Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86A2860597811F09955E7C9DAE4EC9C.roa
File: A86A2860597811F09955E7C9DAE4EC9C.roa (raw, json)
Hash identifier: q7AgkdkXtm8wAbobqE4n4rOabKnJtRrIOfSLzdlVomg=
Subject key identifier: 9F:CE:CF:E1:A2:7C:5A:6B:53:71:1F:4B:9E:9B:32:02:CA:56:6A:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ACC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86A2860597811F09955E7C9DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 08:18:41 +0000
ROA not before: Sat 05 Jul 2025 08:18:36 +0000
ROA not after: Tue 05 Aug 2025 08:18:36 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101068 (0x18acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 08:18:36 2025 GMT
Not After : Aug 5 08:18:36 2025 GMT
Subject: CN=6868dfe1-2195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:b1:ce:7e:36:12:51:a7:49:3a:ca:97:13:
44:22:79:62:63:34:ea:c5:1e:f4:1f:54:0a:6b:bc:
1f:fb:c0:bc:7f:3f:36:36:bd:64:d1:de:4c:8a:8b:
ee:2a:6b:91:1a:a9:77:70:51:c1:61:df:06:ec:65:
11:55:7e:f7:1e:86:9d:95:1c:69:fe:c2:cd:4a:62:
20:3d:f0:98:93:a4:c3:dc:49:8f:19:49:f5:ad:61:
8b:be:2c:60:a4:09:59:1c:c5:29:42:35:15:a7:01:
21:62:2e:93:f7:aa:57:af:46:d2:13:cd:ac:48:5b:
f3:04:29:a3:19:d2:87:e2:65:93:90:f3:b7:f1:ea:
bb:7e:bb:ed:f5:02:3e:0e:52:97:53:72:f9:a1:f3:
10:e2:30:87:dc:f7:40:f8:8e:04:56:14:2f:0a:75:
7e:b6:a9:40:f0:f5:35:44:b0:84:60:f7:9b:02:2e:
22:17:d8:e9:f9:dd:5c:c5:a9:6e:a7:6d:c9:26:4e:
d3:92:22:5f:75:22:65:2e:52:10:2a:c6:14:12:34:
b7:a3:9f:5e:13:74:49:a8:41:79:7d:1b:f9:d4:e9:
75:2f:27:66:1a:37:d2:eb:6c:40:5f:db:8d:a9:e1:
e5:a2:a4:a4:36:4a:de:70:ab:66:76:ad:db:5b:ae:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:CF:E1:A2:7C:5A:6B:53:71:1F:4B:9E:9B:32:02:CA:56:6A:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86A2860597811F09955E7C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
30:b2:b6:29:a3:6f:0a:58:e0:23:55:2e:6b:16:c5:ce:5e:ed:
8b:c1:3f:45:1e:46:13:9d:41:96:0a:b7:42:6d:84:83:e9:20:
c5:a2:3d:d2:ae:19:8f:81:34:26:9e:ec:82:2e:e5:d1:df:18:
d5:6c:9d:f5:03:57:26:22:91:60:cc:ea:6a:fc:27:7f:2e:fc:
04:46:ff:f9:41:40:70:c6:9a:cb:80:4a:df:0e:b5:d7:75:e8:
a8:d1:f7:4f:6a:d6:c1:f5:ab:c6:ea:27:54:00:a9:4e:4a:55:
56:8c:f4:41:30:27:65:12:78:bc:1f:ef:88:0b:5e:64:64:5d:
29:cf:db:92:11:63:a7:a6:03:23:d5:1c:06:79:1b:d4:7b:8b:
4c:57:bc:43:33:4b:25:d5:3f:71:fa:89:43:1e:e1:b7:24:83:
76:75:7c:0d:ec:08:71:0f:20:25:f8:dc:c3:8e:ed:59:e0:43:
a6:52:2c:37:52:66:d2:62:1c:27:be:02:6a:6f:f0:d2:c8:e6:
62:6a:84:ef:6c:f2:5b:e1:fd:32:7d:a8:d7:d3:86:33:91:f7:
6a:75:ba:b6:16:1d:46:f7:38:fb:73:c6:42:47:9e:2c:a0:99:
36:0b:44:bb:20:94:02:84:24:c0:d9:e0:98:4e:eb:e0:9e:72:
51:ce:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:52 2025 by rpki-client