Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5910A23E5E4211F0B224E7B9DAE4EC9C.roa
File: 5910A23E5E4211F0B224E7B9DAE4EC9C.roa (raw, json)
Hash identifier: RpwRm6QFXvHcES9my+1slzlftvtc5L+m77py0YCywYE=
Subject key identifier: 67:93:0B:5F:0F:07:27:0C:29:9F:38:1A:C0:CC:BB:C7:FB:E3:68:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5910A23E5E4211F0B224E7B9DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:32:31 +0000
ROA not before: Fri 11 Jul 2025 10:32:26 +0000
ROA not after: Mon 13 Jul 2026 10:32:26 +0000
asID: 20473
IP address blocks: 154.81.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101713 (0x18d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:32:26 2025 GMT
Not After : Jul 13 10:32:26 2026 GMT
Subject: CN=6870e83f-644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:6b:33:d2:81:d1:c1:b0:22:4f:f3:95:f5:
01:ef:0d:02:3b:4e:60:60:6b:0e:19:c0:82:be:9a:
de:c6:92:9d:ad:a9:c8:ac:4c:d4:d3:fd:e6:55:80:
34:74:49:cf:46:89:47:96:b7:d7:4a:5c:d8:0b:39:
1f:77:8a:72:ee:50:e4:be:27:b7:e5:a1:55:39:fd:
88:10:49:44:93:6c:54:c1:b0:9d:58:38:d5:36:e6:
d2:5c:9a:db:b8:39:b0:ea:6e:7c:db:4a:52:4e:5e:
3d:8d:85:cb:80:38:90:76:10:df:f7:12:f9:92:3e:
d8:12:e2:bc:1a:5b:3d:d3:b4:fd:41:61:e1:3e:b5:
84:4c:f2:d5:cf:60:84:80:95:fd:16:a1:92:a1:3b:
14:ea:2c:94:a2:19:ac:9e:bb:7a:8c:eb:5a:5d:b8:
5c:4c:5e:c2:97:e3:b6:97:2b:71:55:ad:e4:7a:b3:
a6:9e:7c:37:00:9d:71:17:72:96:9f:71:0b:a4:c7:
b9:b2:07:91:27:fc:c9:ee:b0:b3:f4:6a:72:d5:d3:
ac:07:fb:7d:2d:fa:d1:37:7c:7a:b7:7a:5d:f4:af:
59:98:15:d8:ba:46:68:52:50:dd:b0:19:fb:00:8a:
bc:3d:e3:ad:13:65:8f:52:3b:cc:bd:22:56:47:cc:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:0B:5F:0F:07:27:0C:29:9F:38:1A:C0:CC:BB:C7:FB:E3:68:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5910A23E5E4211F0B224E7B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3e:f6:15:20:f3:b3:8b:f9:70:88:81:a7:87:85:45:e7:67:
6b:34:92:b1:5e:a5:a4:d6:91:c9:f5:b6:3e:11:1e:2b:dd:47:
b3:24:5e:8f:81:6e:d8:58:00:a6:c9:fd:29:40:46:01:fe:10:
ed:c5:a9:ba:68:11:99:a7:32:cb:28:24:c7:ef:81:90:85:4c:
a3:b1:3d:3b:33:f5:4a:51:c9:0c:90:54:02:14:2a:47:7c:8e:
69:b3:0e:7d:f8:77:85:fd:3b:61:ef:98:97:cb:4e:42:be:e6:
a2:6b:f0:26:b8:08:93:3c:f7:06:57:18:3b:93:a3:b7:1b:44:
e7:3c:b0:13:86:1a:84:0a:33:ed:a1:a4:68:c8:87:8d:fc:b0:
b0:09:f6:70:12:39:bb:81:71:65:55:99:93:5d:a7:31:a3:ba:
7b:db:81:df:75:0b:e7:63:84:40:d5:59:20:92:76:e2:51:82:
12:84:38:cb:ce:36:72:f6:8c:7c:09:06:85:0d:d9:8e:d3:97:
71:00:48:59:20:7f:b7:6d:ee:df:9f:cc:e7:c3:76:87:79:ef:
f1:cf:6f:b7:58:cd:b6:03:b2:c4:6f:5d:66:75:ad:04:62:24:
c4:ee:3b:f7:da:96:fd:76:15:1c:08:2f:8f:76:15:6c:6f:3a:
a5:e6:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:03 2025 by rpki-client