Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AC7525E937D11F0AEE67CADDAE4EC9C.roa
File: 7AC7525E937D11F0AEE67CADDAE4EC9C.roa (raw, json)
Hash identifier: wdqcHufWyzSZd55dOsbTy8cMvaKzhXUHHy6M9DYlXBk=
Subject key identifier: 45:E9:57:27:02:0D:74:54:6C:0A:58:57:37:CA:F9:F9:18:6E:F9:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AC7525E937D11F0AEE67CADDAE4EC9C.roa
Signing time: Wed 17 Sep 2025 04:19:20 +0000
ROA not before: Wed 17 Sep 2025 04:19:13 +0000
ROA not after: Mon 06 Oct 2025 04:19:13 +0000
asID: 64126
IP address blocks: 154.88.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106457 (0x19fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 04:19:13 2025 GMT
Not After : Oct 6 04:19:13 2025 GMT
Subject: CN=68ca36c8-c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:78:90:38:99:ff:db:95:88:da:f5:e1:2e:
be:4c:ee:a8:81:e8:97:ed:1e:19:50:85:f4:8e:ef:
1a:ef:d7:ee:aa:cb:fd:67:11:b4:32:fc:e4:40:0a:
2b:cd:d1:54:7e:b9:2c:e0:bf:eb:52:ea:0e:96:7b:
d4:77:53:bb:b6:ec:5e:79:67:75:f8:e6:d4:5b:42:
86:f8:fa:79:54:33:e2:7b:d1:3e:86:09:23:cd:93:
e3:85:a7:66:e1:9c:7c:98:1c:48:af:27:0a:b3:ad:
5e:1b:25:de:8f:61:df:44:35:4b:aa:ea:44:90:bf:
6e:68:0e:84:8c:e1:f9:bd:78:e0:18:47:10:14:c0:
8b:88:24:01:6a:6a:ce:63:19:96:12:6d:67:d1:bf:
34:ce:ac:9a:30:78:67:85:10:cf:b5:75:fb:0f:c6:
b8:c5:56:5e:63:4d:1d:95:39:77:ee:de:5d:40:e1:
cc:2b:7b:62:5e:99:58:20:23:e7:34:d1:7c:26:e1:
48:60:58:aa:8f:ac:d8:c6:8e:e6:f7:55:93:46:01:
35:63:a8:6f:b6:dc:53:67:6e:99:12:43:66:ce:e5:
62:b1:6b:c1:41:9c:36:98:be:e0:c1:09:a5:b9:ad:
37:a7:6f:4a:1b:7c:a5:45:df:dd:35:dc:87:6b:87:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:57:27:02:0D:74:54:6C:0A:58:57:37:CA:F9:F9:18:6E:F9:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AC7525E937D11F0AEE67CADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2a:f7:ab:08:b7:c0:51:a3:b3:ff:aa:a6:3a:c2:98:3a:3e:
2a:ae:b1:a8:ef:99:40:8f:81:0d:fa:41:93:b9:ec:39:cd:3e:
5b:d9:e9:65:a5:ae:b4:de:ac:8f:28:a5:eb:ac:1e:31:80:0e:
cc:db:c9:fc:06:6f:72:d7:91:1b:c0:4b:25:e1:37:cb:44:4a:
8a:54:38:64:35:80:37:c4:a5:46:84:75:f5:e7:4c:4d:c4:17:
13:1c:86:79:a1:2c:e3:0e:b7:75:c9:5b:bc:33:4e:83:40:8f:
dc:e4:8a:03:69:e8:a4:bd:45:c6:2d:54:23:43:08:91:0e:fe:
82:f6:c3:bd:c8:6f:09:1d:13:bb:e8:5f:a8:8a:0a:7c:40:2a:
cb:16:7c:a0:c7:5d:08:f0:14:75:40:f0:ce:d7:9d:e6:55:b4:
e9:35:e3:2b:4b:92:81:bd:f0:d2:22:dc:3c:52:d8:63:d7:c3:
16:2a:ff:80:de:30:1f:2c:05:1a:7a:88:9b:06:17:d1:79:6a:
dc:0d:f8:91:81:12:6e:33:68:09:c3:a1:de:c8:40:a1:6b:b7:
f4:c0:20:19:62:a4:e6:38:9c:2c:c9:f8:cc:0c:fa:93:c3:6c:
2e:19:d6:eb:15:95:c1:2b:5d:36:63:7e:c9:cd:6f:76:40:c1:
e7:ff:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:53:21 2025 by rpki-client