Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A79C768E831411F09C6C7FDBDAE4EC9C.roa
File: A79C768E831411F09C6C7FDBDAE4EC9C.roa (raw, json)
Hash identifier: whjdr+dCeDmN8j8+QAV1VtINNylVPPK4SbXGzSX/xg0=
Subject key identifier: 4E:44:A3:6B:9B:D9:38:77:11:F6:83:AF:1F:9A:D8:9B:34:60:1F:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019853
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A79C768E831411F09C6C7FDBDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:08:39 +0000
ROA not before: Wed 27 Aug 2025 07:08:34 +0000
ROA not after: Fri 05 Sep 2025 07:08:34 +0000
asID: 45474
IP address blocks: 154.197.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 07:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104531 (0x19853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 07:08:34 2025 GMT
Not After : Sep 5 07:08:34 2025 GMT
Subject: CN=68aeaef7-1f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:b3:b5:2e:ba:de:5c:48:f8:75:6e:5a:bf:
7f:e3:35:d4:ef:40:5e:bd:6f:e6:ff:76:9a:42:ab:
af:ce:c3:88:7c:df:c3:cb:04:76:f6:1d:26:38:d8:
72:91:aa:d0:22:34:92:90:3b:b3:e6:49:b0:cc:39:
02:3a:8a:63:ba:14:1e:e9:3a:d1:9d:5e:e6:c5:45:
a6:32:ab:1d:99:ef:15:ed:3d:ce:67:0d:4c:3a:16:
3d:4b:ed:c8:c0:3e:d0:92:9b:e9:8d:73:ca:b9:60:
27:03:39:57:80:2f:3d:f4:6a:21:14:0e:f0:c3:be:
ed:d3:d2:2e:44:fc:d0:9e:7f:4b:24:94:d0:d8:c7:
b0:38:e1:11:83:a9:68:d2:db:22:1d:40:b9:16:ed:
21:b5:78:05:a9:99:00:02:59:88:87:31:14:27:57:
b9:c3:b6:83:95:44:81:fa:1c:32:e5:50:e5:30:0c:
0c:4f:68:c7:45:3a:fa:bc:de:81:14:74:a1:9b:3b:
b6:a8:c7:40:63:be:89:eb:63:ac:be:6d:47:69:e7:
ac:26:70:69:73:2d:c0:7a:9d:1c:02:59:e1:9f:6d:
98:c9:e2:87:ce:db:ad:a8:2f:c0:a9:74:d7:e3:45:
d3:33:8f:2f:d5:f8:e9:d1:25:76:2f:93:60:aa:02:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:A3:6B:9B:D9:38:77:11:F6:83:AF:1F:9A:D8:9B:34:60:1F:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A79C768E831411F09C6C7FDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.51.0/24
Signature Algorithm: sha256WithRSAEncryption
73:28:87:f9:81:f1:48:1c:4c:9d:9b:19:f9:ed:71:be:cf:3f:
ec:87:0d:70:41:a0:bf:ce:80:35:ff:90:c7:ab:61:a9:31:f3:
12:35:18:20:69:ba:f5:ff:9c:9b:93:6a:a3:61:51:98:43:b5:
b9:d9:d7:28:3b:1d:96:02:0e:c3:72:de:d7:2f:ee:c6:21:0d:
28:82:0e:7e:c9:c9:ee:b0:5b:0f:96:ba:ef:90:df:f4:84:15:
3e:dc:2e:78:57:11:83:a0:55:cd:6d:e3:cc:bb:60:29:6c:02:
ab:64:20:2c:bf:85:ae:31:ac:cf:9d:22:49:66:0d:07:75:62:
58:89:32:e3:4a:20:fc:97:b8:a0:c4:1f:fe:d1:6f:a7:dc:a6:
31:08:d7:3e:68:45:a4:29:94:c7:fe:b5:d9:23:2a:95:3e:40:
8d:be:40:4b:d6:f1:4c:83:f5:f4:c0:17:f0:52:21:66:52:9f:
0d:7c:f4:84:d0:a3:78:d0:43:fb:03:a8:6f:50:af:09:23:1c:
6a:2a:a8:5f:15:49:a0:4a:52:02:a3:1a:f9:11:4b:6f:6d:a4:
a0:94:20:c4:36:3e:c2:4e:68:c1:84:b5:b4:8e:ce:af:2b:14:
f1:39:d7:0e:76:93:07:f1:5a:69:69:66:b8:84:a8:06:09:c2:
14:b4:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:29 2025 by rpki-client