Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE202A8A5CC911F09CF527E2DAE4EC9C.roa
File: FE202A8A5CC911F09CF527E2DAE4EC9C.roa (raw, json)
Hash identifier: uf35wF2egMaYJllbp9yQLCfSjKQct57eyfxiDUZC7Jk=
Subject key identifier: 20:FF:72:0F:24:07:67:09:67:63:3C:5C:F0:22:DB:6A:BF:61:1D:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE202A8A5CC911F09CF527E2DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 13:38:28 +0000
ROA not before: Wed 09 Jul 2025 13:38:22 +0000
ROA not after: Sun 10 Aug 2025 13:38:22 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101586 (0x18cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 13:38:22 2025 GMT
Not After : Aug 10 13:38:22 2025 GMT
Subject: CN=686e70d3-e7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:4e:41:1c:8d:0f:f4:1c:c6:9c:0d:70:aa:
48:49:4b:e1:45:47:b6:3a:33:d7:33:4a:50:ec:1e:
5d:06:7b:51:38:32:51:c0:79:61:ec:86:e0:93:52:
96:66:bb:d2:88:5b:4a:7c:f8:b2:d0:30:6a:22:fb:
f3:3f:ac:70:c2:9c:fd:93:e4:a4:1b:07:bc:9b:88:
7c:76:d4:e3:aa:28:db:78:dd:8d:ac:08:e1:9f:7e:
5f:11:86:96:e6:3f:a4:25:61:c8:00:81:f3:05:2a:
68:2c:42:ef:3c:e9:dd:e2:50:6e:f1:7f:87:83:20:
68:36:dc:f6:2b:80:53:99:43:c9:50:07:e7:12:0e:
22:6d:4a:42:ee:3b:17:0d:9e:54:11:eb:da:bc:88:
94:dd:42:3b:e6:3e:aa:3d:ad:96:e4:38:ee:47:56:
eb:90:ee:ee:35:a4:e4:d8:85:99:21:dd:46:ed:68:
08:e5:1f:5c:e3:bb:b4:cb:c5:b1:7c:87:56:68:f4:
b3:e9:2f:86:77:be:3a:ed:a9:e8:fa:52:c7:36:76:
0d:09:76:41:d7:01:d4:97:a5:e9:0a:4b:05:4a:17:
38:2e:0b:94:08:d6:81:81:b8:94:f4:37:45:46:76:
7d:e3:58:a4:bb:25:75:d4:25:dd:e2:8d:8f:e4:ba:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FF:72:0F:24:07:67:09:67:63:3C:5C:F0:22:DB:6A:BF:61:1D:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE202A8A5CC911F09CF527E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:37:b9:17:7c:d2:85:cb:eb:24:64:3c:79:59:2d:5a:b4:bd:
13:6d:96:99:a3:6d:56:c3:a6:0b:95:a0:bd:37:ad:61:c5:d5:
c2:f3:33:55:52:90:0a:d9:cd:b6:0c:04:37:e0:14:e9:59:26:
8b:20:a7:a1:e9:ff:64:15:7e:fb:b9:3d:3e:1a:25:9c:b2:c9:
90:ed:a7:11:27:5d:e0:ec:bd:ce:f5:35:6d:19:d9:10:58:38:
43:dd:a8:91:c6:d2:70:e6:a2:1f:2a:3c:aa:fb:62:1d:09:3b:
14:e0:ca:09:2d:44:b6:76:f9:cc:f2:75:2a:3e:f5:52:b4:ce:
83:56:17:b9:89:37:8d:65:33:91:82:3c:1a:04:1a:78:c0:19:
3c:bd:0a:78:bc:93:a4:99:dc:aa:0c:18:6c:c6:c9:8d:03:37:
92:3c:a2:a0:1a:da:52:18:50:bc:dc:09:d7:b7:1e:39:2e:63:
4a:07:66:f4:75:e3:cb:98:5d:a9:52:e9:67:c8:1c:fd:35:92:
fd:31:c6:88:bc:9a:5d:86:cf:0e:23:52:39:dc:d9:df:c8:a2:
29:f9:bd:73:2e:b8:6c:09:3a:6e:4b:d1:37:76:9c:db:9f:36:
f8:1e:df:44:25:37:b7:5a:55:87:61:7e:ce:ce:61:49:b2:db:
cb:7e:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client