Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11709AF4871B11F0ADE99CA6DAE4EC9C.roa
File: 11709AF4871B11F0ADE99CA6DAE4EC9C.roa (raw, json)
Hash identifier: 6GtdQGkjf2w4Wy87rXBHhw3yM5sRILSsd188wqU4KXA=
Subject key identifier: A2:6B:9D:3C:2F:DE:7F:6D:5C:89:21:A4:2E:C0:2F:87:22:3F:A3:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11709AF4871B11F0ADE99CA6DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:04:38 +0000
ROA not before: Mon 01 Sep 2025 10:04:33 +0000
ROA not after: Tue 08 Sep 2026 10:04:33 +0000
asID: 140595
IP address blocks: 154.92.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105303 (0x19b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 10:04:33 2025 GMT
Not After : Sep 8 10:04:33 2026 GMT
Subject: CN=68b56fb6-579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:09:0d:9a:56:02:4c:f1:d0:7b:c7:47:04:
29:24:ed:e1:1c:fe:b5:98:91:60:1a:b5:bc:fb:b9:
09:2e:3c:21:dd:2b:cc:57:78:56:42:c3:52:d8:54:
7d:3c:ec:0e:e5:33:ea:14:57:59:61:cf:fc:40:e6:
9d:e2:61:2a:b6:8d:38:ad:d7:04:af:83:e7:75:90:
05:29:7b:f9:58:4e:33:31:f8:aa:83:e5:4f:46:80:
f6:39:51:a9:dd:ec:46:71:68:db:31:0b:fe:43:07:
a7:66:85:6d:0e:8b:f2:ee:8c:80:d7:f4:44:73:0c:
c5:c3:53:e2:1b:69:79:8d:cc:7b:76:cf:75:a8:33:
24:06:cd:fe:d9:7c:66:64:34:03:23:86:3a:c1:74:
3b:86:2e:b8:39:e0:a6:80:c2:78:84:5a:0d:cb:83:
55:6f:cc:5d:b1:5b:52:fa:36:3f:0e:0a:3f:75:a1:
4e:17:b1:fe:53:99:12:4e:cb:5a:45:69:b4:3e:c9:
0e:18:a2:d0:d8:5e:8b:dc:55:20:b8:c9:4b:e4:7a:
30:90:68:7a:0a:31:c9:f5:fb:47:77:7f:44:47:66:
78:94:45:fa:87:65:ef:f7:75:02:a6:32:82:ef:58:
83:c1:70:2e:90:0f:58:da:cb:9c:8a:97:43:4a:96:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:9D:3C:2F:DE:7F:6D:5C:89:21:A4:2E:C0:2F:87:22:3F:A3:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11709AF4871B11F0ADE99CA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
96:3d:80:c8:55:98:14:7d:83:4b:5f:b8:f8:29:e5:92:11:f8:
4c:c7:bf:ed:34:1e:bf:2f:49:5c:2f:5f:62:33:9d:d1:22:ad:
d7:05:80:be:f0:cf:85:a1:e1:9a:bc:3d:5d:ee:ab:b4:95:eb:
df:1c:39:bd:55:50:2d:05:58:06:28:08:c5:c2:b5:79:6e:b3:
8a:0e:54:d6:62:ef:dc:6b:f8:24:96:92:4b:e1:a4:ad:77:7d:
bc:1d:94:11:a7:59:c0:61:76:8e:a9:f7:8c:d6:a4:a9:86:88:
f6:4b:e5:23:7c:be:a5:ce:d0:be:fc:09:0b:d0:b6:14:d3:1d:
e8:15:1a:32:17:76:8e:7e:f6:20:b5:b6:ee:bb:a5:c1:9f:7a:
aa:67:36:f0:6a:d6:22:52:f7:f6:0a:d8:fb:dd:f0:e7:29:30:
cd:43:a6:a0:88:bf:74:d7:12:c9:75:e3:c3:ae:49:30:be:4f:
fa:78:2e:13:fe:ba:2f:83:fc:2f:bd:e4:57:eb:4d:59:a1:9d:
90:21:89:f6:0e:e5:36:29:5b:f1:38:cf:8c:a6:41:c1:81:9b:
04:fe:1d:55:e9:cf:88:a4:e5:fc:dc:ba:8d:00:68:2b:25:46:
e9:a6:dd:65:9f:f4:45:f1:55:24:c3:34:d4:5b:00:bb:4e:fa:
41:90:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:39 2025 by rpki-client