Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7269F24E802A11F08CDBCCE5DAE4EC9C.roa
File: 7269F24E802A11F08CDBCCE5DAE4EC9C.roa (raw, json)
Hash identifier: 55FEmHXjYWzWOa7JNRjRiHbTuWshNb50LR0HwBKoMtM=
Subject key identifier: D9:7C:74:9B:EE:8C:E7:0B:2A:79:F3:5C:10:9E:19:B6:86:49:8B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7269F24E802A11F08CDBCCE5DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:07:05 +0000
ROA not before: Sat 23 Aug 2025 14:07:00 +0000
ROA not after: Tue 30 Sep 2025 14:07:00 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103887 (0x195cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 14:07:00 2025 GMT
Not After : Sep 30 14:07:00 2025 GMT
Subject: CN=68a9cb09-e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:e8:99:58:d6:03:42:f0:76:bf:e4:d9:ab:
cd:62:70:4a:eb:06:5c:11:e9:0c:b9:ca:a7:a3:15:
83:2b:14:36:e9:f2:70:c0:8c:2c:79:bc:b6:2c:b2:
96:be:86:b7:42:48:2e:24:4a:3e:d4:19:9c:1a:64:
80:7a:1b:25:af:dc:1f:2a:67:d4:86:96:15:1b:5e:
ea:13:3f:43:98:37:40:b3:cc:42:77:b1:fb:62:0d:
99:22:60:f5:dd:df:2c:02:a9:db:52:79:b1:a8:c3:
67:c7:db:83:f7:24:99:96:4e:ce:9b:02:0a:57:d6:
4b:cc:d7:39:d4:30:2c:3c:72:1b:37:6d:d1:f1:57:
90:fe:16:90:ac:53:b5:48:41:75:33:af:2b:80:1b:
1e:37:3d:b4:da:06:33:57:e9:52:26:81:98:4d:7b:
81:c3:a8:5f:b1:20:34:78:06:81:61:95:1f:82:91:
bf:b1:92:e7:38:80:b4:17:58:d5:4e:f5:fa:ed:08:
b8:48:29:78:8a:31:b7:aa:ce:1c:2c:a0:d2:5f:40:
5f:e8:5a:8a:10:33:50:b6:ed:2b:06:04:2a:72:3f:
5b:af:54:3f:e8:60:46:cb:82:2e:69:40:38:7f:bd:
35:11:19:69:4c:aa:d1:fd:30:6b:2e:46:3c:42:ea:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:74:9B:EE:8C:E7:0B:2A:79:F3:5C:10:9E:19:B6:86:49:8B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7269F24E802A11F08CDBCCE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:06:54:35:1a:01:3d:10:11:36:bc:ca:67:d8:6a:71:03:fb:
b7:4d:f2:24:92:b3:a2:40:6a:a3:2c:98:e7:98:1b:7e:e4:3e:
cb:92:34:37:7b:8b:47:66:57:10:8e:e0:ae:5f:fa:05:e7:0f:
56:4e:7c:21:e0:f5:88:19:1f:b1:cf:8d:b5:64:0d:d9:5c:a1:
21:e2:35:24:fd:e9:e3:d3:75:a8:5b:0b:ea:72:46:1d:69:7e:
2e:6e:bd:d2:86:fa:4f:f8:c1:dc:bb:89:89:f4:6b:1e:9c:38:
b3:5f:89:88:22:f1:d2:0a:ca:ea:d7:13:41:f0:71:52:ae:32:
ef:19:e4:7f:3b:0a:8f:5e:49:93:07:60:8f:9d:d6:75:4e:c4:
e1:d7:75:49:15:f8:1d:bb:fc:45:59:8b:98:d6:74:6f:0d:fe:
ec:80:fc:e5:3b:c3:3d:6a:08:ff:ec:ba:ad:75:7f:e1:af:ad:
36:0c:27:4b:bc:cf:47:c3:27:d0:5f:db:96:9d:6f:bb:4d:8a:
3a:d8:79:18:34:37:01:44:91:2e:16:28:d1:3d:21:02:79:27:
ea:ba:f5:be:54:df:08:b9:50:0d:e0:21:bb:10:8c:d1:e2:45:
b2:55:ad:a0:83:d7:6e:43:f4:ef:95:e1:20:0d:5c:a0:43:27:
2c:89:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:58 2025 by rpki-client