Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D141E84AA11F0B59B04BDDAE4EC9C.roa
File: 301D141E84AA11F0B59B04BDDAE4EC9C.roa (raw, json)
Hash identifier: A1NlaW8JIAOEaa2Tbd96yiAyGnJajtGDj7oNCgbe4Rk=
Subject key identifier: E6:F8:01:36:B9:33:F9:19:F2:B3:9A:CD:D1:49:0B:6B:91:B6:CA:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D141E84AA11F0B59B04BDDAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:31:34 +0000
ROA not before: Fri 29 Aug 2025 07:31:29 +0000
ROA not after: Sat 06 Dec 2025 07:31:29 +0000
asID: 214483
IP address blocks: 154.222.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105016 (0x19a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 29 07:31:29 2025 GMT
Not After : Dec 6 07:31:29 2025 GMT
Subject: CN=68b15756-1d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:0b:fc:80:8d:92:91:97:f6:f4:4c:30:3d:
0a:0f:86:d9:48:e8:8e:a0:44:49:97:18:2e:ff:26:
4a:d4:e6:6d:52:4b:9a:e5:89:31:52:11:09:2f:f5:
98:d6:ca:ef:5a:78:b8:2a:a1:be:b7:86:ee:d3:53:
ba:bf:da:39:b5:2c:2e:07:ee:11:44:d5:f5:ad:34:
f4:d8:c2:61:3f:28:5e:d4:ce:04:01:ac:1b:65:34:
64:e7:58:13:33:9c:4e:b3:7e:2a:dc:74:a6:3d:0a:
16:1f:ed:aa:33:64:01:74:bf:88:47:72:73:46:fe:
7d:6d:41:62:c4:7f:b8:0d:5b:e6:03:87:c8:4d:ca:
3c:9a:3e:16:87:f1:cb:cf:96:d1:36:e6:90:a6:da:
23:0e:48:37:9d:a2:f4:e4:ad:d3:10:f8:26:40:a9:
8d:41:61:ad:46:61:8c:a4:fa:02:cd:53:de:f0:aa:
31:30:dc:6e:5b:b9:64:2a:09:2c:b9:a4:eb:a9:e4:
e7:92:14:45:cb:80:43:e0:a1:2f:1b:f6:3f:26:05:
cc:a0:a4:14:b3:4f:e7:c8:89:d9:91:3d:e1:a7:c9:
28:37:40:db:0e:5a:76:92:c5:b7:a2:98:78:d7:b8:
98:c5:29:ae:bf:38:af:96:5c:0d:7c:95:47:ec:92:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:01:36:B9:33:F9:19:F2:B3:9A:CD:D1:49:0B:6B:91:B6:CA:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D141E84AA11F0B59B04BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fa:1a:d0:6c:05:9a:39:37:bb:68:ac:89:2b:ed:85:56:28:
f2:f9:45:9b:ee:d7:67:26:2d:14:36:16:3d:f9:64:25:e2:40:
69:c7:92:44:f9:8e:ed:d0:d4:e6:42:02:27:2a:8c:c5:2c:e8:
d8:de:d5:3c:d7:bd:6e:45:10:98:ca:50:36:ff:c3:a0:a5:71:
12:c0:2a:1e:c4:65:27:8a:f9:e7:64:77:4f:9d:eb:58:4d:34:
ac:1b:53:79:24:71:d2:44:30:50:c5:71:a9:75:04:f4:af:5b:
85:46:d5:89:a9:1d:05:ce:4b:a5:fa:9b:f6:42:99:bb:49:c5:
5e:9a:a4:30:67:26:0d:ac:32:8d:57:38:70:52:c1:a4:e0:1e:
8b:73:94:be:eb:ef:85:28:2f:4e:71:41:3e:9c:9e:db:dc:96:
25:59:29:de:4a:81:ac:28:bb:d8:8d:f2:80:99:ba:aa:de:3b:
fa:65:09:23:59:41:b6:2a:05:5c:57:ac:a5:d8:8d:6d:14:6d:
0f:84:20:98:cb:d8:41:22:64:1f:bc:93:76:e7:8e:ba:c7:4a:
db:98:f1:4d:34:95:7c:67:a4:b4:43:f9:2c:a0:1f:ae:75:57:
d7:16:68:32:70:e7:6b:30:0e:d8:56:50:d6:eb:99:70:c2:9a:
8e:14:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:33 2025 by rpki-client