Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FB25E3A871E11F0A92D09BDDAE4EC9C.roa
File: 9FB25E3A871E11F0A92D09BDDAE4EC9C.roa (raw, json)
Hash identifier: F+vBGCGLT0XMyAiX5eFFY6CwuMA0BP7qTmd+NI7QbBo=
Subject key identifier: CA:D1:3F:57:CC:58:22:16:0E:33:D0:37:D6:88:96:06:BF:67:F8:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FB25E3A871E11F0A92D09BDDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:30:05 +0000
ROA not before: Mon 01 Sep 2025 10:30:00 +0000
ROA not after: Mon 06 Oct 2025 10:30:00 +0000
asID: 5068
IP address blocks: 154.83.71.0/24 maxlen: 24
154.83.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105313 (0x19b61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 10:30:00 2025 GMT
Not After : Oct 6 10:30:00 2025 GMT
Subject: CN=68b575ad-ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:23:cc:67:61:30:13:8c:46:7b:df:17:10:
44:65:ad:e7:39:b2:43:24:8b:5b:98:b9:8c:c7:53:
35:1d:d4:54:d1:f5:b1:1d:66:2d:5a:a3:e8:ee:24:
a6:bf:a1:73:d8:c8:74:48:0b:aa:0b:9d:1b:b2:d5:
3e:aa:7b:c1:6a:b2:1c:b3:1b:b0:cc:12:86:45:db:
a4:b0:fc:c9:fd:ce:e5:79:dc:3b:99:ec:4e:78:3f:
c2:d2:ef:3c:2f:3d:02:fc:f1:5f:d1:f2:3b:83:ca:
e4:2a:90:b4:15:63:54:38:ad:5e:27:af:aa:81:6a:
3c:a4:c2:70:73:28:83:ab:6e:dd:9d:66:66:f4:86:
ac:98:41:90:d7:16:ba:cd:a1:7b:d0:56:34:3e:6e:
72:98:eb:d3:91:29:24:3d:98:39:9a:60:c6:8a:70:
e7:29:fb:eb:e0:b1:73:f8:d2:a4:d0:f0:37:c4:80:
d4:b4:af:38:86:f8:3f:4f:7b:d6:46:05:62:60:2c:
a6:ab:ed:90:ff:c0:6b:fa:0d:a8:ae:8a:e8:aa:27:
f4:4e:d0:31:9e:39:af:4e:1f:8b:af:f6:95:db:9a:
4a:11:a7:4f:00:fd:59:98:34:9d:62:da:c0:8e:db:
08:5e:7a:07:10:24:fb:3e:45:c5:a5:ca:3b:02:81:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:3F:57:CC:58:22:16:0E:33:D0:37:D6:88:96:06:BF:67:F8:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FB25E3A871E11F0A92D09BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c8:9f:56:e5:b6:e9:75:53:12:9b:c6:d4:a9:2b:57:0a:80:
58:86:fe:66:50:9c:8b:37:d5:d5:ee:94:0e:b5:ca:c5:7e:7d:
6b:96:14:3f:e1:22:01:ac:ab:37:9d:f2:51:06:62:30:86:97:
67:e5:ea:45:49:aa:f5:74:10:52:f6:55:6d:68:15:20:03:59:
d5:62:17:dc:33:35:11:26:d4:8d:67:44:7c:ee:b2:c0:72:7a:
bc:5a:8b:5a:0f:19:c9:dc:21:1d:8d:c1:12:92:ed:ef:ac:e7:
6e:5f:35:71:07:05:0a:58:e7:a0:49:f6:67:33:9b:22:32:ce:
a4:8f:f1:30:3c:1a:4e:ba:76:e2:cb:98:4a:d6:0b:3b:69:96:
46:e0:88:c0:5c:17:cb:20:ed:14:cb:c3:66:07:7a:b1:a3:8d:
42:26:8e:cd:cc:20:ca:8d:32:fb:bc:e2:04:51:14:30:05:11:
76:fd:d6:db:00:3d:ad:b8:9a:27:6b:c6:5b:0b:26:cb:41:d5:
4f:ee:a4:77:7f:e8:a7:11:d3:9d:e1:f5:f2:b7:ae:83:a4:5d:
5e:68:32:01:aa:c7:2f:d2:7b:bf:d2:04:f9:0f:cc:09:c8:37:
93:9d:66:4c:b2:d7:af:1c:3f:01:b3:de:96:90:cf:31:9d:24:
72:8f:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:37:53 2025 by rpki-client