Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51BDEE86837E11F080D65784DAE4EC9C.roa
File: 51BDEE86837E11F080D65784DAE4EC9C.roa (raw, json)
Hash identifier: INf1xemrsXLOa0TE4IcWL2sOjIcexVQr64sxR5ZGh84=
Subject key identifier: 07:9D:21:D1:BB:DC:54:65:E5:39:42:92:03:58:EF:BD:AD:7A:85:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51BDEE86837E11F080D65784DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 19:45:01 +0000
ROA not before: Wed 27 Aug 2025 19:44:56 +0000
ROA not after: Mon 03 Nov 2025 19:44:56 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104711 (0x19907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 19:44:56 2025 GMT
Not After : Nov 3 19:44:56 2025 GMT
Subject: CN=68af603d-57a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:c5:63:c7:98:e9:b0:8d:21:8a:5d:40:68:
b5:9b:73:fc:d0:23:25:2e:66:e3:29:9a:5d:8c:e2:
ac:a8:6b:83:c8:28:3e:3b:4a:43:29:5d:e9:44:95:
2b:10:81:3c:7b:09:c7:72:a6:61:75:ba:45:10:bd:
97:f3:15:41:60:23:bc:89:a4:7c:74:da:b5:1f:b0:
81:b5:82:f7:bc:6f:0e:a6:6b:ba:a8:d1:04:07:17:
16:66:e0:02:81:76:be:f4:0f:ff:07:29:f9:38:07:
82:c9:c1:85:c1:c7:ab:7d:88:d9:4f:04:9b:d8:bf:
ea:c3:65:8d:dd:83:b3:26:e4:aa:0c:29:42:9c:0c:
81:28:cf:e4:49:68:e8:06:1f:96:41:5a:fb:7a:17:
65:5c:19:8c:45:40:70:cd:62:20:8c:9a:e2:cf:2e:
0c:27:01:4a:ad:07:25:00:11:d0:d8:34:72:a5:16:
c2:10:72:cd:e5:ad:8d:44:e7:e7:93:9f:96:9f:df:
53:37:3e:12:6d:62:88:09:33:94:13:58:a2:51:a2:
87:b1:83:9d:16:c4:5d:8e:9c:9a:95:fa:58:8d:88:
f4:41:a1:34:d6:2b:56:c0:bb:f4:5c:0a:2d:30:79:
98:da:11:9e:7b:c8:09:59:d4:a1:d9:6c:be:2d:a2:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9D:21:D1:BB:DC:54:65:E5:39:42:92:03:58:EF:BD:AD:7A:85:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51BDEE86837E11F080D65784DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ea:8c:cb:e8:a0:c8:f0:65:85:96:de:66:73:e9:e0:c2:5e:
b8:82:09:0a:99:b6:1d:c9:88:53:f6:32:54:90:07:02:7a:9d:
40:2c:ba:e1:06:94:e8:d5:6d:6e:be:12:c0:a1:28:3e:ad:39:
6f:37:a4:4f:bd:ca:d9:6c:97:87:5b:4d:51:c1:0c:42:28:7d:
94:6d:cf:36:e8:33:e3:12:8a:78:df:96:67:b0:93:8c:48:b5:
4f:32:72:45:43:a8:c0:11:14:26:54:a2:88:e0:b4:5d:ef:26:
6c:5f:96:7a:7f:7f:93:a0:31:83:b2:a5:c4:25:a3:a9:12:35:
97:71:b7:e0:1d:a4:a9:0b:40:92:ce:1b:ff:7b:17:98:29:1e:
16:52:4c:b3:33:a1:c0:c2:d1:a4:14:0f:d3:da:14:c3:d8:20:
4b:22:d4:5c:dd:0b:b5:78:cd:a9:4a:e1:90:78:f2:d4:23:4b:
2a:96:c4:1e:1f:34:ec:af:71:25:ac:5b:0e:b7:36:95:9d:82:
39:e7:85:3c:c4:56:2f:c3:11:e7:51:b8:dd:a0:0f:90:1c:03:
65:25:f4:24:14:d3:e2:6b:dd:9d:92:40:36:32:57:aa:c1:09:
09:22:4e:1b:66:b4:8f:c7:cc:a6:d6:92:43:01:a7:de:22:84:
e3:df:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:38 2025 by rpki-client