Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7925ABF058B611F0846435D6DAE4EC9C.roa
File: 7925ABF058B611F0846435D6DAE4EC9C.roa (raw, json)
Hash identifier: h3yxVVlKii8RoVtWv3zB0jKvfp3IXx4bkh7hX5BX10Y=
Subject key identifier: 5C:0F:03:23:D7:DF:E3:22:61:E7:4B:1B:FD:93:96:AB:51:C5:FB:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7925ABF058B611F0846435D6DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:08:39 +0000
ROA not before: Fri 04 Jul 2025 09:08:34 +0000
ROA not after: Tue 07 Jul 2026 09:08:34 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100916 (0x18a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 09:08:34 2025 GMT
Not After : Jul 7 09:08:34 2026 GMT
Subject: CN=68679a17-0956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a8:5d:b5:ca:47:af:dc:6a:b1:85:be:3d:f2:
e8:94:3d:58:f0:16:90:70:be:d7:a3:16:0b:81:d8:
56:8b:7b:4c:08:ff:a6:e6:b4:4e:04:c7:a1:c4:e3:
37:90:7e:d7:92:5d:71:90:a1:82:bf:c5:6c:e6:92:
1b:81:9f:1f:17:91:23:7d:9f:39:a8:0d:3b:88:c1:
f9:b1:09:50:be:39:af:1f:68:6e:ae:55:4b:54:e7:
8e:a7:1a:a5:e9:69:bb:0d:61:b1:ea:dc:76:9c:bd:
07:df:ea:df:1f:0d:b1:3e:47:dd:dd:41:43:2e:ae:
da:6f:bc:7d:ef:27:29:c2:65:ef:1e:f5:2d:7c:78:
9f:80:fc:0d:c4:9d:27:9e:8e:06:96:eb:65:92:05:
b9:e2:6e:db:d5:30:20:69:e4:a6:7a:a2:40:2f:97:
bf:30:63:b0:b6:d1:bd:13:86:ad:17:e8:c7:0a:77:
8b:07:18:ee:44:a4:e0:bf:ba:25:75:e3:39:cc:7c:
6d:53:c3:b3:fa:5e:be:1b:e2:99:5a:fe:0a:b0:bc:
31:58:59:aa:85:b3:19:f7:77:9c:67:56:c9:ea:94:
8e:c6:60:f0:7d:5a:44:23:60:4c:3a:96:72:e3:8c:
cb:51:c2:41:a0:2d:2f:68:c8:1b:de:e2:33:a7:09:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0F:03:23:D7:DF:E3:22:61:E7:4B:1B:FD:93:96:AB:51:C5:FB:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7925ABF058B611F0846435D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bb:9d:83:9e:cf:e1:10:e9:c6:60:ee:bb:72:0e:4b:14:00:
0d:f6:93:51:8e:4b:17:ee:e9:b4:6d:7e:0f:f8:73:6d:92:ef:
ca:33:ef:fd:97:bf:96:0f:22:2b:2d:45:82:86:db:bb:08:65:
51:c7:01:e9:52:53:84:03:33:e8:ba:30:7b:b7:02:2e:68:78:
ef:8e:dd:ac:5d:b9:0c:88:1c:57:f1:ae:33:99:c9:65:17:6f:
09:3e:a0:f1:ad:25:c9:9e:da:b9:ce:45:27:4c:8b:87:05:4b:
10:2d:2b:aa:c1:2c:b3:d5:65:0e:a6:90:90:43:da:91:9f:8a:
c3:7f:bb:ba:34:dc:04:97:e5:b3:42:e7:6e:8b:45:dc:4f:6f:
b4:e2:ec:df:23:33:49:71:60:92:e8:1f:39:41:77:3d:93:6a:
87:1b:67:7c:a9:9b:7e:8b:b7:41:a6:d5:7e:fc:79:10:22:d7:
9d:98:8e:e8:50:b3:3d:97:81:3f:5d:d8:5f:87:19:34:19:88:
7b:d5:c6:ce:ef:81:06:fc:2d:c4:a4:b4:1a:91:ba:1d:8c:8f:
b4:36:f5:27:a0:ea:83:9c:82:ae:1c:a6:a0:f6:49:6d:54:ba:
44:2d:83:ef:e8:fb:ad:2a:7c:2a:d4:45:b1:eb:86:7d:a9:9d:
5f:3b:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:47 2025 by rpki-client