Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB37D9887F511F08EE89CB5DAE4EC9C.roa
File: 0DB37D9887F511F08EE89CB5DAE4EC9C.roa (raw, json)
Hash identifier: g3KpbJbMyGOxiabETxFmG6gg63eBKX7C3TFQfPywIo4=
Subject key identifier: 24:21:09:01:1F:49:2B:07:CA:C1:59:1A:62:40:88:3E:6B:AF:23:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB37D9887F511F08EE89CB5DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:05:02 +0000
ROA not before: Tue 02 Sep 2025 12:04:57 +0000
ROA not after: Fri 10 Oct 2025 12:04:57 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105507 (0x19c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 12:04:57 2025 GMT
Not After : Oct 10 12:04:57 2025 GMT
Subject: CN=68b6dd6e-4c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:73:08:26:0d:5a:d1:3a:15:84:a4:7b:0a:
03:db:58:3f:4e:7b:10:29:e0:4d:57:d9:e4:b2:6f:
b6:a5:55:f9:68:d9:10:67:bd:fd:df:e7:be:22:e7:
bc:f3:f8:92:95:c4:6d:94:39:f3:b7:8e:87:f4:2e:
b6:ea:8f:c4:b9:b0:93:79:8b:23:3c:f8:ac:39:da:
a3:55:54:11:1c:f3:a7:fe:67:e2:81:d8:c8:10:ab:
0e:7d:32:2e:2a:6b:d1:14:be:07:f5:2a:9f:02:d2:
9e:fb:66:3f:91:ab:1b:a8:20:ef:50:c5:ae:6b:96:
96:7e:00:9f:d0:4d:88:b8:17:38:a6:e7:7b:8b:42:
51:51:09:1e:dc:25:c2:5f:8c:79:92:93:43:8c:9b:
51:d6:6f:68:7e:6c:27:23:8c:27:1f:9d:e3:da:e3:
b2:6c:ef:59:9f:3e:9c:92:6d:ce:82:7a:a6:eb:28:
77:b2:98:8b:5a:b6:de:ce:fa:2a:cf:08:0c:e8:51:
68:1b:24:ae:5a:c6:e9:ef:36:4b:f2:a2:78:0d:b9:
96:6a:5c:8d:27:4f:88:9e:7c:77:68:54:46:30:78:
f6:e4:cc:38:e9:e4:6d:8e:cf:ce:35:15:ed:73:1f:
0a:49:1e:de:82:0e:41:48:32:15:4b:e7:e3:5c:4d:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:09:01:1F:49:2B:07:CA:C1:59:1A:62:40:88:3E:6B:AF:23:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB37D9887F511F08EE89CB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:8a:8d:42:a4:15:cf:61:97:d4:f5:16:61:d0:c6:a8:5e:18:
ee:ed:39:40:93:11:d9:dc:ed:60:30:bc:af:ac:44:51:88:da:
cb:1c:8c:2e:14:85:d7:88:f5:12:d2:9c:e7:8c:99:c3:77:fe:
03:eb:dd:00:be:96:fd:bf:14:26:22:b1:5a:44:88:74:44:56:
a7:4c:71:b0:fb:53:e1:d4:8e:93:1a:13:a5:2a:77:f1:7b:4c:
d1:b0:35:ee:e9:3b:fa:8a:79:35:c5:de:b9:59:ec:87:54:13:
19:d4:78:9d:0c:99:85:b7:c6:1a:84:2f:37:0c:fe:82:ed:ee:
9e:00:f0:8c:6e:a0:5b:4b:7b:ab:28:fd:95:1d:47:4b:3a:1d:
09:4e:ba:08:38:5b:8f:a1:61:a6:ac:a0:eb:13:ef:96:fe:9d:
1f:ea:07:85:a7:f0:65:23:fe:3d:24:62:b0:c2:ab:26:88:79:
2a:3f:c5:23:ee:32:ec:b0:df:de:0d:a3:a1:e1:13:a2:53:a2:
25:38:7f:da:0f:29:09:b5:df:0d:76:39:80:25:0b:bd:59:de:
dd:0e:fb:fb:ea:04:98:b4:01:36:55:80:f7:05:a2:5f:37:78:
2f:34:62:c1:02:b2:a0:ce:44:aa:7a:67:6c:80:81:27:6f:82:
ab:79:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:41 2025 by rpki-client