Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C84ED087CE11F0B27841BBDAE4EC9C.roa
File: 11C84ED087CE11F0B27841BBDAE4EC9C.roa (raw, json)
Hash identifier: Jv3IHjto7La1e0vATMroYWA6hXPyMrgkJPadLVTLaKE=
Subject key identifier: EC:3D:0E:77:19:1E:E8:49:24:3B:7E:23:F5:EA:54:DD:D8:3B:10:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C84ED087CE11F0B27841BBDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:25:58 +0000
ROA not before: Tue 02 Sep 2025 07:25:53 +0000
ROA not after: Tue 30 Sep 2025 07:25:53 +0000
asID: 401783
IP address blocks: 154.89.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105414 (0x19bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 07:25:53 2025 GMT
Not After : Sep 30 07:25:53 2025 GMT
Subject: CN=68b69c06-2157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:d5:94:10:44:80:47:7f:47:0d:0e:db:7e:
c6:e3:a4:2c:a4:cf:8f:03:26:39:c8:82:f5:57:63:
3a:e4:5b:65:7b:2e:49:86:ec:f3:60:20:6d:b5:81:
78:5c:2a:b3:a7:23:3c:9b:20:fb:6f:62:92:0d:a8:
f0:90:b9:db:4d:5c:4c:16:fa:08:0f:88:81:80:61:
62:d2:45:1d:29:b6:16:a9:8e:61:5b:12:b7:bf:93:
98:ad:72:f1:13:94:ab:07:38:e5:6e:89:1a:38:74:
a8:e3:38:a0:b0:f5:d0:5a:10:8b:17:4f:11:0d:02:
e6:47:fe:81:4b:a3:8e:b3:4d:ec:04:ae:01:2d:8e:
78:b6:eb:ed:7e:52:a2:e1:5f:f5:35:48:c3:1e:5e:
c7:8b:94:84:56:c4:95:1a:18:43:07:7b:eb:1f:e5:
9b:52:83:31:0d:35:4a:2e:d2:43:de:9c:11:6c:53:
f6:57:f9:56:0f:1a:46:87:bd:fd:1b:4d:f8:ca:01:
29:f3:07:c8:eb:f3:f6:b4:20:b8:a3:db:7e:8b:0f:
fb:b9:d7:59:e9:ec:bb:dc:a6:0c:d2:4e:0a:de:92:
15:61:ed:67:dd:cb:84:94:1c:6a:51:27:d8:dc:c6:
34:bc:63:6e:c6:3a:7e:71:af:14:71:63:a1:0c:46:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:0E:77:19:1E:E8:49:24:3B:7E:23:F5:EA:54:DD:D8:3B:10:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C84ED087CE11F0B27841BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.132.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e2:51:1e:ad:2d:9b:a5:88:7e:97:45:51:6e:19:cc:34:35:
22:e5:d0:ed:5e:57:93:77:11:d2:e2:a2:09:fa:fb:fc:98:97:
e9:92:f0:33:1b:71:e8:b9:5c:7b:2a:c2:dc:0e:1d:5a:21:b2:
91:01:50:fc:8e:56:09:18:c6:60:12:6a:e8:5d:5b:ed:bc:41:
7c:31:6a:15:86:dd:03:d5:79:a2:b9:0e:dd:e3:77:2a:fc:02:
80:06:b9:65:e3:70:b3:20:20:2a:86:92:a8:b8:80:5e:8d:49:
3c:81:b8:70:ba:5c:46:49:43:31:a1:f4:9e:29:07:09:00:a0:
70:3e:1a:e9:f2:21:64:50:33:bb:d7:29:ec:66:4a:c2:5a:c1:
08:98:ca:39:f2:7b:51:d8:bf:64:1b:00:f1:da:3d:f8:58:b0:
e5:ee:5a:3a:54:8f:fc:22:53:62:32:92:49:f5:9d:16:fb:52:
75:c4:9d:5b:30:43:dd:15:53:5e:47:74:42:b7:b9:77:af:74:
a2:73:fe:4e:c4:fd:5f:a4:e2:e5:45:88:2f:ed:c4:b5:12:4c:
f6:a2:dc:bb:d4:9f:e6:87:b4:80:82:63:89:7b:4c:84:9f:60:
e0:8c:b4:05:7a:c1:58:10:53:85:94:c8:d8:27:81:48:91:e2:
76:10:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:40:19 2025 by rpki-client