Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CD743A66D911F0AF4EB7C9DAE4EC9C.roa
File: 92CD743A66D911F0AF4EB7C9DAE4EC9C.roa (raw, json)
Hash identifier: w9rhnM40XWcTybfpwY+ZoR36VfhkiFqUwtrkOJBUXVg=
Subject key identifier: D5:DE:66:3F:15:88:DC:E8:82:F2:59:C1:B0:8F:B9:FC:6F:1F:28:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ED0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CD743A66D911F0AF4EB7C9DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 08:55:11 +0000
ROA not before: Tue 22 Jul 2025 08:55:06 +0000
ROA not after: Sat 30 Aug 2025 08:55:06 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Jul 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102096 (0x18ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 08:55:06 2025 GMT
Not After : Aug 30 08:55:06 2025 GMT
Subject: CN=687f51ef-c1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:e0:94:b7:c5:42:64:6b:76:af:d8:05:56:
4f:73:97:be:00:ec:bb:fa:38:20:7b:f7:c2:da:60:
5b:4e:67:5b:2b:03:72:90:6b:a4:c7:33:b1:2b:98:
21:84:c1:21:1a:ae:c9:f4:5d:54:a9:3e:69:6d:8a:
5e:d8:ad:c3:b2:6a:8e:6a:aa:df:4e:ca:b4:76:eb:
1f:b0:db:c3:01:d2:d9:a4:01:3f:e4:21:dc:61:f2:
5b:6d:e1:98:cf:2e:a1:c9:1f:14:96:3b:ba:97:83:
d2:b4:e0:57:00:09:1a:ad:81:ac:5a:21:e1:cd:70:
a7:7f:0c:f3:2f:09:1b:fc:26:f4:63:33:bf:7c:69:
c7:c8:d6:7f:80:de:ed:8e:5b:89:d2:6a:76:4a:da:
0f:eb:d4:c2:45:a5:fa:5b:fb:72:a5:07:04:a4:6f:
37:64:6b:39:71:81:5f:6a:0c:cf:32:b4:ee:6e:30:
4a:72:c0:d6:ec:02:d7:69:b0:a4:0c:b6:04:1c:a9:
21:42:88:8e:1a:0e:ed:40:55:e4:36:51:60:97:62:
4f:41:b1:b3:e3:06:16:fe:f7:f5:25:19:b9:8a:cc:
d4:11:d2:4e:f1:42:78:55:63:5d:a3:34:85:a5:ba:
b4:b3:10:6d:e1:49:d1:ee:19:65:cb:df:eb:4e:23:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:66:3F:15:88:DC:E8:82:F2:59:C1:B0:8F:B9:FC:6F:1F:28:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CD743A66D911F0AF4EB7C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:44:ed:9d:db:c6:06:e7:d4:65:38:cb:eb:2e:28:ea:66:77:
51:c6:4e:34:b4:10:1e:e6:93:02:ee:14:4e:cd:73:68:d0:3b:
2d:7c:7c:9e:04:ab:d2:8c:62:9f:5c:86:18:dd:6d:8a:c8:f6:
a9:87:e6:2f:0c:96:73:de:7c:4a:57:c5:15:ea:3c:da:f3:ef:
54:56:2e:14:86:9c:d7:2c:3c:ee:4b:15:d6:1b:64:4a:dc:ca:
88:46:5b:5c:c6:92:bd:5a:86:83:bf:27:7f:08:50:7a:25:60:
f9:6e:bb:ba:f5:67:56:d8:db:f1:2c:41:70:d8:af:2d:95:db:
18:36:f2:70:7c:f0:ce:e4:51:f4:5a:a8:a6:3c:cb:d6:58:75:
a9:ff:a6:33:e7:da:07:00:cd:07:93:54:9c:fa:b3:fd:61:06:
f2:e7:5c:a4:1b:e3:f2:d7:93:26:11:f1:e3:5a:a7:09:c9:73:
8f:dd:88:a4:7b:99:2f:e9:cd:be:12:86:02:a5:b5:a7:50:ef:
a3:07:32:83:e3:b0:3b:22:f4:a6:c1:6f:46:43:6c:07:b1:5b:
21:17:17:d4:21:c6:e5:6d:28:da:02:7d:91:a9:86:7d:58:1d:
37:b8:29:18:aa:54:a9:fc:4c:fb:74:f3:10:68:e4:ef:a6:42:
17:17:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:19 2025 by rpki-client