Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7D531A58D111F08B3B9E86DAE4EC9C.roa
File: 9E7D531A58D111F08B3B9E86DAE4EC9C.roa (raw, json)
Hash identifier: NEtERGJCJi97H5H+yqhQ9ZTXxNRa1PqpZwnPdpSjAjA=
Subject key identifier: 51:DD:BC:88:6E:92:BD:FC:FE:14:08:5A:24:28:58:77:AC:D4:FD:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7D531A58D111F08B3B9E86DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:22:58 +0000
ROA not before: Fri 04 Jul 2025 12:22:53 +0000
ROA not after: Sun 10 Aug 2025 12:22:53 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100946 (0x18a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:22:53 2025 GMT
Not After : Aug 10 12:22:53 2025 GMT
Subject: CN=6867c7a2-c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:fb:c5:71:ad:d4:e5:13:83:bd:22:1e:f0:
81:e6:2d:ab:d2:76:67:19:f1:b7:e9:5b:da:9b:bd:
fa:9f:f4:c5:3f:84:70:7a:a3:cc:7f:90:a0:11:76:
b4:be:5f:ce:6a:0b:8e:5c:c6:ad:7d:a0:f3:02:b9:
58:58:76:c1:4d:d4:9b:37:28:ad:3e:dc:79:07:1d:
df:bf:a4:61:34:98:6f:21:8e:b2:a6:d3:1a:6d:4e:
f2:79:61:0e:96:2f:dd:4d:ed:61:84:80:68:59:8c:
93:7b:fc:de:1a:d6:1f:64:9f:a7:2f:78:cd:5c:39:
9a:b1:06:da:d0:81:86:45:d5:38:49:52:12:a9:01:
ad:b8:8b:32:e2:b3:80:c6:6b:60:9d:26:13:46:e0:
e9:4e:f7:7c:23:17:46:66:43:f3:f9:0c:0a:6b:e6:
84:03:01:b0:7f:1d:39:e1:05:5b:39:7a:f7:63:59:
81:bf:b9:83:ea:c5:33:57:87:24:2a:ed:c0:fb:8f:
13:ba:92:7f:1a:3b:62:ee:ff:60:82:e8:df:d9:e7:
5a:e3:19:c3:ce:b4:79:c8:59:0d:e2:8b:83:91:a2:
bc:15:57:27:b5:cb:e9:a0:2e:f7:b9:75:32:45:c0:
26:fd:92:3e:bd:87:e1:85:6c:31:93:c3:d9:c7:6b:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:BC:88:6E:92:BD:FC:FE:14:08:5A:24:28:58:77:AC:D4:FD:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7D531A58D111F08B3B9E86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
70:57:6b:c1:d9:75:e5:89:56:8c:35:47:92:36:ca:d4:a5:45:
8a:0c:b2:05:c9:d0:b3:dc:0b:cc:e3:15:f2:2e:57:1c:83:e8:
02:53:1e:97:cb:77:26:24:40:3d:bc:2b:b6:fe:52:5e:00:df:
00:ff:85:cb:70:fd:57:14:e9:42:27:6c:a5:ae:ec:f7:89:63:
af:fd:a6:8d:3f:ea:9e:86:26:10:15:a1:08:8d:9e:cd:38:f4:
f9:cc:88:d9:00:08:d7:8e:68:e2:aa:66:cf:68:ec:01:57:fb:
2f:71:78:81:fe:20:97:ea:d8:73:59:14:80:0e:65:af:33:c6:
89:1a:a1:0c:1b:77:08:99:3b:d0:9f:e2:a8:b6:d6:bb:91:c8:
78:33:48:9f:43:27:f4:06:5b:0d:42:9e:ff:ff:d0:b8:ba:91:
7e:d2:d3:c1:e3:cf:31:29:0d:0b:14:64:97:06:4c:7d:83:2d:
d0:c1:ab:c6:72:fd:00:3d:55:46:51:ce:82:a7:da:a5:9d:73:
74:a3:8c:20:96:4d:f7:aa:f4:bb:ec:17:33:6e:33:9d:79:bf:
03:be:a5:43:35:e5:b3:64:98:8b:cc:48:08:c7:b1:4e:fe:16:
9a:bf:3b:ae:e7:a4:a0:47:a4:fb:b1:5a:ef:eb:db:49:55:72:
dc:ca:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:07 2025 by rpki-client