Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0077FB2E87D011F0A48755C6DAE4EC9C.roa
File: 0077FB2E87D011F0A48755C6DAE4EC9C.roa (raw, json)
Hash identifier: rcn2DtMK0+gjUn5k3N+WXuPWCbg6oqa6FSS3LxKfpvk=
Subject key identifier: 1B:FE:80:69:87:5C:C9:85:82:89:FF:1B:37:97:63:73:60:14:1E:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0077FB2E87D011F0A48755C6DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:39:48 +0000
ROA not before: Tue 02 Sep 2025 07:39:44 +0000
ROA not after: Mon 08 Sep 2025 07:39:44 +0000
asID: 204770
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105418 (0x19bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 07:39:44 2025 GMT
Not After : Sep 8 07:39:44 2025 GMT
Subject: CN=68b69f44-7c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:47:eb:3e:f1:de:97:c3:fa:ef:77:e6:19:
28:6c:a7:e2:f4:37:e7:dc:fc:f2:aa:9a:3c:0b:be:
18:38:37:50:87:da:b5:29:d2:2d:06:cc:1e:6e:b7:
36:fa:6c:dc:69:62:b1:bf:e5:1c:0c:27:29:af:77:
81:2f:b7:f0:a5:09:7d:d5:25:84:53:87:ff:8e:d2:
a9:72:cd:eb:d7:3d:64:47:82:dd:c8:3d:9a:d0:c2:
39:41:8f:37:7e:ab:d4:55:e8:16:a1:0e:94:d0:62:
93:04:3d:7c:71:73:70:66:d9:94:8e:b3:6c:41:f3:
c4:1d:c8:29:ea:ac:dd:83:01:9d:90:26:87:9e:af:
5b:f1:f0:bf:73:cc:f8:43:50:47:7a:d6:78:f1:c4:
e9:37:a5:b6:9b:92:dc:2a:e1:7a:74:6b:7c:b3:f5:
df:67:05:8b:68:90:62:34:97:88:fa:f4:df:7a:eb:
67:70:a0:8b:8e:9f:c5:78:f8:f1:d6:f7:40:37:60:
55:40:62:94:6d:3e:6b:9f:4c:e0:14:a2:2a:1b:9c:
fa:28:f6:aa:6a:d6:03:72:90:11:b4:60:66:7a:1e:
c9:28:20:b7:39:7f:c4:a1:59:4b:77:83:50:ff:7a:
4b:23:80:88:3f:9c:8a:c5:3a:73:b9:46:5c:a1:8a:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:80:69:87:5C:C9:85:82:89:FF:1B:37:97:63:73:60:14:1E:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0077FB2E87D011F0A48755C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:84:f6:43:64:13:9e:35:42:1d:4a:72:6e:9f:9d:4e:8e:6a:
c1:34:a8:34:eb:54:85:4c:f9:57:81:aa:91:ee:f5:39:a0:c9:
db:56:c2:99:bd:e2:64:79:ec:d5:15:38:ff:a7:e9:0c:1c:91:
72:0a:58:45:38:17:73:e5:2c:19:e3:ea:82:ea:8f:a9:a5:d3:
fc:a1:b2:3b:89:e6:bd:6a:9e:a7:4b:dc:b5:50:c1:8f:c4:60:
ab:ae:08:02:c7:fe:55:fc:a6:5e:0f:6d:28:be:31:13:bf:63:
b0:d2:d0:9a:1f:37:1f:c5:ed:ab:5d:43:9c:45:2e:53:9c:28:
5d:8b:36:45:1f:89:c4:0f:50:09:a6:a1:cf:64:69:0d:2e:57:
5b:3f:b8:5f:ea:5b:29:ce:c8:c4:25:42:50:54:76:c1:34:c5:
05:08:20:be:87:ed:0b:93:8b:18:13:71:2b:eb:36:af:46:95:
e9:8c:75:96:32:f9:fc:83:dd:6a:71:c6:95:2f:76:f2:d1:56:
55:fb:98:57:08:9b:2f:7c:a4:cb:5f:47:16:fa:a0:27:e8:70:
f3:a3:a2:91:85:c3:a1:c6:66:6d:95:18:04:54:54:09:fb:dd:
24:d4:e7:6c:d0:7e:df:06:6d:01:65:01:19:1f:d0:8a:bc:35:
5b:b0:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:42 2025 by rpki-client