Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/981014A8824E11F0956797C8DAE4EC9C.roa
File: 981014A8824E11F0956797C8DAE4EC9C.roa (raw, json)
Hash identifier: jBGAgJkUYeSXdqQhT/OYB6I8rJm8Lb1iLnzy0EeuMfw=
Subject key identifier: DF:49:81:96:17:25:5F:04:69:B2:BE:AE:29:33:4C:8E:D7:96:BB:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01979A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/981014A8824E11F0956797C8DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 07:30:52 +0000
ROA not before: Tue 26 Aug 2025 07:30:47 +0000
ROA not after: Fri 03 Oct 2025 07:30:47 +0000
asID: 57043
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104346 (0x1979a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 07:30:47 2025 GMT
Not After : Oct 3 07:30:47 2025 GMT
Subject: CN=68ad62ac-4d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:22:6e:df:0d:43:60:05:b4:63:9f:7c:62:
7e:ba:7a:fe:55:16:3b:4d:fd:74:a4:4c:af:5d:30:
64:03:b3:f9:2f:d4:ff:1f:94:df:a6:90:cb:f0:d8:
3c:d5:ac:b7:c8:be:25:36:a8:b8:2b:6e:3a:0c:4a:
3a:50:41:19:5b:a6:31:41:0a:15:7e:f2:34:eb:1b:
31:a1:2a:49:fc:ff:7b:ca:ec:94:40:bc:af:64:e1:
85:89:79:04:9f:89:80:60:bc:c4:3e:55:dc:29:2b:
e9:3c:d0:e0:14:81:53:02:74:1b:0b:19:ec:46:46:
b2:f1:88:a5:47:ba:d8:b6:f8:04:7b:16:fc:7b:e5:
ab:5d:97:23:35:ad:fc:bd:06:9f:68:2d:32:57:87:
fe:84:0c:b0:4c:1c:6b:bb:4d:6d:73:71:eb:cd:19:
76:17:e9:70:cc:1c:7a:e4:c2:d5:4e:a6:05:5a:ad:
51:5c:f5:03:41:80:48:e0:4b:30:ea:7c:72:43:8d:
48:e7:32:eb:a9:c0:2d:83:87:06:c7:74:d0:f8:d2:
9d:36:09:2e:23:17:c0:3b:2a:78:0c:97:d9:b4:4d:
8f:a3:33:4e:e4:5b:04:a5:11:ac:19:bb:93:6d:de:
76:47:2a:f6:44:96:78:50:e2:a6:8d:36:a7:34:ed:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:81:96:17:25:5F:04:69:B2:BE:AE:29:33:4C:8E:D7:96:BB:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/981014A8824E11F0956797C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:72:c5:f9:77:64:09:04:39:66:31:52:48:6c:d5:9e:ab:08:
ec:32:0d:bd:f7:71:41:ba:0f:5c:26:ef:a3:a6:5b:04:c6:58:
fc:89:8e:dd:46:4f:fb:64:8f:04:62:21:30:7f:83:cd:ba:f0:
b3:67:e3:0d:e5:36:5d:ec:95:df:6e:af:40:5c:a5:4e:10:45:
35:42:12:98:47:53:ce:4c:f5:c1:25:6f:3b:18:b7:90:2c:f9:
41:b8:43:4f:f6:74:b1:fe:86:54:fc:61:44:f8:0c:ed:15:92:
10:a5:88:88:ba:64:53:8f:7e:80:40:2d:fd:4a:2f:84:a3:ef:
cf:10:37:b2:9f:a6:ee:72:01:41:c9:c1:eb:ea:e6:65:1a:90:
cf:89:6f:4e:c7:89:12:5c:e3:55:a3:63:51:15:49:d1:4e:b2:
be:2e:49:b7:4d:48:ca:8b:55:74:87:63:81:8c:f0:27:6d:76:
e0:a8:29:44:c5:b2:bb:43:98:17:9e:60:54:eb:07:1a:53:3a:
cc:4f:11:80:78:a4:cf:d1:94:26:e6:62:c9:cd:a0:3a:21:90:
9b:5f:ed:1c:3d:c9:ef:a4:6c:c6:7b:92:b6:23:91:c8:1b:12:
8e:85:59:61:16:a4:dc:fc:98:fe:b9:d8:06:d4:82:45:90:ba:
55:1c:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:57 2025 by rpki-client