Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788797225B1C11F0921D2078DAE4EC9C.roa
File: 788797225B1C11F0921D2078DAE4EC9C.roa (raw, json)
Hash identifier: YBwqg1u/Rg7RNxQNqlb3aeTp/V0aB/VMvkkveQ31pHo=
Subject key identifier: 5B:DB:52:58:D6:18:BE:7B:8C:3B:EE:8C:F1:0E:6A:43:22:DA:18:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788797225B1C11F0921D2078DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 10:23:49 +0000
ROA not before: Mon 07 Jul 2025 10:23:44 +0000
ROA not after: Sun 10 Aug 2025 10:23:44 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101376 (0x18c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 10:23:44 2025 GMT
Not After : Aug 10 10:23:44 2025 GMT
Subject: CN=686ba035-47a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:6b:92:05:02:87:79:b5:52:4b:db:6d:b3:
5c:c7:9d:fd:fc:18:b0:68:db:04:48:64:67:13:bb:
bf:b3:95:21:01:39:bf:de:ca:e4:0c:c1:1e:3e:47:
c9:5b:7a:58:31:30:84:7f:10:b2:39:5a:92:23:f5:
88:00:97:d3:92:0d:eb:13:2f:83:be:77:ac:a0:67:
51:21:1f:d4:21:d5:fc:03:91:61:3e:11:45:27:ea:
c6:9e:1b:ec:cc:a2:82:66:4b:2a:81:48:ca:da:5f:
8d:cc:02:50:97:a3:40:95:72:54:25:89:e1:71:c9:
22:cc:9c:0a:f8:6e:59:b6:7b:6d:42:66:f2:79:f3:
c0:37:ee:6d:b3:97:e6:27:18:7d:f5:17:16:2a:a3:
84:d8:5b:29:32:24:13:7f:bd:1d:2f:d1:4c:d8:a1:
7e:fa:a8:73:5b:25:6a:7a:d1:09:c3:bd:6f:f7:0f:
0e:fd:24:34:2a:0c:3a:bc:47:01:60:9b:b7:36:f5:
d4:88:5c:01:5c:89:21:89:0a:c1:17:7a:a8:d7:bd:
53:bd:f3:2d:b5:55:39:5f:a8:2e:bf:dc:9f:c0:61:
db:48:ca:f4:8b:5d:48:fd:ef:04:75:94:97:d4:08:
64:d1:5f:4b:3b:b3:98:90:15:c6:50:1a:ce:8e:1c:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:52:58:D6:18:BE:7B:8C:3B:EE:8C:F1:0E:6A:43:22:DA:18:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788797225B1C11F0921D2078DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:73:62:44:c1:a3:37:f3:f0:f8:03:08:5c:59:b5:f7:1a:34:
e8:9e:5a:b1:0d:ea:46:01:4d:aa:c2:6e:f2:16:c1:2e:a3:17:
3c:0b:10:19:67:f3:3f:87:ac:ae:f9:10:a3:bd:c7:56:37:0f:
3d:ce:ca:06:f6:8e:fe:89:4f:74:a5:80:92:07:7d:6e:80:91:
7e:dd:37:39:36:04:47:0a:52:2e:2c:29:1e:d1:1f:79:62:71:
4f:50:18:d4:13:88:b2:93:07:bb:8c:2d:51:3f:2d:5c:f5:1a:
0b:c4:8e:7b:5f:65:bf:9f:96:d5:1c:92:85:af:9a:4d:b8:38:
cd:09:2c:7d:a4:78:53:34:60:95:36:9b:bc:ad:02:46:54:9b:
95:58:92:02:c4:0a:a4:66:27:38:e6:e8:78:b8:b9:f1:38:45:
35:53:36:f8:5e:93:38:09:38:04:ad:72:50:f5:18:e8:bb:72:
be:fd:1b:1f:ac:67:18:42:58:a0:24:f2:3d:99:4d:f9:3b:72:
8d:b6:01:e9:a9:13:00:2f:70:80:70:2c:01:da:57:f3:53:71:
91:98:04:ab:8d:6c:e4:f6:d0:b3:f0:7b:ce:46:5d:1a:b7:a6:
9a:7d:1e:12:90:f0:47:51:08:05:27:57:d4:55:83:e2:2d:8c:
70:0b:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:46:40 2025 by rpki-client