Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF699EA623211F0BB5FFFEDDAE4EC9C.roa
File: ADF699EA623211F0BB5FFFEDDAE4EC9C.roa (raw, json)
Hash identifier: /CrBOUvH+lvx5PC8ZXvip7b0Si21l+A8cHwwqbp6ipI=
Subject key identifier: F5:40:BE:3C:AB:ED:C6:FA:E5:AC:C6:EE:CD:CC:30:BE:73:6F:76:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF699EA623211F0BB5FFFEDDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 10:50:26 +0000
ROA not before: Wed 16 Jul 2025 10:50:21 +0000
ROA not after: Tue 22 Jul 2025 10:50:21 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101879 (0x18df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:50:21 2025 GMT
Not After : Jul 22 10:50:21 2025 GMT
Subject: CN=687783f2-a91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:e3:5c:a4:ba:ac:76:e3:1a:d5:43:4d:49:
48:f0:f5:cc:85:ad:dd:d4:95:00:83:0e:ab:3c:13:
d9:df:a6:d8:b9:cb:14:dd:22:cc:ef:c3:ae:d3:44:
d2:64:c2:6e:94:33:4c:7a:53:0b:7c:c4:d2:74:04:
52:39:b4:ad:27:c9:d3:f0:1d:65:4d:95:5a:21:cf:
aa:64:88:7b:da:51:00:23:15:9a:29:33:29:d3:f7:
ec:2d:60:ad:cb:d3:e6:35:a0:7b:5a:60:78:84:a1:
38:d5:9f:11:b7:b8:2b:a5:25:ea:7a:9a:37:16:9d:
6e:59:a7:6d:45:b5:3e:c3:72:52:7d:4a:a6:3e:a2:
7a:cf:16:a2:b5:c2:38:fa:85:30:16:0c:e4:8d:e0:
f6:36:1d:dd:90:f5:d1:3f:a2:9b:8b:13:04:90:5a:
6b:f9:2e:46:a6:2b:c0:be:0e:d5:64:d7:b6:4d:59:
66:2a:dd:8a:47:4a:96:af:2e:c6:3b:40:12:c5:69:
42:21:1d:ef:6a:f2:a9:ab:ed:40:2e:58:64:8d:d7:
80:13:66:7c:fc:0e:17:db:80:6e:6c:af:a1:88:38:
67:36:3e:09:9b:cc:2d:a4:ab:3e:c4:50:1e:53:6d:
59:ed:fe:86:48:da:45:8e:14:75:c0:9d:aa:a7:fd:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:40:BE:3C:AB:ED:C6:FA:E5:AC:C6:EE:CD:CC:30:BE:73:6F:76:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF699EA623211F0BB5FFFEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
38:74:c4:a0:14:cf:fa:f3:b9:a2:b6:5a:97:0f:1b:e4:67:fe:
f3:d9:d6:16:fc:5e:c4:95:e5:b6:74:d8:8a:d7:4d:12:4c:e6:
21:73:69:f1:32:f9:d0:60:18:73:f8:b5:62:3e:9c:9f:84:71:
c4:2c:06:d2:68:1c:63:dc:7f:f0:87:c3:bc:ec:25:c4:8f:a5:
93:35:31:6c:a3:df:64:8f:4a:d4:a0:23:64:4d:1b:5f:94:ff:
c8:c7:3a:49:da:44:4c:a5:e0:9a:a5:61:ff:66:fc:d4:4f:33:
82:83:45:04:7b:fd:08:87:3a:63:4a:8e:43:f3:d9:a4:c6:05:
8b:89:c5:dc:d1:12:2d:51:f8:6b:2e:20:9b:c4:54:d5:e1:ca:
35:c9:d5:ea:b0:97:35:f8:29:92:cc:d1:9a:f1:e7:e8:84:22:
1a:1b:71:1d:c2:f7:83:ef:a8:72:38:16:49:a4:c4:de:a5:a0:
ef:3e:9e:2e:75:7b:9a:36:39:23:d7:dd:7a:74:34:06:62:08:
b6:71:93:79:ab:b5:0a:fc:56:f1:73:de:33:e7:a2:2d:6a:96:
5d:62:4c:bb:8c:15:fa:39:40:4c:0f:78:93:2a:3a:7a:1f:4c:
4b:93:05:2c:ff:c5:a0:21:f2:cc:ba:9f:c2:e1:14:c0:69:be:
38:65:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:54 2025 by rpki-client