Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E00949488BB11F0906052B4DAE4EC9C.roa
File: 6E00949488BB11F0906052B4DAE4EC9C.roa (raw, json)
Hash identifier: YSybQuTBfN8V5nCd6OqeCxdZcGFjDKgmpKOtXhYIrGs=
Subject key identifier: BE:D8:C9:CE:75:E3:91:8C:96:08:AF:0F:66:44:B3:40:75:F5:BC:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E00949488BB11F0906052B4DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 11:45:04 +0000
ROA not before: Wed 03 Sep 2025 11:44:59 +0000
ROA not after: Fri 10 Oct 2025 11:44:59 +0000
asID: 30781
IP address blocks: 154.217.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105728 (0x19d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 11:44:59 2025 GMT
Not After : Oct 10 11:44:59 2025 GMT
Subject: CN=68b82a40-fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:94:91:2b:2e:6f:ba:da:bf:fc:8f:64:4f:
f0:1d:10:28:df:f5:63:d3:1a:d1:f1:7c:6b:c2:65:
f3:3d:3a:61:14:d6:b5:da:1d:21:ad:2f:be:36:b8:
76:ea:48:5c:c5:f1:81:f4:80:ec:3a:6e:a9:e3:17:
45:30:8b:2f:f0:31:c2:1f:92:5e:17:73:fd:aa:b3:
38:37:d4:ee:c3:b6:f1:55:4a:95:27:dc:11:d2:63:
2b:49:ba:89:f1:4d:cb:54:c0:25:0b:5c:a5:70:a4:
9f:5d:a1:71:77:b8:7a:8c:75:54:ef:df:2b:ff:dc:
4f:26:09:d1:85:e5:b3:9a:99:11:a4:86:9e:84:72:
6d:8e:2c:86:43:5c:41:6c:78:d3:85:9b:80:3b:69:
61:d5:2b:76:35:5b:85:bb:6a:a6:60:6d:5f:3f:f8:
13:5f:89:95:a5:8c:bf:b3:77:f2:e8:cf:62:18:9b:
e5:bf:2e:b4:f4:60:2b:b3:2f:a7:1d:25:e9:e3:b4:
8a:c3:04:e7:3e:f1:f5:28:b8:6d:3b:5f:a3:0e:3f:
16:d8:ae:25:32:e2:74:d3:c9:01:71:81:a5:9e:20:
ab:57:40:64:b0:d0:b0:fd:9b:13:b3:45:b3:4b:3b:
7f:95:55:4a:61:5e:bf:b9:4a:77:1e:24:0e:f5:05:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D8:C9:CE:75:E3:91:8C:96:08:AF:0F:66:44:B3:40:75:F5:BC:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E00949488BB11F0906052B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/23
Signature Algorithm: sha256WithRSAEncryption
06:6f:b3:77:f8:c6:40:f4:7b:16:4b:21:ad:03:a1:ad:c3:c4:
ff:25:62:23:86:9b:40:4d:6a:a3:0e:8b:88:fc:e7:ab:c1:2f:
fd:7f:d9:ba:86:4d:e9:4f:6d:62:fc:b7:32:f6:02:88:14:fa:
4d:f3:07:57:c2:a7:32:e5:99:ac:ef:ac:fa:04:8e:50:f2:57:
d0:33:03:86:c1:24:8b:fb:20:a9:7e:8d:2a:8a:0d:88:96:ee:
e2:cb:b7:3b:e4:e1:46:a4:a6:64:4e:4d:e5:ed:f3:0c:af:d2:
e5:2b:33:4d:d4:c0:a8:4c:8f:4d:0a:42:ed:4f:e8:96:7a:f7:
2d:15:eb:bf:e0:20:c1:78:27:19:98:58:c8:77:b7:e1:ed:d7:
04:9f:4c:b2:73:2e:e4:64:b9:9d:d4:69:0e:4a:1c:9b:40:8b:
cd:a2:ec:0e:44:2b:be:47:d7:83:0c:f8:3c:5f:95:ad:0d:82:
1e:2f:19:76:7b:46:02:73:39:c3:28:3b:2c:07:89:74:78:85:
d4:9c:d5:41:fb:2a:25:e5:59:60:8f:7a:d0:70:1d:1a:66:8e:
ac:f1:2f:b2:df:5b:4d:9a:64:07:7e:68:b2:84:c5:4e:45:f0:
4b:d9:bf:2c:9f:58:85:ba:99:d0:77:b2:24:98:61:bd:7e:55:
87:74:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:35:56 2025 by rpki-client