Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73E6265CA611F0BEF55680DAE4EC9C.roa
File: 7B73E6265CA611F0BEF55680DAE4EC9C.roa (raw, json)
Hash identifier: CyCR65aYRixEY9eEntdZ3Do+mmEi/V2ZE6bm0IWMFrA=
Subject key identifier: 01:C5:AF:11:67:23:03:A9:1E:74:CB:1E:62:D9:65:23:66:BE:6C:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73E6265CA611F0BEF55680DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 09:24:16 +0000
ROA not before: Wed 09 Jul 2025 09:24:11 +0000
ROA not after: Tue 05 Aug 2025 09:24:11 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101532 (0x18c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 09:24:11 2025 GMT
Not After : Aug 5 09:24:11 2025 GMT
Subject: CN=686e3540-154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:fc:00:cb:e3:cc:5f:0e:97:32:2f:32:43:
8c:cb:5f:d5:61:74:80:70:f6:bd:80:27:d3:72:4c:
29:f2:3f:e3:29:79:a6:d3:f5:01:da:15:8c:47:bb:
14:95:2b:a9:94:ca:12:15:b5:9e:b9:92:31:90:d8:
5f:d2:99:8c:6b:8f:a4:3d:33:c3:d7:28:11:55:03:
c5:23:71:79:35:6b:f4:2f:8a:1e:83:3b:51:53:16:
07:da:12:1e:ec:55:4d:d5:4e:b1:29:85:f7:a9:2b:
2e:2c:29:26:7f:7d:43:f3:61:c0:d2:21:9c:f4:47:
55:b7:49:22:f5:94:e2:e9:c5:1e:12:65:48:cc:e9:
13:ca:1e:46:f3:83:ff:b5:ba:65:b0:ff:14:bd:00:
7f:9b:b2:9a:a3:f3:17:36:e3:fa:60:da:29:e3:a3:
77:1f:ba:82:95:6b:1b:3e:cd:18:31:b8:df:97:2f:
fe:41:c3:ef:8e:b2:65:3a:14:50:3b:68:f7:20:02:
06:e5:d1:a8:6f:c8:68:32:69:6f:70:79:82:a2:8c:
52:2e:fb:51:94:38:3f:93:29:6f:de:a7:91:9d:91:
94:0f:38:5c:60:26:a3:e3:1c:65:75:3b:65:7c:50:
cc:5d:70:7a:9e:9c:0e:ce:d6:c9:84:76:4e:65:24:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:AF:11:67:23:03:A9:1E:74:CB:1E:62:D9:65:23:66:BE:6C:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73E6265CA611F0BEF55680DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:4d:8f:28:a3:cd:ac:0a:ea:3b:79:24:f0:bc:54:1c:d3:ae:
8e:2d:c8:28:0a:52:44:4e:81:7d:07:2e:c8:6f:9e:40:39:ff:
1a:28:be:ed:8e:f1:e9:9a:fb:5c:e4:2b:59:da:44:20:51:41:
e4:38:cc:c8:96:7f:41:fb:0b:c2:9a:f0:b8:b4:19:64:80:89:
01:55:ec:78:fb:a4:c1:59:b9:db:af:06:ea:8b:5e:68:67:b5:
d2:7e:bf:55:38:bb:3b:0f:ae:92:5e:e3:82:34:f5:90:d7:dd:
f6:9e:7d:65:53:8e:22:37:bb:40:7f:91:62:2d:c9:cd:5a:d0:
72:fe:3d:c6:3a:17:a0:d3:c1:93:93:b5:e7:6a:ec:c8:c9:12:
b9:f0:30:97:b2:48:ba:64:29:e6:e3:78:c5:87:49:df:8e:f1:
61:16:7f:c6:63:7b:b2:6d:2b:49:ac:77:34:84:51:8e:69:c2:
c6:32:2c:5e:de:bd:43:cb:6f:88:aa:57:13:e6:9e:71:c2:a3:
d5:6e:7d:fd:3b:95:19:53:2e:25:0d:d7:70:42:84:b2:5b:3f:
08:5a:42:16:18:c0:b7:26:67:f9:4d:0b:37:c4:44:ab:27:c2:
d7:a0:e7:db:13:9c:60:04:62:6c:ba:0c:c7:75:d2:58:72:80:
41:ff:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:07 2025 by rpki-client