Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321AD75A87D011F0854A7EC8DAE4EC9C.roa
File: 321AD75A87D011F0854A7EC8DAE4EC9C.roa (raw, json)
Hash identifier: tKVAczwVqV1mn0q8+xbeAp41ZLHMpg/z+lq1jM3fbrI=
Subject key identifier: 68:B8:5D:AE:0D:A6:BD:6D:F0:F3:52:7A:6F:E4:83:2F:CF:57:09:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321AD75A87D011F0854A7EC8DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:41:12 +0000
ROA not before: Tue 02 Sep 2025 07:41:06 +0000
ROA not after: Sun 05 Oct 2025 07:41:06 +0000
asID: 20326
IP address blocks: 154.194.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105420 (0x19bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 07:41:06 2025 GMT
Not After : Oct 5 07:41:06 2025 GMT
Subject: CN=68b69f97-bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:d7:27:c1:27:3a:9c:12:ac:ee:cd:45:b9:
08:3f:b9:56:33:5d:1a:90:b5:16:55:11:0b:2c:8e:
df:61:a7:da:c3:70:2e:51:7f:0b:0c:c4:b0:d2:c6:
b9:42:06:f7:18:e5:97:73:5c:59:0e:d6:08:8a:9d:
67:7b:f9:31:1e:95:9c:de:c3:c1:4e:e1:35:e5:94:
8c:fb:78:b6:9d:af:5b:d6:07:8c:61:41:d6:8c:dd:
23:10:23:31:e3:be:95:ee:70:e0:26:8a:fe:24:ae:
0e:e7:61:6b:ab:7b:91:19:23:c6:cf:81:05:97:cb:
85:a7:b4:22:95:f4:44:2e:e5:8a:6f:20:dd:c4:0c:
4a:5a:7a:64:c3:9d:21:97:db:0e:90:fe:26:c1:33:
1d:bf:36:a5:45:1a:06:01:69:4b:88:1f:83:db:6c:
24:05:53:f3:6b:57:e1:65:f8:5e:87:64:f8:0a:3a:
6b:e4:f0:6d:b0:e0:4d:35:c3:c7:e1:2f:d4:08:eb:
fb:4a:b9:b7:36:2b:71:e7:85:e1:66:9f:ba:70:af:
53:32:9d:1c:5c:d8:8d:82:7a:75:c4:9d:b7:0a:9b:
b2:17:c1:7f:f6:1f:38:db:21:18:4a:7a:e9:7a:92:
c3:ee:63:b0:01:7f:17:63:aa:c0:f5:e1:6e:4e:89:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:5D:AE:0D:A6:BD:6D:F0:F3:52:7A:6F:E4:83:2F:CF:57:09:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321AD75A87D011F0854A7EC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.234.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:fc:61:2d:da:d0:09:7c:9e:39:0e:c7:95:27:83:2b:63:44:
5f:6f:97:98:cd:55:c6:4f:77:cd:8e:3c:7d:5a:86:24:8d:39:
86:cd:51:c5:9b:95:c3:6a:f4:2d:ef:08:92:45:45:e7:b5:32:
16:90:83:33:e3:82:c1:2b:69:e9:aa:2e:52:e6:69:e3:4e:fd:
f9:63:e3:f8:e0:41:41:c1:cf:f4:77:84:56:76:86:af:4f:ed:
a1:76:d0:2a:98:90:cb:03:50:c0:a3:b5:ec:d4:24:5c:8a:ea:
f3:7b:0d:8b:bc:a1:2d:5d:58:0c:a1:94:6e:8b:a0:30:20:c3:
2a:a1:d0:fa:dc:8a:98:6b:f1:e4:96:a3:c2:07:e5:47:43:55:
0c:05:9e:53:61:b8:23:96:32:fc:64:eb:ec:b7:4e:59:1f:88:
0c:b9:6c:3d:38:c3:bf:88:5d:94:52:0e:4e:a8:79:88:99:93:
96:93:d9:4c:27:c5:ed:b2:18:e1:5f:fa:62:18:ec:65:fd:60:
55:2a:18:81:e8:f6:d2:02:b5:0e:32:c1:29:fc:af:89:ad:a3:
4b:86:0b:92:38:c5:67:2c:6c:ec:ef:87:da:ed:81:61:38:91:
74:97:10:eb:12:70:53:05:8a:13:7e:85:fe:2e:85:ee:4d:74:
ac:13:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:24 2025 by rpki-client