Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6B5C885CB511F08F77F7DFDAE4EC9C.roa
File: BA6B5C885CB511F08F77F7DFDAE4EC9C.roa (raw, json)
Hash identifier: a/hQWdocbKKtDq04OD+j8YMNMNUXoMeQ6YOUQd7y7J4=
Subject key identifier: 3F:FE:76:04:A9:D7:10:35:86:B7:CC:03:30:8D:6C:6D:D1:F2:65:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6B5C885CB511F08F77F7DFDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:13:24 +0000
ROA not before: Wed 09 Jul 2025 11:13:19 +0000
ROA not after: Sun 07 Sep 2025 11:13:19 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101565 (0x18cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 11:13:19 2025 GMT
Not After : Sep 7 11:13:19 2025 GMT
Subject: CN=686e4ed4-2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:8d:e4:10:f0:55:06:6b:9c:a2:6a:f2:57:
c1:63:6a:21:e7:9d:e0:d8:1d:88:07:ee:ad:d8:0c:
a0:10:da:f3:7c:bb:0c:ec:b0:df:2b:52:30:24:80:
36:9d:2b:23:55:e6:d6:7e:4a:d5:97:9e:ff:c1:9e:
bb:6f:5b:f3:68:7b:89:ad:13:b5:f2:33:15:e4:b7:
19:22:96:65:8f:a2:45:97:b6:ea:21:6c:ba:e1:8b:
12:85:31:ee:b8:fd:1a:24:0a:4c:65:f3:cf:04:a2:
15:a9:92:e1:03:ce:97:7b:6c:cd:7d:4b:53:fd:18:
46:b8:2e:81:18:59:9b:c5:b1:e1:35:56:0b:af:bf:
f8:70:34:97:4f:9b:31:cc:ac:fd:a1:e9:dd:c3:8f:
9e:6e:38:6a:ba:5a:7f:45:cc:c3:95:97:80:da:30:
89:b8:d9:b9:fc:7d:54:42:0d:0c:1c:50:16:d7:10:
55:b4:a7:ed:fe:0a:d9:8d:7d:56:35:50:d5:6e:b1:
a8:79:77:99:5d:8e:64:43:25:b9:62:33:90:5f:e9:
7b:21:61:58:66:d5:2e:cc:e6:ac:7e:b7:46:98:2e:
c0:0a:ac:13:5a:d0:05:84:cd:a7:1d:d7:ae:ca:0b:
d5:34:fe:67:ae:56:09:e9:65:e9:0f:5c:05:f5:bf:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:76:04:A9:D7:10:35:86:B7:CC:03:30:8D:6C:6D:D1:F2:65:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6B5C885CB511F08F77F7DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:48:46:cb:e5:1e:55:e8:1a:8b:31:92:36:6e:ba:13:b6:a4:
56:17:ca:b6:7d:21:ec:43:2c:48:ce:e9:0c:76:8b:23:ba:c7:
fd:46:e3:51:20:a5:a7:98:9c:ba:69:1c:36:6b:d7:e8:3d:77:
1e:6f:61:9a:5e:50:23:80:7b:ae:11:4c:d0:f8:c7:de:6d:cd:
44:a4:a3:9b:84:d5:c8:b4:0c:9a:b6:d6:f2:dd:ff:b6:a0:e7:
ff:32:de:94:87:e1:85:7c:43:83:36:19:af:da:6a:73:3f:70:
0e:87:b7:85:22:57:e3:48:67:0f:37:a7:72:a6:d4:cf:22:68:
03:9d:28:a2:72:11:60:25:08:58:77:d5:3b:e3:5f:e5:57:56:
59:7f:26:d4:60:b5:04:58:70:48:31:a8:3a:ad:bf:91:b6:56:
df:54:cd:33:42:5d:7e:6a:5c:83:21:4d:47:05:5a:93:be:4a:
dc:e1:a2:0a:03:57:3b:9e:a5:3c:72:45:54:77:72:5b:af:2b:
e8:97:b0:65:c1:20:fa:36:9f:45:e5:a3:38:0f:9b:fd:27:02:
c4:15:9f:47:95:e2:20:eb:3f:04:45:e9:85:b2:04:ec:84:11:
ab:00:83:2d:58:dc:21:7c:f4:65:89:a6:8b:24:88:39:6b:06:
75:48:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:32 2025 by rpki-client