Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B94B6605A8F11F0AD9A20D7DAE4EC9C.roa
File: 9B94B6605A8F11F0AD9A20D7DAE4EC9C.roa (raw, json)
Hash identifier: V6xjYpk/tHLA2bruZ2y7W4ecySgefeY05dzisGQxkTA=
Subject key identifier: 3B:61:07:A8:97:73:25:F0:80:A3:29:45:70:E0:27:B4:43:90:8F:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B94B6605A8F11F0AD9A20D7DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 17:35:29 +0000
ROA not before: Sun 06 Jul 2025 17:35:24 +0000
ROA not after: Wed 13 Aug 2025 17:35:24 +0000
asID: 57043
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101276 (0x18b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 17:35:24 2025 GMT
Not After : Aug 13 17:35:24 2025 GMT
Subject: CN=686ab3e1-dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:c6:d4:65:2b:2a:ea:e4:b7:f8:81:5e:6a:
d4:3d:f7:0b:3b:3e:e1:8a:04:bf:c7:ed:fd:6e:2c:
53:0e:9c:03:1c:1c:3d:46:4b:45:65:4c:17:01:eb:
55:73:6b:5f:11:21:54:e7:2e:96:3a:59:73:28:4b:
cc:65:29:b4:33:67:fb:06:ad:2b:56:08:c4:45:b1:
fd:46:4e:18:2f:2c:51:a4:1e:14:dc:c7:f8:e7:fe:
9c:ba:4f:30:d9:c5:97:cd:b4:9d:e6:1f:f1:04:99:
33:ba:a1:c7:06:74:5d:14:b3:c5:2a:e5:24:c6:e9:
7b:12:df:93:95:e4:58:c1:cb:17:f3:c0:22:49:6c:
96:52:a4:c0:fd:d6:a4:a9:d0:08:02:03:57:89:e6:
11:8b:2c:8d:fe:75:70:f7:db:5b:ab:3e:bf:3b:2d:
2e:12:27:cc:20:51:42:66:5e:66:59:d0:82:e2:04:
67:e8:ac:66:bb:ce:0c:fa:8d:99:1d:bb:d7:d3:25:
e3:56:46:92:85:7d:f8:b6:17:ab:09:72:28:36:bf:
e7:69:ae:2b:f4:9c:ac:e2:2b:50:2a:ce:32:94:f0:
a4:bf:2f:c5:80:5b:7c:ff:d4:3d:91:b0:79:92:4e:
b9:3d:7c:80:dc:d6:6f:ee:87:81:be:91:d6:47:92:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:07:A8:97:73:25:F0:80:A3:29:45:70:E0:27:B4:43:90:8F:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B94B6605A8F11F0AD9A20D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e5:a0:81:d7:1a:0a:a9:24:f4:b5:1e:bc:55:b1:8b:d3:10:
fe:c1:c9:18:75:53:d1:3a:5b:e4:15:d4:03:99:d8:a7:cf:37:
f7:0e:ab:1e:5c:88:fc:04:45:b4:e0:c9:c9:b5:d1:72:68:2e:
57:e5:40:53:95:e5:30:5c:1f:80:77:e8:2f:b2:cd:18:17:ce:
71:7b:96:f7:fe:90:0e:df:d2:3c:17:30:9b:49:d5:bf:31:61:
2e:6f:0a:01:3d:e8:af:c8:bb:9c:f2:c6:96:7e:87:6d:e0:d5:
49:9c:61:76:7c:a0:dd:0f:83:1f:bd:c1:bf:bf:1e:3f:43:ac:
e9:92:71:ef:5c:31:f5:ad:0e:b2:98:8d:4c:c7:fb:be:ee:f0:
14:bf:29:a8:f7:28:2e:d2:2e:69:f2:b9:ea:76:af:1d:f4:d8:
e1:1b:62:1a:42:d5:03:06:bd:a2:63:75:a6:f6:c3:b2:a4:06:
18:7b:52:1c:60:f1:a1:89:49:55:5c:97:18:90:cb:0c:34:27:
3b:6e:6b:1c:00:41:35:38:69:68:07:2c:aa:a5:80:67:9e:58:
28:20:3d:da:f4:70:26:0f:12:f2:d7:e8:67:84:93:84:c4:1a:
5b:40:c5:64:f3:8b:87:f0:7a:5e:18:f0:99:44:e1:f8:f7:fd:
15:72:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:08 2025 by rpki-client