Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A4305C45B4C11F0819B00A8DAE4EC9C.roa
File: 4A4305C45B4C11F0819B00A8DAE4EC9C.roa (raw, json)
Hash identifier: FOT52ddl2kMyS7r8rt/0PGELwu3SFec+jnB1nzocuMc=
Subject key identifier: E9:1D:54:3C:25:C6:41:7A:E7:C7:A4:79:0A:64:26:DB:1B:B8:36:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A4305C45B4C11F0819B00A8DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:06:07 +0000
ROA not before: Mon 07 Jul 2025 16:06:02 +0000
ROA not after: Sat 16 Aug 2025 16:06:02 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101422 (0x18c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 16:06:02 2025 GMT
Not After : Aug 16 16:06:02 2025 GMT
Subject: CN=686bf06f-4e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:5a:36:87:76:dc:22:f2:d6:2a:8b:2f:47:
6d:fc:9e:ec:5f:46:02:a5:7a:c0:db:c0:fd:8c:1c:
06:39:23:2e:85:fb:ce:8f:56:73:6b:8c:9a:d2:8d:
d8:be:ff:36:70:87:56:5b:c1:be:6b:50:52:c7:19:
25:45:d6:fa:2e:e4:17:0a:1d:cb:49:8d:65:94:7f:
22:9a:ba:b8:14:0d:43:e4:79:2b:a5:0e:02:86:84:
b8:43:5b:38:d2:54:a1:c9:df:1d:7d:22:6b:79:b2:
b2:92:fb:3d:27:6e:71:f9:6b:1f:24:d3:ab:36:36:
3e:f3:de:f7:78:8d:3e:1c:be:04:da:1a:b4:43:f5:
f8:f0:e8:3b:a1:1d:0c:73:f3:9a:ac:cc:6c:f1:99:
f4:01:88:a3:40:60:67:9c:c5:95:2d:8f:ed:02:26:
53:13:e5:d5:c4:d8:76:6b:68:f3:20:1e:46:0c:2c:
5e:c7:0c:98:30:26:2d:41:04:8c:45:42:6f:01:2a:
fe:fb:ad:ea:a2:6a:5a:3c:ae:3a:12:1b:eb:07:b6:
a8:b1:aa:03:63:71:da:ab:cd:fc:25:ce:68:38:28:
14:71:fd:4b:6c:b0:93:62:c7:88:37:84:e6:b8:dd:
c2:51:4b:e1:a4:25:fa:85:e0:b4:25:69:d5:8e:8c:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:54:3C:25:C6:41:7A:E7:C7:A4:79:0A:64:26:DB:1B:B8:36:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A4305C45B4C11F0819B00A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:8e:64:08:b2:5d:f2:0c:2e:16:d3:19:b5:cd:68:62:5b:e6:
6d:aa:45:63:3a:1a:15:1e:12:9c:18:2a:63:ba:83:0e:82:20:
ca:80:0a:7b:a0:07:01:cc:32:e6:20:6e:ae:ef:ae:d7:a5:8a:
f7:0a:7a:10:d9:ce:ce:9a:75:a5:15:82:9d:51:c4:db:ac:36:
bd:77:a9:aa:21:24:c3:3a:46:03:36:31:40:df:23:8f:77:51:
c9:e7:07:fe:d6:3c:1a:96:3c:6b:df:66:11:2d:40:9c:00:03:
ee:1f:77:6f:6e:47:84:55:51:21:c6:bf:8a:4d:40:1d:d9:92:
5f:97:6e:47:ce:af:da:17:9a:da:60:86:ec:50:a9:d5:37:b9:
f4:a1:a3:7b:1a:56:c1:1a:e7:d9:b7:bf:88:f1:36:a8:9d:32:
e2:37:6a:d3:e4:66:c4:e4:7f:54:06:8f:6e:ca:33:42:17:1f:
51:b0:a7:36:be:20:47:ab:e2:ba:52:c0:88:2b:5a:0f:28:d6:
58:83:7c:a7:0b:b0:37:c1:df:2e:47:ba:b1:91:eb:a8:db:f6:
c6:65:bd:4d:b5:38:6f:61:01:9d:b5:c5:35:68:d5:e5:07:9c:
44:93:2e:4f:91:c2:cd:0e:7d:25:de:72:03:99:02:48:72:62:
7c:bf:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:41 2025 by rpki-client