Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9009DF54825411F096AFC0EFDAE4EC9C.roa
File: 9009DF54825411F096AFC0EFDAE4EC9C.roa (raw, json)
Hash identifier: N0L0gwZuwqZR/lsg/aoc7iGVgo00HzWoGqYS9j2cnNI=
Subject key identifier: 67:17:F8:55:EC:5C:45:B2:E3:33:33:DE:6D:DA:E1:D9:8F:47:DF:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9009DF54825411F096AFC0EFDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:13:36 +0000
ROA not before: Tue 26 Aug 2025 08:13:31 +0000
ROA not after: Thu 02 Oct 2025 08:13:31 +0000
asID: 20326
IP address blocks: 154.83.129.0/24 maxlen: 24
154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104360 (0x197a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:13:31 2025 GMT
Not After : Oct 2 08:13:31 2025 GMT
Subject: CN=68ad6cb0-dab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:9f:7f:86:1a:e1:6b:6f:57:b7:b1:90:b9:
15:51:98:3b:18:40:47:3f:83:a2:7a:d7:0a:ba:f5:
73:15:5f:f7:9b:ab:25:13:c7:15:09:4b:28:d7:47:
87:ba:02:ec:09:81:6a:98:66:cb:82:6a:e0:f0:7b:
1d:93:bb:51:bc:60:e0:51:34:72:0b:92:7a:12:27:
b2:ed:1e:b4:72:7c:a5:a3:47:e0:1c:78:02:10:0e:
c5:c2:ec:f4:ce:80:24:07:14:d2:8b:91:c8:3d:f7:
7f:e3:d9:d5:2d:89:95:74:64:95:de:c2:4f:41:96:
55:fa:b7:b5:42:69:fa:f8:f0:72:b0:91:cb:92:5c:
d4:8d:3f:bc:f1:e5:62:71:e1:09:a7:41:68:64:1f:
7b:2f:fb:cc:c1:69:4f:83:95:83:09:bf:fa:2a:50:
84:d7:55:a3:d9:d0:2b:a3:50:db:8e:4e:e7:3e:42:
56:71:2b:04:53:58:68:43:4d:3d:b9:b1:a2:a6:b3:
c2:f8:30:ce:9b:59:85:a3:ca:c0:5b:13:c8:ff:da:
a6:7b:16:3d:47:08:e7:bb:2c:4d:78:37:09:a3:5e:
20:a1:9c:b0:21:a1:9e:25:26:fd:08:b3:1c:e6:87:
ec:04:12:14:a1:78:bf:a1:aa:f5:04:29:fd:45:88:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:F8:55:EC:5C:45:B2:E3:33:33:DE:6D:DA:E1:D9:8F:47:DF:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9009DF54825411F096AFC0EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:83:58:09:bf:8f:3c:24:15:04:ca:9a:ce:c2:29:e5:bc:
63:d2:77:5c:09:fd:a7:0a:c9:c8:80:63:93:b7:b2:42:57:a6:
44:2b:e3:6a:7a:fd:a8:af:86:b5:d2:b8:cb:49:6d:d1:87:34:
07:2d:f5:97:29:be:93:bb:0f:85:a3:b8:a6:41:3e:81:b1:c9:
97:7a:3a:fb:9c:95:97:16:72:1d:03:78:fe:f2:cb:60:4f:72:
45:75:c1:94:1b:a0:21:83:8c:ba:80:a7:d5:26:d1:1f:74:a6:
79:54:eb:da:db:85:91:88:c0:c3:46:43:b6:65:60:e1:69:a9:
d2:cc:e8:98:92:e4:28:97:a2:4c:52:ad:23:ff:0e:9d:5f:23:
32:9a:53:94:bd:28:2d:da:78:98:3b:ec:fb:8e:61:17:60:4b:
ce:22:31:58:d3:55:75:ae:14:9b:09:b7:d3:28:f0:87:f1:12:
7a:b1:1b:89:74:62:81:78:b1:f5:59:70:77:6c:74:1a:5a:79:
d3:67:25:10:79:f1:04:9f:42:a4:fa:a3:31:10:13:05:e0:52:
fb:4d:69:b9:c1:7e:6a:c4:ef:4f:ea:23:4f:f1:15:cb:8c:f2:
7b:12:52:c6:f4:3e:d6:96:30:d9:b9:23:ca:3d:48:55:95:9e:
a9:12:55:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:36 2025 by rpki-client