Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA9997A5D0711F0AC5AC2EDDAE4EC9C.roa
File: FAA9997A5D0711F0AC5AC2EDDAE4EC9C.roa (raw, json)
Hash identifier: OkUhf7bTZS4b2HAf1R0MDp6ivOt4931j0fN+N0hFW9I=
Subject key identifier: F6:D9:97:16:FD:1D:C3:C7:38:0E:7C:D1:D5:BB:2E:48:13:37:5F:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA9997A5D0711F0AC5AC2EDDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 21:02:11 +0000
ROA not before: Wed 09 Jul 2025 21:01:46 +0000
ROA not after: Sun 24 Aug 2025 21:01:46 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101658 (0x18d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 21:01:46 2025 GMT
Not After : Aug 24 21:01:46 2025 GMT
Subject: CN=686ed8d2-f2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:24:da:4d:5b:cb:c0:58:52:d3:8c:0d:93:
c1:d7:2e:24:99:32:e7:38:5f:c4:2d:3c:12:c0:a1:
3f:e7:fc:b6:c9:74:2c:21:2c:81:2e:7c:08:7d:89:
db:c6:06:0e:e3:34:6d:5f:e2:ba:d8:dd:de:bb:e1:
fa:78:56:e3:06:6a:19:8b:4b:8e:6f:27:83:db:eb:
a0:ec:29:3c:c3:1f:c6:70:17:b7:6e:54:bb:3c:3b:
d0:d0:b1:d4:ac:82:0d:ed:a0:1d:4d:46:ab:17:e1:
38:3a:c6:56:06:33:e2:aa:8a:fd:1b:a8:b0:06:54:
98:87:83:c7:47:51:bb:2c:bd:61:60:aa:d5:02:1d:
44:62:66:30:93:2e:06:ef:5e:2f:21:ff:12:70:ea:
10:f9:22:0a:b2:76:f2:6c:0b:60:5e:8c:ca:a5:33:
1e:70:a6:80:5f:55:e9:65:31:d4:00:de:de:32:88:
fb:5b:05:b2:c0:38:93:23:cb:c5:1a:af:b1:ff:d5:
02:56:e0:fc:d0:5a:1f:4e:98:56:00:3c:0d:0e:e2:
91:3a:5f:94:75:b8:61:b4:d5:22:38:e6:eb:a9:18:
ac:22:83:86:5c:09:99:50:49:ea:36:f9:dc:e2:7a:
c2:43:b2:ad:04:c8:9b:c2:20:08:2a:c6:66:fe:bc:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:97:16:FD:1D:C3:C7:38:0E:7C:D1:D5:BB:2E:48:13:37:5F:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA9997A5D0711F0AC5AC2EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
86:66:01:3a:e1:7b:93:c3:f3:a9:5f:6e:ad:19:0c:a1:db:2c:
ba:fd:85:02:36:12:e9:d5:75:c0:d6:12:84:cb:a0:2a:39:00:
9b:5b:f9:37:3e:b0:25:ed:8f:75:ed:7e:88:f2:24:61:11:f3:
73:bf:b5:de:c0:f5:9a:e3:b1:25:31:75:0b:21:f7:84:d7:1a:
b0:f4:3d:0b:69:a7:70:53:bf:6e:a7:51:cb:be:d8:ea:02:89:
53:d7:05:b5:04:72:ce:d1:1c:f0:54:62:2a:3b:9e:59:52:e1:
51:c3:df:7e:fe:9f:c4:4f:79:95:12:98:a5:a5:5a:b1:e4:68:
43:5d:ff:b8:ab:41:55:94:36:39:48:c9:ac:0d:a5:4b:6b:de:
73:bb:7d:a2:85:58:cb:27:e4:f2:ed:f0:73:d4:87:95:ce:7a:
e2:a6:1b:68:9e:b1:b4:07:84:0e:0c:92:6d:8a:df:fc:2e:fa:
80:68:f3:10:35:33:f3:db:f1:7b:22:3a:2e:1f:3b:f4:de:76:
ec:ee:6c:96:d7:6c:a3:c5:c4:f2:74:68:9f:80:6d:d0:08:a9:
d5:8e:cc:9a:55:24:6e:5a:83:24:74:a6:2e:e9:88:db:56:1c:
4f:27:94:6a:bf:e2:46:13:6e:05:65:60:4f:c8:f4:7e:0a:d4:
ac:ba:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:57 2025 by rpki-client