Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9217D0E459A511F0AAB817E9DAE4EC9C.roa
File: 9217D0E459A511F0AAB817E9DAE4EC9C.roa (raw, json)
Hash identifier: T3mFDwU/tHDZOFq1GZU2cfLghcSmFTxhoai4T/LQ7Vk=
Subject key identifier: 0D:C7:A1:8B:5B:93:10:93:83:8C:CA:79:B7:BF:D9:25:5B:BE:D2:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9217D0E459A511F0AAB817E9DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 13:40:11 +0000
ROA not before: Sat 05 Jul 2025 13:40:05 +0000
ROA not after: Sun 24 Aug 2025 13:40:05 +0000
asID: 40065
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101114 (0x18afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 13:40:05 2025 GMT
Not After : Aug 24 13:40:05 2025 GMT
Subject: CN=68692b3b-ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:4a:42:16:6c:76:6a:13:2c:61:b7:0b:c3:
cc:6b:45:0d:28:0d:de:c3:66:e7:f3:2e:5c:81:02:
6c:57:1a:44:c9:7c:16:19:1f:ca:32:88:15:00:ab:
2b:70:dd:5d:86:7f:6f:3a:cf:75:6f:e6:10:6d:f6:
bf:c1:c1:cc:af:8f:7f:57:3c:3b:5c:e8:12:61:09:
d5:8c:ce:03:45:5e:42:e9:4f:a1:c8:70:7f:e1:a4:
b8:4e:f1:74:6a:2e:d1:5f:24:dd:e4:b9:98:ed:f4:
05:00:d5:47:ed:47:35:03:5f:14:92:55:4c:26:8c:
49:9e:90:51:ab:ca:10:19:50:82:cd:b5:15:04:c1:
f6:da:eb:28:9a:fb:f6:0f:e1:31:9f:9d:ff:7e:e5:
d3:da:79:8c:8d:c4:14:97:2d:02:ed:72:6a:f4:cb:
c7:aa:84:86:9b:5e:a6:be:64:e3:9a:93:39:96:52:
58:59:35:7f:5d:6f:55:f7:cf:83:be:7c:55:6c:43:
c8:c8:9a:98:51:17:54:6f:b0:9c:0e:b4:b4:bc:12:
ca:61:92:c7:43:35:eb:a0:39:a6:f9:18:08:76:4a:
6b:6a:33:c8:a1:22:6d:21:03:61:28:ed:c5:88:8f:
e9:ed:10:57:91:e0:0b:ff:f2:53:3f:e5:f2:5d:83:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:A1:8B:5B:93:10:93:83:8C:CA:79:B7:BF:D9:25:5B:BE:D2:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9217D0E459A511F0AAB817E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
56:f8:46:d0:44:84:1d:b7:24:69:49:0c:62:52:f2:f6:31:af:
07:20:49:49:eb:9b:e4:e4:c9:18:23:72:e0:4d:cd:fa:b4:c4:
02:ac:c8:1c:f6:15:9e:27:1d:70:33:2c:b6:31:d7:d1:c0:75:
ed:c4:89:98:60:37:69:b8:df:ef:6f:f8:64:4f:71:d0:2a:a4:
99:ba:8a:d1:27:87:ca:3a:1b:ef:b9:c9:36:8e:0a:b8:08:b5:
22:c1:02:cb:6d:07:79:1c:4b:ae:f7:2d:67:b6:a6:c5:69:dc:
0b:10:19:33:e5:3a:78:da:79:c0:22:dd:9d:41:e5:4e:1f:af:
7c:b0:ba:80:20:4d:be:86:13:e5:e2:a7:bc:52:da:8a:af:30:
79:39:95:2c:ae:78:4b:ad:ee:29:59:ee:8b:4a:d6:84:e6:45:
a4:4d:36:39:89:62:c2:be:67:a5:0d:f8:34:49:8a:da:7b:ad:
b7:ef:6d:11:32:12:53:95:18:1c:b8:ef:ec:af:67:76:d7:04:
ef:41:95:37:97:95:11:ef:81:2d:a7:5b:21:69:dc:cf:7e:8d:
02:0a:35:76:7c:78:6f:16:e2:77:c2:15:82:23:4e:d8:20:f9:
49:2b:80:70:4f:86:b5:3e:47:fc:92:3e:15:d5:25:36:4a:45:
7e:76:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:50 2025 by rpki-client