Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7896368EE411F08E8DD5EBDAE4EC9C.roa
File: 7D7896368EE411F08E8DD5EBDAE4EC9C.roa (raw, json)
Hash identifier: Zz/S5g1MbvyGQ/HiPKCjXfK1iOhLdJrmgB//m4Hzvc4=
Subject key identifier: 12:42:8E:36:F1:E9:4B:DF:FF:D2:AF:64:6F:FC:A6:A8:2C:57:81:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7896368EE411F08E8DD5EBDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:54:06 +0000
ROA not before: Thu 11 Sep 2025 07:54:01 +0000
ROA not after: Fri 19 Sep 2025 07:54:01 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106321 (0x19f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 11 07:54:01 2025 GMT
Not After : Sep 19 07:54:01 2025 GMT
Subject: CN=68c2801e-8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:0b:29:0f:bf:cb:47:53:f5:43:a0:f9:77:
a4:ad:9f:c7:17:ea:fb:07:d9:b4:bc:81:a0:41:c1:
a7:a2:26:f6:1a:77:e7:80:b9:52:c6:f0:52:fb:9e:
77:2f:9c:be:c0:79:8f:72:51:5b:ad:b4:57:4f:ee:
2e:c0:3a:cf:05:92:73:c0:70:ed:51:17:89:69:af:
83:16:46:3a:69:27:4e:e6:dd:78:66:e0:3f:64:cf:
e2:40:a2:eb:71:f1:8b:42:48:6b:27:ef:1c:9c:6c:
f5:a8:0f:c9:31:b5:19:5f:3c:b9:27:57:31:7f:30:
7b:b6:70:ba:1a:ec:b4:c1:41:2a:63:9f:c3:b7:bf:
9b:36:2a:8a:4c:2d:79:cb:f6:2d:18:83:5b:24:3f:
46:96:69:c5:20:98:6f:b8:35:dc:9a:69:44:3a:48:
7f:82:55:12:35:1f:89:6a:3a:f9:06:c7:1e:4f:4d:
f4:90:86:ee:0d:41:8e:cd:0d:5d:bf:2d:ff:b8:72:
1b:12:3f:d0:e9:f4:c1:ac:10:34:7c:2c:47:1f:4d:
16:6e:50:30:18:80:70:18:79:fe:d4:dd:6b:17:f0:
f1:8d:5e:e8:a4:bb:35:49:19:89:d0:91:b5:94:86:
3a:48:25:13:54:97:c3:ed:29:8e:c7:c9:c4:9c:e5:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:8E:36:F1:E9:4B:DF:FF:D2:AF:64:6F:FC:A6:A8:2C:57:81:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7896368EE411F08E8DD5EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:b5:64:3c:a8:a1:c3:b6:4e:2e:75:e2:28:a3:5f:7d:3f:c5:
1f:4b:47:c3:fb:b1:67:f7:5e:b0:86:55:83:cb:2d:cd:31:20:
31:43:41:15:1e:45:ea:74:72:31:82:66:10:1c:99:6f:ef:36:
fb:39:ed:69:81:20:95:c9:39:a1:13:c6:a8:c1:60:51:ef:41:
e2:c6:43:29:f7:b0:4a:4d:2f:c0:31:cb:62:60:3a:84:5b:74:
0e:f3:e8:b8:4b:6f:32:2a:ca:52:a2:b5:ec:90:b6:1b:ac:98:
45:46:a7:14:2e:a8:67:21:6e:3a:1b:87:12:22:da:0d:76:9a:
94:1f:5d:06:69:82:12:93:7d:ea:8b:65:48:7d:c2:3e:f5:05:
64:54:8f:ba:0f:dd:57:d5:73:d6:ae:03:68:01:6f:41:4b:d1:
61:24:f6:01:f0:a9:c4:d5:1d:87:ed:1d:80:a2:3d:5b:ac:f7:
22:7d:da:58:ba:0a:fe:cd:5a:b8:6e:4b:32:10:d8:ce:66:99:
be:84:ec:37:1a:eb:fe:63:df:ff:e8:a0:17:ad:ce:4c:9b:5a:
4c:83:72:7f:55:03:b5:ed:a2:54:34:3d:ef:c7:71:bc:1c:c5:
ef:65:00:52:40:10:f6:2b:9e:c1:99:7f:fc:86:3d:56:ce:20:
11:31:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 21:09:41 2025 by rpki-client