Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976838EA896111F0A3450AF2DAE4EC9C.roa
File: 976838EA896111F0A3450AF2DAE4EC9C.roa (raw, json)
Hash identifier: DSMI7UtETWfBSenuTyavruJnHC+c6FwQGnc+T60iL7s=
Subject key identifier: 4F:1D:0C:FC:95:C6:5A:E3:16:FC:3A:A3:D9:13:3E:3F:6B:77:AA:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976838EA896111F0A3450AF2DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 07:34:30 +0000
ROA not before: Thu 04 Sep 2025 07:34:22 +0000
ROA not after: Sat 11 Oct 2025 07:34:22 +0000
asID: 30781
IP address blocks: 154.217.184.0/21 maxlen: 24
154.217.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105840 (0x19d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 07:34:22 2025 GMT
Not After : Oct 11 07:34:22 2025 GMT
Subject: CN=68b94106-999e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:44:04:23:b7:4a:ae:9b:3c:4b:b5:5d:58:
3a:41:62:d8:a6:e4:0f:7d:98:38:fd:3a:c7:f7:f9:
07:9e:ef:66:92:90:15:5f:ec:42:19:92:e0:9a:49:
6e:c4:92:67:62:0a:b5:4a:3a:f0:dc:78:09:14:f0:
b2:0e:ff:0f:0a:d2:a4:b8:92:f8:8c:8b:6a:3b:c8:
c0:76:3d:ad:fa:a5:d1:21:99:44:f8:d9:9a:5d:8b:
f7:f2:ba:d1:1f:c1:24:1d:e2:ae:71:44:fa:26:3a:
3d:85:cd:13:21:62:6b:92:32:bc:a4:6c:61:43:e0:
2b:db:bd:e6:07:2b:d7:cc:b5:49:5b:c2:c2:fb:a9:
52:8d:20:8e:b1:04:34:16:f7:84:65:49:54:fc:32:
1c:64:b3:1c:46:64:0c:63:48:4c:49:b7:9e:d1:be:
02:6e:97:f9:6d:dc:10:7e:7f:a8:40:14:e8:c1:f0:
f7:83:9b:c5:87:cd:75:76:bf:9a:e3:1a:f6:79:ea:
39:50:c1:80:6c:c8:b3:47:17:09:33:3d:83:43:27:
c1:f2:68:d6:af:42:24:f9:b3:66:bd:04:83:d1:e7:
ac:07:2f:00:7c:64:c5:48:99:b9:cc:4f:ee:06:08:
d3:dc:8c:b0:0e:9f:fe:5d:21:ce:d3:b9:f8:69:44:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:0C:FC:95:C6:5A:E3:16:FC:3A:A3:D9:13:3E:3F:6B:77:AA:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976838EA896111F0A3450AF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.184.0-154.217.223.255
Signature Algorithm: sha256WithRSAEncryption
73:b5:13:50:c5:a1:8e:d9:08:29:b7:ae:c4:84:df:48:15:ec:
bd:55:8f:ae:6c:da:c0:41:85:9c:7b:71:28:52:4c:c3:da:03:
39:01:ab:03:25:06:1d:dc:83:07:d2:b7:fa:2c:ae:d4:b4:c9:
11:a8:f9:fc:12:2d:eb:d3:5e:b6:d2:d7:38:27:5d:8a:ce:3c:
ae:5b:98:a9:bd:c8:c7:d0:64:4a:76:df:ec:93:10:c6:c5:96:
19:39:05:b3:8d:c7:b5:18:7e:99:bf:8c:4c:85:c3:dd:90:d6:
94:58:56:98:8e:87:a3:dc:be:90:9a:92:4e:19:41:35:2b:bc:
a5:d0:2e:e7:fd:35:99:38:7a:5f:69:2b:a9:4c:9c:be:af:ad:
17:01:58:8b:3c:c9:15:e9:4b:41:92:d0:33:46:5e:a4:9d:5e:
f9:6b:f3:0c:b6:1e:49:2e:56:89:95:fb:4b:f1:89:6a:68:1f:
8b:f3:e2:bd:de:2e:fd:5e:2b:53:39:2c:54:7f:ba:ff:d5:bb:
a2:48:c4:d2:05:ae:d5:d9:9e:11:5b:39:a7:26:36:5c:52:1d:
62:2d:11:c2:67:31:2a:e4:5f:33:69:25:ad:1b:0d:06:2d:f2:
d0:34:71:da:1f:e4:de:dc:28:25:fd:d4:eb:78:cd:31:c4:6c:
40:44:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:25 2025 by rpki-client