Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1BA8034802C11F08F6B22F3DAE4EC9C.roa
File: A1BA8034802C11F08F6B22F3DAE4EC9C.roa (raw, json)
Hash identifier: iQD/iZcRui/FMQvzzxqAutdZNdlQtj83jbn6MekOev0=
Subject key identifier: CB:56:18:D1:16:C6:B3:74:3F:72:CA:21:ED:ED:AA:3C:31:37:B9:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1BA8034802C11F08F6B22F3DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:22:43 +0000
ROA not before: Sat 23 Aug 2025 14:22:38 +0000
ROA not after: Fri 04 Sep 2026 14:22:38 +0000
asID: 209824
IP address blocks: 154.197.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103899 (0x195db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 14:22:38 2025 GMT
Not After : Sep 4 14:22:38 2026 GMT
Subject: CN=68a9ceb3-5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:3c:ae:50:69:1b:81:f9:19:35:79:18:bf:
63:3d:5c:70:0c:cf:1c:b9:56:f7:60:5b:83:83:f2:
5f:ba:93:97:14:2a:d5:ec:95:56:88:4c:9f:3e:f5:
81:90:fc:a2:56:ee:50:d3:a6:4a:b7:3c:98:95:c4:
45:7a:83:41:82:e2:a8:7b:39:05:af:a9:1d:eb:86:
48:71:73:47:58:02:af:91:d5:25:e8:d2:80:d0:23:
a6:77:3d:eb:5f:e3:24:ea:10:27:ac:fa:b0:24:62:
44:58:e1:32:f1:e4:44:83:66:71:75:c9:f3:de:8a:
a8:5f:d1:fe:8c:10:14:22:1e:a5:bf:b1:7b:de:3b:
f8:92:7c:1a:c1:a7:48:02:f6:c7:6c:3e:f2:ee:f2:
14:86:c5:6d:a4:5a:e7:7a:2c:f4:6a:73:7a:a7:27:
7f:91:dd:5c:52:f8:a0:9b:a4:bc:c9:d8:ab:90:23:
52:3b:52:73:d4:3a:e4:39:10:44:3b:19:28:22:ef:
d0:f0:4b:a3:d2:20:a2:b7:dd:d3:65:fc:8b:65:2e:
fc:02:14:c2:4e:4d:6d:60:02:a2:b3:d0:8b:7a:6b:
51:18:c3:84:6a:9d:b8:a3:17:97:62:dc:40:18:b1:
94:35:6c:fd:f0:ab:a4:e3:76:01:0b:6c:73:98:86:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:18:D1:16:C6:B3:74:3F:72:CA:21:ED:ED:AA:3C:31:37:B9:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1BA8034802C11F08F6B22F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.70.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bb:c9:1a:f0:94:16:40:f1:29:6f:f8:f3:88:17:36:1d:b1:
c0:fd:f1:ba:9b:55:1d:de:67:a7:5f:60:60:14:27:84:7c:6c:
d5:d5:07:f7:4a:63:cd:ee:1c:bf:25:1c:cc:b3:19:0f:cd:e2:
cc:e7:99:7b:14:a7:a7:e0:90:78:27:28:e4:a8:c6:04:6b:a9:
27:55:bd:26:54:55:51:ad:b3:56:44:11:86:27:fb:42:98:87:
7d:a5:18:63:e4:e9:1d:fe:d7:35:15:9f:4d:36:b4:0f:ef:4d:
ed:7e:0b:45:87:b1:30:e9:78:48:ad:be:e1:4d:33:32:5b:8c:
44:69:00:de:d7:61:e2:58:7e:6a:01:ee:1f:2b:58:f8:46:a3:
6d:00:ac:a0:a5:45:67:36:f5:d6:92:0c:ff:16:aa:c6:87:1b:
aa:ec:d4:e1:fb:91:53:ba:44:7c:7e:0e:ff:8b:0f:27:91:81:
cb:4d:f0:3d:70:15:29:39:2d:05:de:07:09:5a:77:11:2d:e3:
80:7c:a8:ad:c2:44:e5:d9:03:1c:52:30:5d:fb:0b:9f:e5:28:
ff:b7:c0:d8:74:57:61:96:e3:8e:7a:9a:09:60:e6:69:a0:d5:
75:7c:3a:48:0d:af:c1:1a:56:a0:96:8f:03:d4:dd:ee:76:5a:
29:4a:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:25 2025 by rpki-client