Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5F77D0802B11F09CDA36EADAE4EC9C.roa
File: 2E5F77D0802B11F09CDA36EADAE4EC9C.roa (raw, json)
Hash identifier: BwHPRJWBZkeIMdGsLCuEJxTvmDEhxEEwtC8rVtBEqTk=
Subject key identifier: F6:D1:C6:99:44:0E:DD:E0:D4:F6:37:8E:64:BE:F0:3A:D4:1D:49:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5F77D0802B11F09CDA36EADAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:12:20 +0000
ROA not before: Sat 23 Aug 2025 14:12:15 +0000
ROA not after: Tue 30 Sep 2025 14:12:15 +0000
asID: 401075
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103890 (0x195d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 14:12:15 2025 GMT
Not After : Sep 30 14:12:15 2025 GMT
Subject: CN=68a9cc44-088d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:2b:da:f2:9f:98:03:74:e6:97:a5:3f:81:
d8:7d:94:22:74:69:55:df:43:ef:89:6d:8c:af:34:
1f:8d:00:b5:91:19:4a:39:b6:a5:41:76:9a:79:29:
dc:97:e9:ba:f4:d8:6d:28:1c:b9:77:88:5a:2d:d9:
ff:88:09:49:34:a8:c0:b6:b1:e1:6d:14:dc:4b:ea:
c9:60:fe:ce:8b:6a:e3:15:64:58:86:7f:e4:c0:61:
0f:b2:79:5e:93:d6:7e:0e:87:10:64:c4:8a:0b:56:
fd:e9:a0:7d:08:fa:66:d4:43:98:6b:f0:80:93:04:
00:37:0b:66:03:48:4c:4c:70:ca:19:58:a3:de:79:
ef:60:e0:17:62:5f:57:25:c3:23:8c:d6:24:8a:42:
f4:10:11:d9:35:1b:58:9b:fa:58:c5:d8:80:e8:59:
5c:a5:7d:1c:0d:24:7d:7f:f7:2e:6c:c5:36:2b:7c:
61:42:f4:90:9f:1d:b4:b7:e8:9d:a7:6c:2d:56:11:
43:83:24:6d:0a:5e:6b:dc:d9:f8:e8:68:fa:76:c6:
c3:da:dc:63:ae:4b:66:96:92:48:32:b3:db:97:93:
ab:2d:78:50:d1:d7:e2:f2:e1:74:9d:e7:a1:ad:6e:
b8:2e:57:ed:aa:31:dc:06:fa:51:af:df:30:46:b5:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:C6:99:44:0E:DD:E0:D4:F6:37:8E:64:BE:F0:3A:D4:1D:49:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E5F77D0802B11F09CDA36EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:d6:41:e1:50:13:31:de:13:01:7b:39:7d:98:23:af:b7:d3:
c1:c2:76:4b:b6:89:4b:52:89:84:d1:e2:05:bd:5f:c4:12:d5:
1f:59:6c:96:59:aa:25:1e:38:80:00:9a:a1:cc:cd:c9:6c:f9:
82:40:8d:fc:4a:8c:a1:cc:77:75:fc:45:93:67:e2:4a:7a:60:
f5:a5:2f:b8:ea:2e:39:18:bf:d3:d6:5e:bd:1b:2c:64:c0:71:
d2:af:c9:b1:b8:22:55:81:0b:82:b5:3b:a9:86:8a:1f:26:13:
42:ba:60:28:dd:59:ae:d8:28:78:a7:ba:d6:f6:6d:d7:29:b0:
8f:8e:e1:7c:08:6f:d9:dd:fc:89:eb:0d:ac:2e:29:4a:0a:dc:
6b:ac:91:e8:53:73:51:d6:a8:1c:ae:99:af:ba:b2:53:25:65:
3a:f5:b5:52:8f:0d:42:b4:49:67:f7:0e:85:2b:0f:e5:27:14:
e7:a2:f1:fc:11:04:81:8f:bf:d9:93:a8:98:90:e0:67:bb:93:
49:28:b0:f2:aa:06:5c:ec:e1:37:9f:5b:9a:e3:f7:ab:0a:7c:
74:2a:11:62:3d:dd:7e:3b:96:9e:90:6a:29:ba:a3:48:15:bd:
e1:a3:7b:76:6f:d3:3f:cb:a3:22:70:f7:58:30:65:84:dc:7b:
3b:71:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:58:26 2025 by rpki-client