Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A42FE6C88CB11F0BFA2849ADAE4EC9C.roa
File: 7A42FE6C88CB11F0BFA2849ADAE4EC9C.roa (raw, json)
Hash identifier: sOxwwqWfxs7TiUGmYsdK6lt4wrp3WiWenXoJby+ELJI=
Subject key identifier: 11:54:CA:B5:77:D3:19:72:51:BC:46:74:97:10:10:A2:3D:F6:DF:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A42FE6C88CB11F0BFA2849ADAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:39:56 +0000
ROA not before: Wed 03 Sep 2025 13:39:50 +0000
ROA not after: Wed 10 Sep 2025 13:39:50 +0000
asID: 142403
IP address blocks: 154.209.4.0/23 maxlen: 24
154.211.12.0/24 maxlen: 24
154.211.13.0/24 maxlen: 24
154.211.14.0/24 maxlen: 24
154.221.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105767 (0x19d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 13:39:50 2025 GMT
Not After : Sep 10 13:39:50 2025 GMT
Subject: CN=68b8452c-2c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:48:ca:a4:c8:db:30:1d:09:8c:3f:73:92:bc:
8c:e2:15:bd:d4:c2:16:e4:ff:be:a8:40:8e:ff:32:
f2:6e:8d:2b:06:c9:ff:14:d3:8d:89:b6:02:2c:44:
b2:41:7c:1b:67:60:f3:6c:3d:ff:07:a9:79:87:ef:
b8:0a:0a:bf:9d:82:af:89:2d:4e:18:5d:20:fd:1f:
34:c3:88:3f:0d:2f:59:90:e9:73:0a:fe:37:60:75:
49:df:b2:48:62:9c:67:70:da:fe:0b:bd:34:f4:c7:
5f:c7:2c:7e:d1:9f:97:79:96:39:a4:2f:1c:7f:24:
4e:02:b3:91:6a:9c:47:57:ac:5b:ed:f4:59:42:f6:
74:f2:e6:09:5b:ba:84:f6:30:7d:03:43:19:26:93:
e5:55:a5:96:34:e0:41:6f:12:91:59:e6:57:29:32:
fc:f1:29:dc:9c:f2:21:55:b3:e5:d2:2b:3f:94:c0:
0d:34:b5:0e:53:ac:e0:77:84:55:12:8c:1d:49:a3:
17:9a:81:e4:e4:90:ae:aa:90:50:e8:25:77:bb:e0:
33:77:fc:dc:dc:c6:e5:92:e9:5d:e9:0c:60:ea:0f:
b1:5f:f4:0c:0e:de:bf:1f:77:9c:08:56:ee:8f:37:
cd:7a:4a:a3:50:12:cc:61:86:e4:10:5e:06:06:6b:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:CA:B5:77:D3:19:72:51:BC:46:74:97:10:10:A2:3D:F6:DF:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A42FE6C88CB11F0BFA2849ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/23
154.211.12.0-154.211.14.255
154.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
95:80:b3:5d:35:84:3d:b4:fa:a5:29:30:64:72:03:f8:a6:45:
e4:31:22:05:e1:21:29:48:48:b9:00:94:12:fa:54:8b:25:6b:
22:71:a8:ea:cd:ae:e8:51:a9:a6:81:fa:67:1b:49:2e:ef:17:
38:80:0a:df:6b:f8:49:e0:cd:00:02:02:13:26:45:3b:6b:db:
70:0f:eb:18:d2:b2:b0:49:4a:8c:e8:e2:91:22:1a:a7:92:11:
22:63:b8:c0:31:af:8c:4c:9b:e7:b4:34:48:58:eb:f2:29:a1:
1a:6e:62:31:08:94:af:7c:89:c5:04:2d:c8:48:41:50:bf:90:
c7:cb:b1:64:0b:22:e2:20:56:c2:4d:5c:26:5e:c6:86:ce:60:
17:03:47:63:9d:a6:a9:e4:3c:48:0f:2b:92:04:52:ea:41:1d:
1a:1d:40:da:13:56:be:d1:61:0d:90:9c:5f:e0:b5:88:d0:01:
82:87:43:0c:7a:a1:ee:07:9d:d7:a0:7c:29:8f:4c:8e:13:b7:
bb:d0:90:7b:c7:9c:18:68:1b:2e:26:88:47:0a:78:7a:5f:da:
50:02:bf:4f:7f:09:8f:3f:7f:bb:f2:af:79:0e:10:22:a6:02:
63:a8:7c:ef:00:b4:59:c6:af:f7:bb:2a:50:d7:5a:19:3e:c7:
ec:6a:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:39 2025 by rpki-client