Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E5400888C111F08EBB47DBDAE4EC9C.roa
File: 77E5400888C111F08EBB47DBDAE4EC9C.roa (raw, json)
Hash identifier: 6y3/4O/yOPEx618ZuopeNRlNm2jih9Wr1kPC0PYo01Q=
Subject key identifier: 1C:C6:AD:BE:36:0A:04:E1:87:3A:42:59:D8:82:07:45:BA:37:C1:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E5400888C111F08EBB47DBDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 12:28:17 +0000
ROA not before: Wed 03 Sep 2025 12:28:12 +0000
ROA not after: Fri 10 Oct 2025 12:28:12 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105738 (0x19d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 12:28:12 2025 GMT
Not After : Oct 10 12:28:12 2025 GMT
Subject: CN=68b83461-d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:62:1b:ed:89:48:e9:02:95:d3:fb:db:bf:e3:
76:b2:18:3d:e1:a0:48:69:df:95:79:43:e8:34:1d:
45:f1:5b:dc:44:14:7d:90:de:31:d1:5e:52:1b:b2:
c7:3b:b9:eb:a5:65:cd:bc:ec:de:dd:80:50:39:32:
7a:76:d1:be:40:c8:fa:86:b7:92:a5:05:8b:73:12:
6d:f8:cb:19:c9:24:fc:ef:dd:f4:5e:41:b0:02:2c:
b7:74:0b:4c:84:7e:6a:a4:56:c2:d3:61:81:e8:a8:
36:d6:a9:a5:62:b9:b3:26:23:2f:6b:6a:c2:bb:d7:
28:80:1d:bd:4f:34:26:16:e7:a9:13:14:cc:86:17:
17:49:46:6b:11:91:19:c2:a9:8a:73:a9:51:c4:ad:
77:de:40:9b:66:71:82:0a:30:21:35:bf:0c:f5:43:
7e:7d:ef:5b:3e:6b:8a:3f:b8:cb:50:10:a4:a7:9d:
2b:a9:9f:66:cd:3c:78:eb:1f:74:e9:08:4e:45:82:
b1:13:b8:12:11:d4:fe:09:b9:7a:a6:e2:fd:57:57:
56:71:5e:32:46:b3:e9:1e:ba:e5:a0:b9:0b:15:3e:
12:87:69:0b:32:d5:98:fc:ce:35:2b:01:44:ae:c8:
12:71:e0:d5:28:ab:6d:b3:30:7e:45:98:6d:f9:0e:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:AD:BE:36:0A:04:E1:87:3A:42:59:D8:82:07:45:BA:37:C1:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E5400888C111F08EBB47DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:c6:17:e2:12:dc:c2:cf:db:82:c6:57:c1:9b:5a:20:0b:36:
63:96:c6:6e:e8:67:08:51:df:3c:7e:ad:3e:4e:de:58:19:0e:
6f:e8:36:f4:9d:70:36:2c:2f:bf:e7:f1:ad:8e:49:de:b9:93:
92:fb:e0:cd:da:9c:52:b8:73:9f:fd:ae:18:88:b3:af:40:7e:
b8:15:06:36:3f:87:7c:0f:98:2d:bd:33:20:83:e8:22:a7:86:
2f:f3:c6:49:2d:53:7f:5c:d8:fe:c7:af:c6:3f:f2:b9:f6:12:
d0:ab:e0:2d:84:03:54:75:f1:ed:5b:a9:bc:b3:c1:4b:94:d8:
07:98:10:fd:03:60:d0:24:a3:bb:36:de:9a:ea:94:12:9d:a1:
0e:20:de:cc:83:2f:48:6a:ad:3b:41:4a:55:f9:27:e4:e1:f3:
f2:4a:65:d1:e9:b9:09:1e:0e:3c:fd:43:11:88:66:a5:d5:5d:
59:ea:fa:25:ca:ac:7c:80:2e:34:14:0f:30:05:a3:fc:55:c0:
24:21:58:95:a7:4b:9d:56:b6:3e:3b:03:5e:0c:33:7f:5a:ec:
89:06:a2:eb:b1:97:06:1f:a9:ea:e6:56:c5:68:56:69:b0:6c:
ef:0b:17:fe:73:a2:21:ca:33:c6:15:f7:1c:81:c5:59:0e:c1:
f4:8d:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:46 2025 by rpki-client