Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB3B1AC079D211F09BD47EE3DAE4EC9C.roa
File: AB3B1AC079D211F09BD47EE3DAE4EC9C.roa (raw, json)
Hash identifier: kwNmwADUylCn2N4hzaz6VHmKhRQfz+rkYfX7tUMwbGA=
Subject key identifier: B8:20:61:61:99:B2:7C:3E:F7:9F:37:B8:30:47:3D:E5:47:5D:73:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB3B1AC079D211F09BD47EE3DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 12:23:38 +0000
ROA not before: Fri 15 Aug 2025 12:23:29 +0000
ROA not after: Thu 25 Sep 2025 12:23:29 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Aug 2025 02:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102882 (0x191e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 12:23:29 2025 GMT
Not After : Sep 25 12:23:29 2025 GMT
Subject: CN=689f26ca-77c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:ae:e7:57:95:ce:b4:82:7b:06:0f:f5:49:
83:69:91:be:61:d5:bd:c5:d8:64:d5:6c:bb:cd:e4:
e2:5f:c6:55:a0:1e:43:71:23:94:a2:6f:e5:1c:18:
8f:b4:b1:90:b3:85:4a:a0:a8:eb:d4:1a:be:ce:00:
97:e3:40:4d:79:a3:40:5e:10:c0:6e:2a:19:e3:f3:
e4:a7:3f:ee:d0:cd:40:fd:f9:fc:0b:e6:48:d7:25:
79:80:1c:3a:8b:78:5a:16:55:4e:f9:ae:8c:76:ad:
d3:74:55:06:ae:09:c7:83:3c:5e:bf:4b:ae:44:2e:
e2:ff:7a:40:a1:24:a6:72:cc:4d:34:7a:18:c9:0b:
7b:50:12:98:62:0e:2e:b2:5f:36:c2:a7:52:1b:81:
f7:6d:b2:14:ef:dd:25:44:3a:75:b4:d0:78:84:cf:
c4:c0:ef:eb:7a:48:50:92:80:f3:3e:0d:ca:7c:77:
cd:6c:05:f6:d4:3d:ea:cd:62:a5:89:46:fd:c4:38:
67:da:8d:1b:7f:86:5c:05:8a:4d:07:6f:c9:91:11:
6b:84:56:06:0d:41:f6:22:9c:21:4f:2a:d3:ed:e0:
0e:95:52:32:6f:3a:5c:66:f5:8e:0d:1b:88:e6:d0:
83:82:67:08:e8:0d:9f:e2:ae:67:f3:16:5f:9e:43:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:61:61:99:B2:7C:3E:F7:9F:37:B8:30:47:3D:E5:47:5D:73:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB3B1AC079D211F09BD47EE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
47:41:46:f1:dd:00:39:2a:75:96:8b:fb:34:7c:27:2c:57:72:
55:7e:80:76:69:59:bc:c4:72:db:b5:48:23:ff:10:5f:8f:57:
eb:7e:84:b1:75:f5:02:51:e4:69:ec:7a:70:26:f9:45:46:14:
f0:f1:b7:5c:8b:d2:32:ef:7f:4d:cc:a8:da:f2:72:87:f2:2c:
9e:4f:c4:db:dc:5e:1d:ac:fa:27:51:90:4c:35:94:83:d9:78:
e5:e4:04:c8:0e:63:6f:f0:df:86:fc:d1:d3:df:07:b1:9b:42:
ff:b0:38:f5:76:39:26:8e:b0:56:a0:ef:ef:2c:d0:3b:be:a1:
b2:31:70:9a:4d:2c:c5:25:f8:6c:1d:12:e3:b5:ed:ef:87:ae:
e0:c1:0a:d6:72:f0:3a:65:87:93:9b:80:4c:b8:10:e7:72:83:
8f:27:99:a2:68:2f:2e:a1:90:c2:a3:aa:b9:d4:19:f6:2b:a2:
03:72:8f:1e:fc:82:d8:9b:95:66:53:30:15:9c:e0:6d:8b:ff:
13:f8:16:77:bb:ff:ce:37:69:b6:04:22:52:35:f1:03:f3:b5:
71:c3:37:08:1e:a1:f3:3d:69:cd:9d:15:03:b6:e7:37:e4:18:
89:ad:67:d3:9e:14:96:f5:e0:6b:85:ab:f7:90:05:2d:9d:f7:
dd:b9:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:41:06 2025 by rpki-client