Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799329D4895611F0AB4EDFABDAE4EC9C.roa
File: 799329D4895611F0AB4EDFABDAE4EC9C.roa (raw, json)
Hash identifier: qGx3SGs/gdBJmreXcN3iGHnqm/RsczvBaZzvw6xRnPQ=
Subject key identifier: 16:45:6D:38:C0:21:AE:55:E2:10:54:1C:9C:9E:1C:2A:3A:20:12:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799329D4895611F0AB4EDFABDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 06:14:55 +0000
ROA not before: Thu 04 Sep 2025 06:14:50 +0000
ROA not after: Tue 07 Oct 2025 06:14:50 +0000
asID: 213734
IP address blocks: 154.83.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Sep 2025 00:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105813 (0x19d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 06:14:50 2025 GMT
Not After : Oct 7 06:14:50 2025 GMT
Subject: CN=68b92e5f-1189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:37:44:6f:11:00:d8:83:84:10:9c:04:fb:
21:72:16:f3:c5:1c:41:87:13:e8:de:e1:8e:c7:ae:
4c:57:58:72:b3:ad:d8:e0:2c:bb:5b:9d:83:a2:e4:
5d:7e:4b:b9:3a:fb:79:0e:5f:a9:62:7a:e8:d9:69:
dd:b5:1e:aa:e3:78:13:ce:ae:a9:5d:3a:e4:b9:17:
7a:e3:0e:4f:b3:53:4d:14:7e:80:e5:9b:4c:0e:6c:
fc:20:3b:1f:7c:ea:54:82:69:56:ab:a2:b0:5b:3e:
95:a5:8b:02:0a:48:f4:5b:da:64:fa:0c:e7:39:ea:
8c:f4:22:02:37:8b:9a:39:55:92:18:55:d7:03:f6:
7b:d2:6e:d2:db:14:e4:61:a2:86:da:96:fb:83:ff:
cb:64:c8:50:0d:89:9f:b0:de:a4:db:3e:5d:24:b2:
7e:13:06:7d:3b:7d:31:95:e0:fe:e6:1e:b9:c5:8d:
51:dc:3c:d9:e8:73:34:46:d2:28:b4:a4:c5:a4:a3:
f5:2c:4a:95:70:b6:58:bf:9d:00:93:7e:6c:d6:1a:
4f:90:88:95:cc:c5:bc:6c:17:a2:f3:dd:71:47:63:
24:83:7a:02:ce:3d:bf:00:f1:96:36:eb:bc:e3:5b:
8e:a0:9c:9b:1d:1f:23:c8:58:48:39:a6:64:71:ac:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:6D:38:C0:21:AE:55:E2:10:54:1C:9C:9E:1C:2A:3A:20:12:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799329D4895611F0AB4EDFABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2f:92:ac:5c:e7:fa:3e:2c:3b:66:d7:ac:e7:29:72:db:0d:
02:40:62:03:e1:cc:0a:d9:cc:b7:6f:aa:2d:d2:70:e6:a7:95:
f4:b9:f3:8d:fd:39:1b:48:5e:0f:88:8c:d6:ae:1f:6a:dc:a5:
a7:a2:e2:13:83:53:26:c3:f9:ff:93:00:be:b8:03:3d:00:d6:
07:35:13:80:79:7a:03:62:c0:45:fd:c6:ca:9a:f6:c2:06:3d:
81:61:07:6a:b4:2c:41:78:7d:71:14:48:79:01:a1:d7:f8:3e:
a9:85:d8:ad:ef:8f:b4:e9:af:2b:e4:05:4d:64:8f:76:41:3b:
d4:cc:84:c0:e3:a7:4b:b0:ef:99:b5:59:ee:03:1c:75:f1:ac:
53:f2:86:10:94:1c:a7:45:7b:4e:66:a7:c8:e2:87:ca:b5:d2:
a8:dc:11:44:f8:2f:a9:53:e4:32:75:f6:b7:1d:e4:f3:55:09:
89:76:b2:3f:7d:02:e1:25:e2:f2:3a:56:7e:26:d7:5f:1d:d9:
52:ad:39:15:40:c2:a4:f8:2d:bc:c2:ef:a8:32:06:6c:05:db:
e3:da:a6:96:ff:0d:0f:67:e3:5b:58:ce:f4:64:82:86:91:42:
41:e0:80:91:b2:03:7a:28:f4:12:d7:f7:1e:8f:1d:9b:d1:3c:
ac:29:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:38:15 2025 by rpki-client