Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/986A184C622611F0BC9A43A2DAE4EC9C.roa
File: 986A184C622611F0BC9A43A2DAE4EC9C.roa (raw, json)
Hash identifier: +tDxT9MtpA8fxGb8IPumPpa2PEczZ0ZfHrOFJdIVcbA=
Subject key identifier: 15:53:28:C8:C8:DF:9B:73:C2:62:F7:4A:80:18:89:CC:98:F9:31:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/986A184C622611F0BC9A43A2DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 09:23:56 +0000
ROA not before: Wed 16 Jul 2025 09:23:51 +0000
ROA not after: Fri 22 Aug 2025 09:23:51 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101869 (0x18ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 09:23:51 2025 GMT
Not After : Aug 22 09:23:51 2025 GMT
Subject: CN=68776fac-1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:c3:87:67:b9:3c:ff:14:ba:15:b4:bd:55:
24:26:81:5c:c3:b1:28:df:25:f2:9f:d2:f0:5d:73:
d9:47:d7:7f:5b:d9:57:bf:3a:19:1e:ab:57:b6:64:
6f:53:58:52:3e:eb:6e:5b:0f:d0:4e:a7:1d:0e:34:
e3:67:6f:a7:e5:af:24:a7:e1:87:ae:7a:25:79:9b:
23:34:a8:96:f5:04:f2:ea:02:73:91:7f:eb:fb:c7:
4e:b2:9e:4d:49:35:66:72:0a:c0:37:86:1c:0f:ab:
ff:58:04:12:5d:11:2d:5d:a7:e8:35:f1:31:4b:c1:
44:4d:e3:92:9e:01:21:1d:f8:d0:fc:ad:6e:28:3b:
fe:96:78:4d:4d:fa:49:ad:47:e4:93:f3:be:e2:0a:
21:da:d0:98:54:3f:99:c1:29:68:a4:ff:4c:1c:81:
c8:4c:b9:b2:03:7c:87:6e:99:79:fb:61:7e:b7:27:
17:d3:50:3a:f7:9c:fa:74:f2:e6:fb:8e:4c:fe:d2:
31:dd:e4:95:11:c0:08:d1:d0:18:54:07:85:24:ac:
b0:b1:e4:ea:4f:05:1f:70:fd:0d:2f:6c:ad:45:b5:
72:f8:f8:38:18:cf:1f:7c:f3:07:30:32:d7:34:8f:
a1:1d:f0:b9:07:61:00:c0:b6:43:d1:50:75:68:39:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:28:C8:C8:DF:9B:73:C2:62:F7:4A:80:18:89:CC:98:F9:31:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/986A184C622611F0BC9A43A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:39:3a:88:c8:99:9c:2c:32:e9:6b:90:88:db:69:c8:de:49:
de:15:86:55:58:40:67:3a:24:f8:8b:dc:a9:c7:e3:8f:fc:1e:
c9:5f:a1:ce:9e:68:b9:77:b0:f4:f9:ba:7a:dc:21:c6:e8:52:
89:74:a8:b9:e5:b8:92:b6:86:5c:5a:26:75:12:ad:80:7e:fa:
7d:b1:8c:6d:73:12:f9:9e:6c:da:72:b2:2c:c5:a0:37:de:75:
c7:14:24:a4:73:e2:56:39:01:74:32:c0:54:89:ae:ba:d6:99:
20:03:d0:a4:af:9c:16:8f:24:1e:56:73:32:d7:42:3b:50:28:
ab:6f:0b:34:f9:88:d9:6c:11:8b:36:8b:db:db:35:d9:ca:79:
ce:05:03:ed:0c:ef:9d:8a:ee:df:f7:e5:14:1b:39:5f:11:41:
8a:3a:40:52:b8:03:b0:29:1f:09:43:1e:c3:e9:4b:f0:ed:e9:
07:79:82:c7:df:91:1c:49:44:05:72:35:de:b9:0e:63:ac:83:
8e:9f:fd:16:56:ac:78:15:aa:9e:2e:7c:40:8e:37:dd:71:d0:
cc:2b:cb:51:d7:47:6e:13:77:08:ab:ce:6f:d3:82:d0:97:fd:
42:0c:6f:61:ef:90:33:5e:41:f1:e2:f5:ec:1d:77:7c:15:16:
c0:7d:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:53 2025 by rpki-client