Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903C9965CED11F081107CC7DAE4EC9C.roa
File: C903C9965CED11F081107CC7DAE4EC9C.roa (raw, json)
Hash identifier: PvgyRHfSY/uNQjxUSt0AZVb07tSZe4KGDS6mxV/IWYI=
Subject key identifier: AD:9E:A6:22:49:0E:16:16:6D:C1:CE:8E:43:73:DD:E4:45:09:89:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903C9965CED11F081107CC7DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 17:54:40 +0000
ROA not before: Wed 09 Jul 2025 17:54:34 +0000
ROA not after: Fri 15 Aug 2025 17:54:34 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101624 (0x18cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 17:54:34 2025 GMT
Not After : Aug 15 17:54:34 2025 GMT
Subject: CN=686eace0-d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:eb:ae:fd:65:3f:36:7d:88:8d:7e:e7:bc:
88:6d:fc:92:f8:99:0c:63:56:fc:81:0e:9c:47:df:
00:ef:b6:85:12:29:99:7d:04:77:8a:71:cc:b4:ba:
4c:2a:f0:ae:b0:0e:b8:ac:1f:0b:27:0b:26:48:a3:
02:5e:92:b0:fa:a5:84:93:85:54:48:c2:83:50:6d:
6c:57:d8:5e:83:82:9a:f7:dd:d4:7b:11:5e:90:dd:
45:79:d3:3a:34:b2:45:ef:5a:61:77:12:4d:c5:e7:
8c:dc:6e:db:cf:2d:6d:19:1e:d4:6d:82:9f:91:63:
bd:f2:a7:4f:0c:44:d4:44:67:2a:62:e4:cb:a2:8f:
80:b0:40:f2:08:de:16:c8:b6:8a:92:1b:5d:5f:4e:
4d:3f:39:dd:7b:4d:86:18:20:f3:69:83:b0:d4:59:
ec:64:d8:49:b9:d8:02:14:06:9a:ea:94:71:10:4a:
d3:01:3c:a8:7b:36:a5:83:59:4e:54:a4:61:aa:d3:
c2:d5:30:34:14:51:eb:d2:15:1e:b5:f4:30:4f:43:
56:3f:d6:69:bb:1d:68:0e:dc:41:22:31:d0:2c:9b:
4f:31:ae:ab:c3:5c:dc:27:79:e6:ce:92:d7:7a:0a:
f2:af:a6:55:e0:e5:11:8e:0f:dd:f0:46:0c:74:32:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:A6:22:49:0E:16:16:6D:C1:CE:8E:43:73:DD:E4:45:09:89:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903C9965CED11F081107CC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:43:41:12:0b:6d:3d:d4:2e:88:90:8c:a5:e8:2d:22:f7:31:
e5:23:1f:da:5a:3f:cc:12:c2:4e:b3:84:41:77:39:f2:12:0e:
ac:d2:3f:2d:98:23:7b:ce:14:c8:99:40:b5:fc:b6:33:d7:81:
77:9e:62:9c:b3:63:19:9f:1e:5d:d4:64:51:f3:aa:46:93:67:
c3:1c:a4:dd:c5:55:d0:bd:1e:f3:67:f8:b4:5c:18:b2:d5:ae:
61:87:b7:a6:fc:de:e1:4d:52:5f:b5:96:8b:33:5b:d0:2a:d7:
98:47:d7:c7:32:65:a3:bf:93:0b:8c:30:6f:84:62:3d:8c:26:
d3:63:1e:a5:35:7c:93:45:6b:64:e3:85:76:e4:4b:db:53:9c:
c1:e3:e4:8a:dc:83:a7:47:68:77:ac:39:e2:4b:fe:15:fd:30:
97:d8:fe:0b:d2:19:ec:65:d5:b7:e2:4b:3c:1e:a7:58:15:92:
ee:7c:e0:f1:2e:aa:51:8a:15:1a:cd:ad:8d:8c:4c:00:36:7c:
c6:5e:ec:a7:66:6f:79:5a:bf:90:18:9d:fd:6b:26:5a:dc:74:
bb:e8:95:e8:fd:4e:2a:4a:1d:1f:68:33:27:4e:f6:42:e6:fd:
3e:31:64:f8:67:e8:43:de:83:db:43:8c:93:3f:91:98:9b:2c:
c8:40:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:45 2025 by rpki-client