Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49D61F25CF611F0B9235B81DAE4EC9C.roa
File: B49D61F25CF611F0B9235B81DAE4EC9C.roa (raw, json)
Hash identifier: bfAg1TQckqLbBUzHEBWvFh7C6IeTy6PZs0het7Zw1IA=
Subject key identifier: 65:4F:47:B7:B4:EB:8A:A8:ED:0B:40:D3:D0:98:BD:EA:01:3F:E1:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49D61F25CF611F0B9235B81DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:58:31 +0000
ROA not before: Wed 09 Jul 2025 18:58:26 +0000
ROA not after: Sun 17 Aug 2025 18:58:26 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101640 (0x18d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:58:26 2025 GMT
Not After : Aug 17 18:58:26 2025 GMT
Subject: CN=686ebbd7-d915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:ce:e6:d1:2a:b9:7f:04:df:95:02:9e:cf:
56:89:40:c8:0c:f9:3a:2d:91:ba:6e:95:0a:60:4c:
3f:68:56:86:dc:4a:f0:7a:e1:d9:c0:33:b7:6f:5b:
73:75:e9:20:48:92:6a:ef:5e:63:45:4b:56:fa:25:
9a:f8:ed:56:00:3d:d2:71:6c:53:8c:e7:e7:3a:f9:
a4:e7:6c:af:8e:2d:e2:70:e6:43:bb:64:62:ac:56:
85:8d:22:73:af:34:40:2e:01:02:3b:ec:4e:df:32:
21:c8:e6:31:1d:db:9f:b1:01:c3:33:5a:bd:2f:a4:
c5:63:74:96:eb:ae:d7:8f:33:89:5e:48:4e:3e:5e:
54:fd:b2:9b:25:58:93:7b:5b:e7:0a:0f:9d:38:74:
52:68:35:06:bf:6a:b3:a3:df:bd:c4:62:fa:e2:2c:
c0:53:67:0f:72:39:85:13:37:d6:ab:1e:b4:27:be:
9c:a7:93:c8:d5:43:17:f6:d1:ea:5a:8a:1d:e0:d3:
a7:39:d1:cd:7b:0d:86:f4:fc:a0:b3:95:dd:c3:b4:
1a:7c:de:93:5c:32:e9:7a:02:bc:08:ff:fa:47:9e:
b1:db:38:c8:27:55:be:9a:47:44:4b:43:dd:a9:c1:
6e:e6:d6:d2:43:37:0f:1d:46:49:4a:63:32:c7:84:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:47:B7:B4:EB:8A:A8:ED:0B:40:D3:D0:98:BD:EA:01:3F:E1:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49D61F25CF611F0B9235B81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:78:08:14:40:0b:b0:54:f7:7f:b4:4a:7e:f8:9f:7d:9d:b4:
42:a5:3b:3e:70:78:84:13:fe:21:a7:63:ef:df:1a:90:ed:a0:
56:91:14:e2:83:80:87:c0:f2:53:e4:b2:bb:5c:25:2b:66:4e:
ef:bd:3a:39:e8:78:55:e1:28:16:ce:d6:3e:e0:3a:29:e0:83:
55:22:3e:23:6d:16:4c:7d:14:c1:0a:4b:9e:1f:a8:6f:17:e3:
1a:d3:fd:be:1f:db:99:2a:30:1a:4e:59:9c:03:04:51:34:75:
1d:6e:fd:1b:8e:a2:9b:da:db:9f:d6:33:f8:8b:72:09:37:d3:
04:74:0d:9e:c9:ea:29:21:a1:1a:79:17:e1:91:55:e5:b8:37:
68:e3:9b:1f:c7:58:81:29:29:f1:41:13:5b:55:b5:1f:7d:fd:
fa:7a:b5:4b:05:b3:35:22:82:41:f8:86:28:a1:90:fe:d4:0b:
f3:9a:30:0e:98:3c:4c:00:e6:1a:66:3a:6e:07:97:85:a4:60:
44:81:89:e8:19:59:43:c0:6f:c9:40:f8:8a:df:e2:1e:44:82:
18:51:7d:ce:65:2a:27:b2:0f:43:11:14:58:75:94:af:59:15:
15:9b:8f:0b:21:7f:06:10:4b:28:b1:f6:38:4b:95:a5:1c:cf:
ed:cb:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:15 2025 by rpki-client