Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7EBE54896F11F09808E3CCDAE4EC9C.roa
File: 9C7EBE54896F11F09808E3CCDAE4EC9C.roa (raw, json)
Hash identifier: Z9W+DQpXCRDgREVku3Li23BF+HDFwNppJxkYgseDT/w=
Subject key identifier: 5B:4A:7B:1F:D8:17:BD:D3:CD:3A:F2:7A:B3:A0:4A:EF:C5:5C:C7:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7EBE54896F11F09808E3CCDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 09:14:51 +0000
ROA not before: Thu 04 Sep 2025 09:14:46 +0000
ROA not after: Sat 08 Nov 2025 09:14:46 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105869 (0x19d8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:14:46 2025 GMT
Not After : Nov 8 09:14:46 2025 GMT
Subject: CN=68b9588b-7033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:27:b0:b9:b5:62:3a:d1:f4:02:87:50:12:
62:14:1c:b3:77:74:bc:3f:d6:f1:cc:c9:d1:07:69:
24:6d:35:7b:fb:eb:32:8b:c6:76:07:e9:d6:fd:79:
c4:48:33:43:96:21:e1:bf:3b:77:a9:8f:7c:d3:fe:
e4:28:d4:1e:81:3f:b2:36:c7:55:25:fe:3f:6f:8a:
02:8e:a8:23:4b:93:da:5e:a4:03:6e:fb:30:58:cb:
c0:d2:96:5d:48:86:a1:f4:59:c8:98:d6:5f:c6:d7:
8d:5d:76:c3:c5:75:20:83:fc:72:85:c1:0f:d6:d5:
24:a8:c3:0f:1a:1a:d8:47:5a:b8:8f:49:a4:78:90:
39:5b:47:16:4f:51:74:7f:0a:0d:dc:72:f9:d2:61:
c9:7e:6f:50:c3:ce:b3:a5:ec:fd:b8:5a:f3:33:47:
c6:f0:95:7f:f2:ee:e0:08:d0:e2:ed:08:43:61:d9:
56:5a:90:d5:22:52:bd:00:a5:66:9d:09:3f:e4:10:
14:85:da:96:2a:76:29:63:39:0c:02:5f:9d:11:37:
78:08:26:2c:55:8b:45:f5:d8:3a:ab:bb:3a:df:9f:
92:86:13:7a:7d:4a:15:5f:07:c2:10:d8:6f:96:b5:
84:28:a0:37:dd:17:49:a0:b8:c6:bf:8c:41:13:fd:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:7B:1F:D8:17:BD:D3:CD:3A:F2:7A:B3:A0:4A:EF:C5:5C:C7:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7EBE54896F11F09808E3CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:68:8e:cb:58:0e:96:7d:66:47:3b:b6:05:d4:cf:fa:69:50:
8d:26:98:61:7f:4c:d2:fe:be:be:71:9a:52:41:c2:05:bf:56:
80:65:16:9e:d6:ec:75:81:c0:2b:bb:01:0c:f3:a1:4d:21:21:
da:bc:5c:84:cd:75:74:9e:28:69:00:a5:dd:b9:45:dc:d4:66:
2e:6c:8a:3e:d4:55:16:b4:de:a7:85:d3:4e:cb:22:d5:dc:5a:
ac:6d:8a:31:8a:4a:53:70:5a:fe:5d:32:22:a9:77:c6:5c:2c:
ae:9d:31:91:2f:39:6b:d5:5d:9e:f9:94:1f:bd:76:ad:0f:1a:
7b:95:94:f3:ee:1e:a9:7e:a9:11:2f:a4:07:07:f1:70:38:44:
39:b0:2e:61:f4:ef:1e:b4:a1:8d:6c:8e:d4:b1:da:7c:01:60:
2a:55:36:1c:45:2d:b7:f0:de:ce:5f:4d:f9:6b:bd:61:ba:0d:
0f:63:db:83:19:07:ab:82:ea:02:1e:a5:83:51:ec:05:5a:d2:
c2:9d:ec:20:b6:c2:61:07:f8:dc:d3:08:5e:83:61:ba:da:95:
a7:4f:e6:63:39:54:03:99:76:23:20:5d:ca:c0:19:39:21:ce:
67:a7:e5:d1:21:27:c2:fa:ab:47:cb:f9:05:8b:55:5e:b9:2e:
81:c9:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:42 2025 by rpki-client