Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801059887EB11F0B6FB4BF5DAE4EC9C.roa
File: 3801059887EB11F0B6FB4BF5DAE4EC9C.roa (raw, json)
Hash identifier: 57D78zwEKIWKsW+mKmYzHJpChRBcuza/ccK1z26N9WU=
Subject key identifier: 09:7D:2B:98:FC:E1:DB:07:4C:BF:0D:01:EB:0A:7C:1D:8D:89:EA:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801059887EB11F0B6FB4BF5DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 10:54:38 +0000
ROA not before: Tue 02 Sep 2025 10:54:33 +0000
ROA not after: Fri 10 Oct 2025 10:54:33 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105480 (0x19c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 10:54:33 2025 GMT
Not After : Oct 10 10:54:33 2025 GMT
Subject: CN=68b6ccee-884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:50:10:41:77:9f:6f:d6:a8:bd:08:00:55:
10:4e:4f:53:08:4f:9c:6c:2d:4c:40:2d:89:74:d0:
6d:04:24:8e:a8:63:7e:d3:55:60:e6:d1:d5:eb:b9:
69:82:1d:f0:a0:d4:0b:62:9d:4b:1e:f6:59:60:a1:
c8:80:f2:32:f2:b1:61:7b:e4:57:b0:a7:00:b6:86:
a1:c0:ad:20:d5:e7:ba:f0:d2:35:87:ed:32:15:39:
88:75:63:51:ba:5e:fd:e4:56:fc:a2:2d:d8:ac:a9:
c3:5f:ba:5a:25:56:93:7c:c7:b2:34:24:37:98:c9:
c5:a4:73:bf:6a:5b:27:47:14:54:11:c6:da:44:b7:
1c:6d:d3:41:a2:10:e3:80:01:ba:4f:11:68:16:68:
4e:4f:70:81:31:f7:c3:d2:67:27:42:8f:8e:41:8d:
12:7d:fa:4a:b8:8a:7a:6d:5c:bb:84:8d:e8:18:96:
ab:09:71:54:14:c6:8b:74:bd:6d:56:a0:39:12:2a:
1c:c8:0a:47:97:13:ef:6f:f0:91:82:47:18:c8:fc:
65:94:3c:eb:e2:f6:2d:20:1a:e9:4a:0a:3a:e5:4a:
cd:d4:57:22:73:69:88:3f:9c:99:d3:94:1a:bb:05:
35:ea:b8:b7:08:c0:c1:d9:20:e7:0c:f9:5e:ef:55:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:2B:98:FC:E1:DB:07:4C:BF:0D:01:EB:0A:7C:1D:8D:89:EA:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801059887EB11F0B6FB4BF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a3:50:81:2a:40:65:4f:8b:ca:ac:4a:8d:0b:6d:b5:5f:c2:
d7:a4:d5:ed:17:ab:8b:fb:ea:73:03:50:b2:de:a7:58:95:89:
08:92:dc:4a:5f:cb:bd:00:e5:fa:b1:9f:c0:b9:50:c1:2b:b5:
c2:b9:ec:83:58:fe:ac:fb:43:d5:0e:c9:db:f6:c6:30:d4:ab:
78:e4:6a:5e:ba:c9:01:e1:61:96:00:04:28:6d:f6:e1:60:58:
43:f2:36:cc:85:2e:35:6e:a2:86:4b:7b:9b:36:2c:f7:df:93:
cd:76:23:e0:b9:3b:db:e3:f6:c9:ec:c2:28:6a:c8:20:ce:98:
7a:04:26:09:77:a1:f3:6a:ac:f5:cc:34:9a:a1:15:46:a6:40:
a9:82:c1:0d:7b:f9:25:1c:5d:79:e6:8e:6d:19:28:7c:63:e0:
9e:81:02:8d:4f:e1:b4:ed:29:1c:cc:40:f3:e9:cf:cd:ad:7e:
86:0b:16:3d:ee:45:09:5b:07:00:c9:f2:6c:1f:0d:45:d8:c6:
8d:2f:95:20:1c:ba:7f:a5:72:52:2f:6b:2d:e3:3d:69:d4:7c:
7b:91:03:95:c7:f2:b9:8a:cb:8f:98:a6:af:d8:e8:a5:0e:12:
14:6d:ef:66:52:58:16:a0:da:d5:7c:80:59:0c:42:9b:41:6e:
99:52:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:41 2025 by rpki-client