Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A911AA6873411F090C3A3C9DAE4EC9C.roa
File: 5A911AA6873411F090C3A3C9DAE4EC9C.roa (raw, json)
Hash identifier: rZHlIKZ0FheRVU90CBMcgDvOz85z/aD0RR0v2DUJekA=
Subject key identifier: DD:60:84:F2:52:91:C9:A7:17:A5:98:1A:08:C6:85:E7:13:A5:92:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A911AA6873411F090C3A3C9DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 13:05:38 +0000
ROA not before: Mon 01 Sep 2025 13:05:33 +0000
ROA not after: Sun 07 Sep 2025 13:05:33 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105319 (0x19b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 13:05:33 2025 GMT
Not After : Sep 7 13:05:33 2025 GMT
Subject: CN=68b59a22-69b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:51:36:1a:9a:57:ab:ac:07:56:2d:7e:ef:
58:52:99:3b:6d:0f:ba:a7:7c:31:fa:f5:25:b2:67:
3a:46:86:05:2a:53:c4:ca:3b:51:79:06:6d:e9:61:
b5:56:2f:e0:87:60:82:d2:07:66:50:fc:ce:c4:f4:
ec:07:f4:8e:67:ff:7d:77:22:7c:37:47:bc:e3:33:
10:c4:de:c0:d2:c7:86:64:04:63:86:cb:44:58:2f:
72:3c:04:9d:7f:94:6a:56:ea:18:4c:2e:1f:66:7e:
76:20:5f:e9:60:69:55:32:76:6e:e9:f3:e8:06:a8:
a5:db:db:8a:25:5d:e2:7f:00:48:3b:fb:b5:ea:d6:
df:43:0f:7d:53:36:b1:0d:39:47:1c:ae:ff:08:1e:
b7:55:04:23:e5:17:99:fa:d0:bb:4a:d6:6f:ca:cd:
92:55:9d:a5:4f:e9:7b:52:ff:96:f7:11:25:b0:7d:
2c:17:ec:e4:58:af:4a:54:60:19:61:09:92:dc:fc:
b2:46:91:df:f4:36:a3:72:4f:1a:73:e3:e3:d1:f3:
94:26:86:ce:e6:94:06:40:38:5d:9d:60:7d:c9:11:
47:03:ab:c1:98:f6:2e:26:ef:51:b0:e3:ab:a4:0a:
b8:66:fa:4b:93:8b:2f:1c:02:cc:c3:0a:f5:c2:83:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:84:F2:52:91:C9:A7:17:A5:98:1A:08:C6:85:E7:13:A5:92:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A911AA6873411F090C3A3C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:c7:ca:f8:16:46:26:3f:2b:af:6a:05:45:2f:b2:83:8c:ba:
90:0c:03:c3:61:d2:54:3e:8f:48:f5:44:0c:31:fa:3f:ea:51:
80:4c:f0:05:3d:86:a6:2b:77:6e:47:66:3d:b8:e9:12:bf:ef:
08:4b:e5:36:e5:cf:0b:63:16:6f:ef:9c:42:d1:c3:1b:26:03:
8d:cf:41:85:5d:42:8d:02:02:27:0d:ef:70:61:42:82:6f:b7:
c9:66:04:90:35:4a:b9:a3:4d:e6:2c:86:88:4a:f7:09:2c:49:
d0:99:30:ba:a2:65:54:e4:6a:3d:1c:67:d9:41:9c:c0:b1:c4:
8f:e4:e5:21:56:14:af:bb:26:48:da:d2:7b:6b:d1:38:dd:37:
4a:19:bb:b4:a1:2b:b7:2a:15:96:9e:7b:33:7b:b4:e6:05:ed:
db:01:2f:f7:97:0d:cf:5d:e7:c8:38:2b:14:65:06:92:a3:91:
ca:b6:ba:8c:2b:2a:0d:2f:b2:94:01:c7:70:34:af:fb:35:01:
cc:53:51:ed:0e:80:f2:49:0d:7e:87:c2:cc:e3:86:95:e0:6f:
03:33:5f:3b:1f:64:18:fd:57:17:60:00:42:f1:c4:fb:ea:54:
20:4d:12:0f:c2:b6:7a:35:ef:3c:6d:7f:37:7f:59:9c:95:93:
15:bb:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:44 2025 by rpki-client