Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608F99DE83E511F0B7860EB3DAE4EC9C.roa
File: 608F99DE83E511F0B7860EB3DAE4EC9C.roa (raw, json)
Hash identifier: /DXL0OO4lbp2v8hRP/HcWO8hB/uITGuNUIQGQ8rr4rE=
Subject key identifier: F0:D6:31:58:72:C8:01:39:32:93:D5:28:A0:EB:0E:11:64:53:0F:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019964
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608F99DE83E511F0B7860EB3DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 08:02:44 +0000
ROA not before: Thu 28 Aug 2025 08:02:40 +0000
ROA not after: Sun 21 Sep 2025 08:02:40 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104804 (0x19964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 08:02:40 2025 GMT
Not After : Sep 21 08:02:40 2025 GMT
Subject: CN=68b00d24-00ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:bc:02:e3:81:84:f9:35:e4:b9:06:3e:1b:
4c:d4:59:4d:71:4a:82:9f:b2:48:83:b0:99:58:58:
c1:d9:9c:4e:61:cb:0c:1c:d7:8f:0d:66:1c:e2:11:
f9:aa:50:a3:bb:95:a7:bb:fb:3a:40:11:e0:26:d7:
f4:39:78:5d:6d:90:9f:b0:a9:ef:49:27:09:57:a2:
d0:1e:fc:cb:5c:6e:98:57:a4:c6:6e:dc:a0:be:94:
2d:d2:b1:29:b7:f3:4d:19:41:ff:7c:09:02:5f:f6:
eb:4c:9c:be:9f:90:f6:f9:44:27:f4:11:bf:b0:77:
b0:da:37:88:e7:8c:a3:9a:9f:32:95:14:54:5d:09:
ae:3f:b1:d8:9b:25:fa:ce:69:db:6e:0c:6a:b9:94:
f9:0f:62:b8:07:bd:b0:a5:9c:c5:df:d7:02:3b:27:
c1:bb:e8:cc:76:41:d1:0d:15:f5:3e:d4:7f:6b:a5:
93:7e:b4:be:a5:74:69:0f:f7:cd:51:fb:ee:04:66:
b1:3e:15:03:55:ad:dc:78:35:87:27:99:b1:5e:2f:
3b:4e:ef:23:51:6d:91:e1:58:7c:0f:93:ea:da:13:
26:6b:fd:73:21:cb:ca:23:3a:1d:00:9c:f7:20:d5:
75:22:93:49:f4:1b:1f:11:89:3f:5f:85:1b:be:98:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:31:58:72:C8:01:39:32:93:D5:28:A0:EB:0E:11:64:53:0F:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608F99DE83E511F0B7860EB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ca:51:17:ce:4a:c1:a1:84:17:28:b7:b2:0d:b2:b5:df:55:
88:6b:14:65:4c:63:1e:96:ee:17:5c:c1:45:2b:2a:3a:ed:a2:
f2:01:a6:03:ae:8b:1b:70:d2:e8:8d:8f:b1:42:4d:b6:91:60:
39:1c:7c:e5:6c:8c:1d:53:e5:bc:cd:d0:90:86:1c:9b:c6:26:
fe:05:47:42:af:51:7b:5d:f7:c6:25:6d:a0:91:12:64:6c:58:
59:b1:68:d7:b2:7b:39:8f:69:8b:0b:e5:79:c2:cc:55:bb:fa:
f3:fc:ff:58:1c:ae:1a:3f:9b:60:1a:55:71:4f:84:d3:f4:d1:
1b:99:c4:eb:96:3c:22:49:3c:49:68:4a:2c:30:8c:d2:f6:9a:
9d:be:ef:e2:b5:b7:da:47:d9:af:37:0b:a8:3c:e5:9b:3c:73:
0a:fb:cf:4f:07:9f:8d:9e:c9:cc:ff:9b:1b:a6:ef:e1:bb:e4:
9f:d1:f0:e3:01:7f:17:63:de:a4:e3:6d:7d:b7:18:28:ac:c3:
c0:1e:80:c3:98:dd:be:e0:a2:c7:7c:c6:1b:29:12:b3:78:23:
88:3a:44:a2:f3:7e:7c:c5:31:ce:34:48:6a:55:5a:90:c5:8e:
14:52:4f:81:bb:e5:18:4b:c1:52:3d:da:65:50:af:86:83:8d:
99:43:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:45 2025 by rpki-client