Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7F3A3C5B5D11F0A6FC2E94DAE4EC9C.roa
File: 5A7F3A3C5B5D11F0A6FC2E94DAE4EC9C.roa (raw, json)
Hash identifier: 2hy2KAQJCnQhFrqbKWt0EaHQREaQ+IvQwlzSwUx/J2c=
Subject key identifier: F2:8B:AD:6E:99:6A:5B:AE:42:DE:D6:2C:7F:8C:E7:73:48:6E:7A:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7F3A3C5B5D11F0A6FC2E94DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 18:08:16 +0000
ROA not before: Mon 07 Jul 2025 18:08:11 +0000
ROA not after: Sun 24 Aug 2025 18:08:11 +0000
asID: 138195
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101442 (0x18c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 18:08:11 2025 GMT
Not After : Aug 24 18:08:11 2025 GMT
Subject: CN=686c0d10-46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:63:56:eb:e0:2a:48:4e:d7:94:a2:a1:fe:
f7:ec:08:48:68:ff:76:a9:4c:ed:cc:59:dc:12:70:
0c:42:c5:14:61:18:96:76:0e:ea:55:b2:4a:16:da:
c9:83:38:46:55:fd:27:a9:e8:26:53:1f:b9:54:c7:
f5:1a:66:21:6b:d9:a3:8f:e4:28:35:9c:c5:d8:90:
19:f1:84:bb:97:52:a5:f5:e1:bc:b1:46:bc:90:ba:
f1:79:04:54:71:17:40:e6:b8:94:5f:ec:c0:e5:ef:
cf:d4:1f:3b:bd:64:ba:14:81:ed:bd:d3:fe:83:e1:
6c:2d:24:09:cd:13:31:22:1f:ef:d3:2c:0f:70:94:
d2:a1:6c:16:85:42:63:11:8f:6a:32:fa:1d:70:45:
b0:d1:36:40:35:26:61:dd:5f:13:78:9c:64:52:fe:
7f:0a:5b:12:60:71:cb:f8:f9:95:fc:36:1d:f8:1f:
ba:89:71:45:59:ba:a6:81:8b:1d:00:7d:88:1a:a1:
1e:73:98:d2:68:8e:ee:9e:1b:ee:fb:48:72:19:12:
fa:b1:96:67:dd:0b:fa:94:c3:fe:d3:28:23:fd:50:
7d:18:9e:bd:e5:f4:09:89:ef:17:55:a2:7b:07:0e:
ce:b9:e1:a0:46:84:cd:a4:40:7e:06:54:44:0d:38:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:AD:6E:99:6A:5B:AE:42:DE:D6:2C:7F:8C:E7:73:48:6E:7A:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7F3A3C5B5D11F0A6FC2E94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ee:92:66:2f:3a:7b:8e:bc:25:a7:8b:82:32:23:30:a2:20:
9b:2b:db:0c:3f:72:61:3f:79:d1:57:c4:4d:7c:bc:67:a5:6a:
80:41:6f:56:84:c6:8c:93:da:bf:69:a9:eb:e7:d7:28:08:10:
c2:c6:d3:6c:48:86:58:43:2a:b4:8b:64:55:65:a2:d9:71:05:
54:fb:39:ce:9c:ac:d7:d4:9d:cf:63:34:18:c6:26:86:d7:f4:
76:b0:61:5c:cf:5d:57:c6:53:59:a7:a3:11:a0:f3:8e:6e:b0:
52:40:3b:f1:7b:2b:91:8c:7c:43:1a:24:a9:56:14:aa:80:42:
76:cd:96:42:b7:5b:d0:7f:64:31:e3:2c:43:1d:0c:27:96:75:
2b:2f:b3:57:8a:5a:9c:df:52:23:92:ab:c5:60:c6:65:00:2a:
85:6a:2d:f0:f9:03:eb:93:19:d4:ad:22:e2:39:90:59:02:d2:
1c:e3:4b:f1:d6:55:18:1e:7f:ff:53:0e:2c:14:30:62:07:10:
a1:ff:81:88:84:1b:82:e6:1f:48:12:08:58:59:cd:8f:43:9e:
e9:72:b2:fa:f0:5d:ff:b0:96:db:27:13:2a:29:b2:dd:6e:7c:
b9:65:8e:30:17:fc:fb:da:20:bf:03:f1:69:9f:be:0c:8e:bc:
2c:c6:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:32:26 2025 by rpki-client