Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CF48FE836711F0840BB5F1DAE4EC9C.roa
File: 98CF48FE836711F0840BB5F1DAE4EC9C.roa (raw, json)
Hash identifier: PVBR41e1ndi+rStDIDtT9q4Vu7liGwUb3nCSnVpYF6o=
Subject key identifier: 4C:7E:FA:A9:E9:AB:42:0B:F4:E5:B1:04:53:F0:0B:A3:EB:0C:24:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CF48FE836711F0840BB5F1DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 17:02:22 +0000
ROA not before: Wed 27 Aug 2025 17:02:17 +0000
ROA not after: Wed 15 Oct 2025 17:02:17 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104675 (0x198e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 17:02:17 2025 GMT
Not After : Oct 15 17:02:17 2025 GMT
Subject: CN=68af3a1e-d4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:d2:8c:66:8a:88:bc:14:fa:d3:94:4a:af:
92:c3:2c:51:f0:47:18:3a:b3:a9:58:ab:41:90:ea:
c4:90:86:d5:98:bf:d0:93:6d:b7:6f:6a:d5:02:7d:
ca:e4:a5:0a:97:39:58:d2:e3:51:79:e0:65:39:ee:
90:56:04:a0:76:ac:3f:31:a2:58:ca:3f:9f:59:a9:
cd:92:08:7b:e8:57:7a:37:bf:ff:d6:6c:65:d9:8b:
dd:5d:0a:ea:20:2c:06:69:00:a8:71:55:20:dd:73:
87:d2:2b:24:a0:24:d1:17:2f:a5:b1:cd:fb:d8:71:
fe:80:6a:e6:91:a4:43:bc:87:60:10:79:f9:d4:d1:
44:34:a6:74:0e:40:a2:c6:ca:9f:38:0a:6d:c7:77:
07:94:64:cf:31:92:0a:22:8b:4c:25:aa:f0:49:d4:
b5:1b:1c:ec:22:e6:d7:aa:35:e2:91:96:48:b9:24:
04:11:b2:2c:92:75:32:4c:9a:2f:5b:61:ba:77:8f:
c1:23:38:80:b0:90:c9:2a:f3:e7:c9:fc:8c:fc:68:
35:55:72:66:c5:6a:4a:b6:7d:f4:09:4e:47:10:61:
fa:cc:e4:51:0d:cb:ca:46:13:de:dc:e0:c6:f3:56:
37:07:4b:2b:32:e7:b0:5f:61:b6:a2:45:ca:72:95:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7E:FA:A9:E9:AB:42:0B:F4:E5:B1:04:53:F0:0B:A3:EB:0C:24:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CF48FE836711F0840BB5F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b8:cb:24:56:d1:dc:44:a6:06:d8:7f:e5:dd:a5:83:49:b4:
15:e4:79:e3:fc:b3:89:44:b1:1e:34:36:40:43:13:3c:74:bd:
01:78:b5:90:87:3e:72:f3:e0:82:66:c9:e9:fe:df:60:c4:85:
08:71:9c:3a:f6:45:13:a6:61:0e:7c:d5:35:4a:c5:0c:f4:6a:
da:c8:77:8e:46:df:c3:71:b2:8f:cd:f2:84:12:86:32:5e:b0:
6e:f1:d9:b2:f7:ff:10:a4:d8:a7:00:5e:db:96:31:cb:1c:9b:
3f:69:ae:64:84:b5:80:e4:1b:39:10:02:7b:aa:51:a9:7a:fd:
9c:20:f8:b5:1b:40:61:af:88:5d:08:02:6e:46:b4:a5:93:06:
c5:04:28:1c:97:30:a2:77:a6:1a:fc:88:5d:05:0f:ac:a2:32:
d7:a4:f5:62:c4:6e:63:af:7b:9d:c5:a5:a9:7b:94:ec:cf:7e:
8d:bc:ef:bc:6a:ca:5f:b2:5d:68:df:c6:08:1e:15:32:11:e5:
ea:cb:45:c8:c8:34:ca:73:c4:b3:94:d8:c9:c3:ed:44:ed:96:
4c:2b:13:27:7c:38:6d:ed:4c:17:82:49:19:25:e6:3e:15:d7:
cd:8f:3b:64:f2:e3:4d:6e:0a:df:7b:22:cd:59:1f:a2:b0:f9:
52:72:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:02 2025 by rpki-client