Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDD3F25A7F11F08B7ABEEFDAE4EC9C.roa
File: A0BDD3F25A7F11F08B7ABEEFDAE4EC9C.roa (raw, json)
Hash identifier: b7ztoIn9aC6+uRA/fAfsa8tLXyXhwdaRm/eS9MXMWzQ=
Subject key identifier: 6F:D0:68:FA:95:39:F4:4A:9D:2E:FF:5F:F5:30:36:81:B6:70:78:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDD3F25A7F11F08B7ABEEFDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:41:06 +0000
ROA not before: Sun 06 Jul 2025 15:41:01 +0000
ROA not after: Sun 10 Aug 2025 15:41:01 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101258 (0x18b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 15:41:01 2025 GMT
Not After : Aug 10 15:41:01 2025 GMT
Subject: CN=686a9911-5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:51:fd:15:88:e9:38:28:cd:22:80:1f:e2:
13:82:d1:50:b3:72:b1:68:06:25:83:99:79:2e:75:
66:d0:92:b1:5e:af:eb:72:26:4d:44:51:7b:a5:ca:
f9:5b:33:05:51:7d:a5:4c:99:7c:26:9d:b4:57:0e:
af:0b:5e:7a:c9:be:c5:3c:35:ef:7b:d5:48:31:b9:
c3:8a:86:20:b3:73:eb:c9:1f:b2:38:81:06:61:e0:
49:72:1c:75:74:9f:e6:35:f5:f7:73:1b:15:ee:a0:
ce:30:42:26:3e:1d:b2:22:54:8e:00:dc:6c:d2:57:
81:cd:b3:3d:f0:91:3f:03:94:79:5b:c6:ed:fa:f1:
ab:41:75:29:89:31:52:d6:53:05:ba:cc:0e:ee:05:
2f:93:a2:8a:8e:3a:c8:22:10:30:76:36:68:7d:6f:
65:93:3a:68:48:a0:4f:de:af:09:d8:0d:c8:46:89:
5a:d1:fc:90:b9:70:db:66:5e:e6:06:42:d1:a0:62:
50:7d:bc:89:07:d5:8b:f7:9d:2f:bd:f2:76:5a:73:
ea:10:17:31:66:5f:52:dc:aa:12:d0:c9:05:ac:13:
2c:db:ef:fc:21:9c:9b:39:a4:84:b3:33:bf:d7:f9:
a2:38:c5:d1:b4:e7:f4:34:02:44:85:5a:a4:73:8b:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:68:FA:95:39:F4:4A:9D:2E:FF:5F:F5:30:36:81:B6:70:78:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDD3F25A7F11F08B7ABEEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9e:2e:4c:f7:6d:9b:9e:e0:10:43:45:d0:b9:36:ba:14:1b:
de:69:d0:6a:72:90:e1:9b:20:d1:0f:13:91:47:13:d6:a5:34:
b8:b4:1a:a3:af:e5:cd:e9:88:69:6b:77:69:e8:76:ec:18:e1:
98:af:6a:da:23:91:7d:cd:76:31:14:dc:2d:ed:e6:48:67:3d:
7f:35:d2:33:28:2b:7b:de:b0:c7:46:24:1b:57:18:b0:01:7f:
2c:09:11:03:5e:f7:68:4c:18:c7:03:84:06:59:76:45:b9:24:
00:c6:27:98:4d:08:0a:87:6c:5a:af:87:eb:8d:f4:0f:ac:ef:
08:3b:34:de:e0:89:aa:28:7c:dd:f1:e5:72:a2:d9:dc:70:cf:
04:96:96:d0:e3:2a:65:66:17:a9:ae:f1:5f:03:83:93:ff:29:
5f:cd:d0:10:18:3f:ea:d4:16:4c:26:11:9d:26:02:81:e7:3b:
fe:7f:a3:e8:bc:00:cd:3b:8e:9c:4b:14:d7:1a:ea:40:8f:8e:
e9:57:3b:8e:4f:b5:48:df:58:4e:0b:ae:25:a1:89:02:6a:5a:
d8:6d:06:b5:56:99:1f:52:9b:7c:da:c1:a8:07:2d:0a:c0:83:
b3:4c:3e:31:99:4c:6d:22:3e:60:7e:ad:5b:72:cd:af:50:00:
9c:a5:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:06 2025 by rpki-client