Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D58782608411F0AA6B4681DAE4EC9C.roa
File: D0D58782608411F0AA6B4681DAE4EC9C.roa (raw, json)
Hash identifier: OdVWcH1ChDLcxM7DhIptuYXYyG3Sj2r2vjjDDHQKfRc=
Subject key identifier: 59:89:C7:CE:86:09:99:01:41:10:3A:8C:E0:D7:5A:87:AF:FF:B1:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D58782608411F0AA6B4681DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:33:21 +0000
ROA not before: Mon 14 Jul 2025 07:33:16 +0000
ROA not after: Sat 16 Aug 2025 07:33:16 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101789 (0x18d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:33:16 2025 GMT
Not After : Aug 16 07:33:16 2025 GMT
Subject: CN=6874b2c1-b737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:e2:97:e6:7e:e3:80:b1:9c:e0:ff:68:b4:
5b:8e:9a:ae:d2:9a:79:16:bb:68:8e:68:8d:8f:01:
ce:7d:a0:13:02:14:01:e3:8b:02:6e:65:bb:52:6c:
5c:9d:a5:db:6e:b9:f0:25:44:47:8c:c7:48:6a:6e:
73:e1:5b:35:69:6a:e1:ea:64:1d:33:08:49:a3:30:
36:41:e3:35:d0:32:29:6e:b2:2e:f9:56:75:6b:bb:
48:94:47:da:c9:09:96:b2:92:5a:6a:27:0f:9f:6b:
93:88:f7:11:b2:bf:20:ab:9e:db:8d:1d:71:0d:cb:
df:98:29:29:ac:d3:60:a7:ab:53:55:bc:ed:78:b2:
ec:95:1d:f5:c8:89:13:d4:61:86:96:33:bb:cf:c0:
0f:60:75:7b:be:e4:13:7a:5e:ed:a2:08:a7:f5:8e:
4f:f3:4d:a9:16:75:ae:48:15:43:63:35:a4:5c:7c:
6b:d6:32:96:79:c6:de:7f:c2:a3:42:e2:05:dc:a8:
94:8d:11:b1:23:c3:6f:cb:11:27:fd:44:54:85:bb:
59:bb:2d:d6:2b:a8:1e:19:3f:01:e7:66:16:87:dc:
3a:54:c9:da:85:22:50:b2:71:cf:18:c6:fe:c2:0a:
e2:84:0d:9a:1b:86:8f:c4:7c:b5:96:e7:4a:39:6f:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:C7:CE:86:09:99:01:41:10:3A:8C:E0:D7:5A:87:AF:FF:B1:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D58782608411F0AA6B4681DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b4:00:d1:bd:41:0d:1d:ce:d2:12:a0:6d:b6:27:1e:9b:b0:
49:67:d1:5c:47:a6:0f:3a:85:a7:91:a1:bc:a2:e8:f8:d1:34:
f6:4b:35:d6:14:e1:0f:38:c6:d0:e7:f9:56:4d:0f:f2:ba:15:
fd:32:2e:b1:4a:66:dd:a9:70:5a:37:a4:2e:af:1b:a7:b2:a8:
f1:c9:c5:09:cc:88:80:33:85:08:e8:85:67:33:5a:d9:f5:e3:
41:ca:57:48:c5:b0:58:aa:50:bf:98:92:a8:d3:e1:ed:94:75:
d0:b8:78:b9:7a:12:85:d0:41:28:b2:f1:e3:88:02:17:9b:81:
0e:5a:6e:16:82:de:61:4d:f0:55:ef:b4:19:20:3c:b3:16:4d:
92:f7:e0:78:60:da:27:3f:f5:e4:04:36:ad:e8:38:64:07:31:
0a:78:39:d7:80:cf:f0:97:63:51:c9:e8:e3:f0:4c:9c:c5:31:
00:87:4a:66:0d:a4:7c:87:aa:e2:a8:55:e9:ab:bb:98:ee:39:
23:0a:f6:67:11:8f:67:5b:93:58:0c:7d:5c:0e:cf:14:a7:8e:
4b:23:f9:3b:92:3d:d4:2c:73:1f:35:5d:75:fc:3e:a2:f2:c3:
a6:5e:84:a6:06:81:26:e4:69:7f:7d:3f:32:d4:47:41:41:48:
89:62:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:53 2025 by rpki-client