Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685F5E8A5A7111F0A8398E96DAE4EC9C.roa
File: 685F5E8A5A7111F0A8398E96DAE4EC9C.roa (raw, json)
Hash identifier: zIrWqSuIHnN6z2F09F1gfQuIisEcsl3N5pEn7SUc3M8=
Subject key identifier: 92:05:C7:6E:BB:24:D6:25:34:7E:01:3E:31:CA:E9:83:81:18:DA:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685F5E8A5A7111F0A8398E96DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:59:18 +0000
ROA not before: Sun 06 Jul 2025 13:59:13 +0000
ROA not after: Fri 08 Aug 2025 13:59:13 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101242 (0x18b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 13:59:13 2025 GMT
Not After : Aug 8 13:59:13 2025 GMT
Subject: CN=686a8136-f27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:d7:d0:a9:15:3f:1f:da:f0:70:f5:b1:6a:
34:9a:bb:28:32:3c:4a:2d:99:64:76:8a:04:28:2e:
2b:7c:61:b8:d0:64:e8:d4:d5:f2:37:cb:14:d8:01:
50:37:7a:b0:a9:a5:e7:ad:3d:63:bb:05:d2:48:79:
58:98:85:53:76:0c:b4:ea:57:50:7f:af:77:26:1a:
2c:23:db:e5:99:e5:76:6a:62:f9:86:85:f5:a8:ae:
b4:3d:2c:ec:59:80:36:89:42:5d:c6:b2:74:fd:f0:
a2:a5:e2:52:ad:e8:23:91:88:87:f0:ad:98:e0:c1:
93:8e:f0:b8:2e:51:25:87:81:14:f0:46:31:8e:e8:
9a:5b:2a:bf:b8:b1:06:a9:20:b5:ed:15:fa:cd:bc:
4a:aa:f4:1f:a5:77:46:58:58:d9:0d:3a:55:5d:ac:
b3:e5:f0:bc:d5:e6:bd:c6:05:83:a0:3c:df:16:cc:
7a:88:b5:f7:60:1e:2a:c4:bd:cc:8b:cf:c3:9a:97:
f0:5d:63:7b:5d:0b:1f:d5:7a:1a:0a:14:10:91:3e:
12:02:81:7f:99:53:7a:68:6d:93:21:82:b6:5f:b1:
19:5f:a8:71:8c:08:7b:84:82:5c:d0:70:04:b8:40:
43:b2:d3:d0:66:99:a9:09:9e:0b:9a:91:35:b6:40:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:C7:6E:BB:24:D6:25:34:7E:01:3E:31:CA:E9:83:81:18:DA:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685F5E8A5A7111F0A8398E96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
65:97:d7:8e:7d:24:23:3c:9b:5b:db:d7:e4:6b:7c:c0:64:51:
ff:ca:d8:32:9a:31:15:01:c4:c4:ea:df:d1:27:ad:6c:ac:69:
8c:5e:83:a7:b6:db:88:9b:77:be:6f:c7:76:e2:02:78:7a:ac:
ba:e7:f5:22:38:ab:91:88:5f:69:6b:35:d6:72:80:22:c7:bd:
ef:18:9d:08:b2:57:b4:d9:e8:ac:f9:fb:ba:f9:13:23:a7:85:
4b:da:02:05:d1:90:7a:22:e2:23:1b:d2:c4:8a:0f:e3:02:7e:
08:ef:39:14:b4:37:60:79:2e:f9:77:f0:70:14:3a:b3:1b:6a:
15:cc:4b:e7:d5:d3:06:0f:51:06:84:23:c9:7b:88:ff:7c:c7:
2f:f2:57:2e:dd:d4:63:06:7c:b8:df:be:6e:56:79:37:4a:30:
70:8e:c2:91:38:73:1e:16:9d:59:8f:84:74:51:b4:c8:0c:04:
c3:1c:81:36:58:f7:af:6d:54:1c:1f:92:24:ed:42:6e:74:d0:
aa:67:ef:d5:68:b4:e7:03:d0:6b:bf:fa:ab:e5:e5:a4:9d:93:
bb:92:9d:4d:ad:10:88:c3:35:56:07:66:e2:16:bf:f0:61:c6:
5a:82:b9:d9:84:c4:a5:67:5a:98:c7:85:06:42:90:70:15:d0:
94:f1:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:15 2025 by rpki-client