Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5334E17E8C9E11F0A04179F5DAE4EC9C.roa
File: 5334E17E8C9E11F0A04179F5DAE4EC9C.roa (raw, json)
Hash identifier: 3RiXLANuMsPX8pU8NTWq3HSZ/JpFbd6a/xRpoN1WXRs=
Subject key identifier: 5A:E2:0F:7D:8E:CA:1F:3C:C6:8E:BB:72:D0:5B:A9:A0:6C:65:52:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5334E17E8C9E11F0A04179F5DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 10:26:48 +0000
ROA not before: Mon 08 Sep 2025 10:26:43 +0000
ROA not after: Tue 14 Oct 2025 10:26:43 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
154.201.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106179 (0x19ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 10:26:43 2025 GMT
Not After : Oct 14 10:26:43 2025 GMT
Subject: CN=68beaf68-e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:f4:51:7d:37:f9:7f:0a:48:5a:66:67:a8:
cd:3c:11:c2:35:8d:9a:a1:9e:66:a4:28:41:23:64:
e8:54:a9:12:d7:97:9f:79:3a:7d:b6:39:18:f4:fb:
c5:e4:c2:6e:c1:f6:3c:a8:03:87:09:b9:71:75:4f:
57:ec:19:b8:18:3d:32:dc:de:a5:e2:8c:98:16:17:
e8:2d:f0:c4:a3:00:fe:2d:64:c1:24:f5:72:8d:88:
12:52:10:dc:32:81:28:3b:f7:43:60:07:e4:29:60:
37:94:59:e4:a4:60:ec:a0:7b:60:81:9e:17:b8:f1:
24:b1:45:df:d3:e1:10:07:53:f6:14:0e:79:76:db:
13:42:ba:58:c0:37:fe:43:62:f0:fe:d5:f9:9e:6d:
e3:d5:aa:b7:ef:d4:7e:3f:d8:69:94:92:42:79:fc:
b2:48:55:b8:86:56:a5:fe:92:b3:8b:fc:12:c2:2a:
da:34:5f:e3:3d:b4:14:2d:31:8a:9b:13:0e:9d:c7:
3c:86:37:36:26:3c:2c:01:77:08:67:da:05:86:ab:
50:c3:ae:ff:1c:51:4c:db:7d:95:5a:7c:ef:b2:02:
40:41:ea:e1:60:68:7e:90:8b:47:8d:3c:c8:1e:dc:
a0:f1:ca:a3:5b:d8:c7:45:9d:2b:35:23:cb:d5:9f:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:0F:7D:8E:CA:1F:3C:C6:8E:BB:72:D0:5B:A9:A0:6C:65:52:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5334E17E8C9E11F0A04179F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0-154.201.55.255
Signature Algorithm: sha256WithRSAEncryption
77:53:64:2f:99:da:95:14:81:d5:7b:b5:05:d8:bf:c7:12:5d:
dc:46:38:34:36:2d:79:73:ca:91:b3:fa:74:6c:b9:09:62:0e:
95:2d:aa:30:d9:7d:1a:40:93:ef:e5:88:e2:92:ea:e2:c8:37:
1f:f4:b5:71:07:a5:e5:35:b6:95:d8:2c:d2:d0:26:b8:13:cd:
dc:02:fe:91:1c:c8:83:a9:4d:12:3d:c4:39:64:fa:dd:7e:03:
5d:01:93:b3:b2:28:4f:f5:e9:0e:d3:ae:03:e7:3e:1f:b6:07:
ae:cd:e7:b5:5a:2d:11:41:97:8d:c6:87:b6:e7:b8:8f:d1:0e:
c6:dd:a4:fe:bf:4e:3a:bf:64:29:66:24:91:3b:7e:cf:8e:cf:
91:2b:5d:04:ed:7d:bf:bc:b5:c1:26:96:ec:c6:cb:ea:0b:1d:
31:10:1a:01:85:52:f4:60:ae:45:60:cb:7d:71:11:66:4c:b2:
aa:ad:06:0c:24:5f:83:d1:bb:cc:45:3c:bf:08:9d:bf:be:9b:
ec:55:50:a6:3e:06:dd:59:66:c4:e9:dc:06:a0:47:e0:13:3d:
22:a2:78:f5:a0:e8:7d:5a:e1:7f:b0:fd:7e:5f:2e:da:01:d8:
ac:08:d8:8d:fb:3b:e0:54:be:94:bb:b6:58:80:44:37:7e:6a:
1c:8e:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 09:48:25 2025 by rpki-client