Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/220F91AC801E11F0B77CC597DAE4EC9C.roa
File: 220F91AC801E11F0B77CC597DAE4EC9C.roa (raw, json)
Hash identifier: DT2QFtuf6fdo/sEdNlXtLRI2ph0JPD0ePcFU9XEnOk4=
Subject key identifier: AB:56:A2:77:17:2D:54:1C:F0:5B:29:31:77:14:A4:02:5D:C5:C6:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/220F91AC801E11F0B77CC597DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:38:56 +0000
ROA not before: Sat 23 Aug 2025 12:38:51 +0000
ROA not after: Sun 28 Sep 2025 12:38:51 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103862 (0x195b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:38:51 2025 GMT
Not After : Sep 28 12:38:51 2025 GMT
Subject: CN=68a9b660-0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:3b:7d:a4:4b:fd:a6:8e:8f:89:e0:9d:52:
b1:bd:fe:58:df:29:98:f7:9a:97:97:0e:b4:16:55:
ba:bb:79:ca:31:0c:25:51:dc:3d:46:e1:89:2f:23:
71:69:7f:c5:05:de:98:f1:c1:ec:bd:ce:69:d5:2c:
62:6c:d9:67:84:93:cc:69:41:46:66:35:e7:4d:61:
e4:70:90:27:d8:96:a0:8e:a0:3a:ae:ee:b2:f8:ef:
08:c8:7c:7b:6d:28:a1:4e:7d:f5:1b:84:46:b8:5d:
5b:ca:eb:04:da:8f:9f:d7:c4:80:44:f2:33:7b:4c:
c8:03:19:cc:4f:36:4f:d1:8b:6e:a7:90:70:e0:58:
1d:4c:29:4d:2b:d3:cd:53:e7:36:51:bd:9b:f4:4b:
de:a8:73:d0:cf:08:07:ba:b5:bf:4b:7d:86:a5:87:
65:6e:22:24:c2:b1:00:3a:4a:ba:27:eb:19:3d:f8:
25:25:0d:80:9d:90:92:8d:32:c3:38:e2:e5:87:ea:
c9:27:17:e0:00:ce:c3:19:2f:47:fb:db:75:23:b4:
7c:3a:ab:59:c2:38:67:61:2d:fa:e3:94:98:c4:bf:
27:15:84:40:ca:22:4e:d3:34:66:fa:c8:b4:0a:ad:
5e:8f:59:ba:db:6f:5b:7d:71:b4:a1:e1:b9:cf:1a:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:A2:77:17:2D:54:1C:F0:5B:29:31:77:14:A4:02:5D:C5:C6:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/220F91AC801E11F0B77CC597DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:c0:97:8a:0a:a8:df:d9:45:4b:64:f4:8f:3b:0b:03:c5:
02:64:47:6a:6e:b6:3a:ce:e8:41:03:e1:a2:5c:da:53:af:fc:
8c:2c:c6:39:35:07:d8:3e:95:7b:3d:a1:0c:48:c8:cc:b0:b6:
1c:80:ce:e1:9e:a7:fa:95:38:98:e7:37:8b:cf:92:92:83:6b:
93:49:41:66:63:d0:45:c2:0f:81:4a:93:e6:47:af:c1:b2:34:
73:ea:ae:30:fe:05:5a:9d:ee:34:a0:3d:c7:7c:8e:fe:59:fc:
9e:9d:a6:1e:5c:26:34:5e:1d:e4:e4:a4:bb:96:16:91:20:6d:
1b:62:83:a9:4a:10:25:f2:26:64:13:53:7b:37:5f:8a:d9:77:
6a:d4:d2:0f:41:b2:5d:d8:ca:b2:46:5c:2a:3e:fe:57:87:14:
b3:77:ff:9e:c3:9a:42:f9:b3:8f:22:af:23:e7:33:37:81:17:
b4:87:a9:14:f1:bd:3e:44:85:3e:0f:d9:e3:01:b8:d9:bc:70:
73:01:17:e8:59:44:f6:32:6c:ef:67:83:b8:f2:54:b1:0f:df:
08:d3:3e:0f:ae:22:42:3d:52:00:c0:53:a5:c0:93:db:00:97:
a8:7d:a7:12:23:c9:41:5b:83:99:06:bc:97:a7:69:aa:dd:56:
c1:8b:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:04 2025 by rpki-client