:
0b:07:53:b4:d0:0b:31:59:f1:21:36:fa:65:dd:9f:4b:cc:96:
56:81:81:61:1c:17:98:61:29:0e:b8:41:95:d3:8f:8b:ec:dd:
a3:5c:de:80:76:6f:c4:ef:75:4e:da:3e:21:0e:d8:5c:ec:8d:
14:aa:db:f2:7a:72:0c:3d:9c:69:d5:30:d1:8e:4d:2c:14:60:
49:1f:96:42:ef:7f:65:90:09:5e:46:10:ff:9f:79:bb:7b:d5:
f9:27:49:73:03:7d:89:84:d9:e3:e5:08:a9:ba:58:8c:19:94:
ae:c9:e0:15:da:cf:11:ab:66:71:e9:cc:49:0d:8f:1a:57:f3:
f9:85:15:9b:91:c7:d8:c0:68:fd:53:b6:6a:27:ba:ab:ba:9c:
6d:a3:78:cb:d2:bc:9a:d7:d7:3a:05:81:03:27:1f:bc:1d:5d:
ff:42:06:81:ed:57:f0:5e:4b:ef:b4:e3:c6:ec:2b:fa:2e:3d:
c4:a4:cb:73:c2:e7:4f:a0:c5:b9:19:b4:3d:1e:c3:29:c5:c2:
f7:ee:9f:9a:59:6d:b5:e7:d4:87:ae:bc:53:80:ce:6b:19:75:
52:21:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:42 2025 by rpki-client