Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD9DF488B1411F0AEE5797CDAE4EC9C.roa
File: ADD9DF488B1411F0AEE5797CDAE4EC9C.roa (raw, json)
Hash identifier: wIQMSOkOBciW8quVxPs49Lja4x5VTO/aI8af1LfyjeE=
Subject key identifier: 07:19:EF:30:3F:B2:36:CE:5D:CD:13:B4:CA:08:F6:CE:5E:4D:62:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD9DF488B1411F0AEE5797CDAE4EC9C.roa
Signing time: Sat 06 Sep 2025 11:28:58 +0000
ROA not before: Sat 06 Sep 2025 11:28:53 +0000
ROA not after: Thu 03 Sep 2026 11:28:53 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
154.92.128.0/22 maxlen: 24
154.92.128.0/23 maxlen: 24
154.92.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106069 (0x19e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 11:28:53 2025 GMT
Not After : Sep 3 11:28:53 2026 GMT
Subject: CN=68bc1afa-4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:cc:ee:8c:95:aa:2d:89:5d:b9:63:ad:f6:
ab:29:51:c4:53:8f:c0:7b:d7:b6:4b:14:15:e4:43:
d8:87:f1:7e:57:0a:02:d7:55:c8:a5:26:45:3d:06:
7e:f8:39:e4:ab:d4:3c:5e:0c:9c:4e:76:40:d4:43:
25:ee:35:95:ed:b7:2a:99:e7:ae:a8:f3:2b:70:ea:
3c:70:6e:fe:c6:2e:9f:a8:6a:f6:82:bb:41:77:85:
55:51:d6:c7:25:80:2f:42:13:22:10:46:06:11:45:
27:00:35:b2:bf:d7:3e:14:f5:44:ac:a9:ef:02:7b:
41:59:29:0f:15:2d:8a:3f:ab:a1:b5:d5:14:0b:1f:
c9:b9:d8:64:c3:c6:25:58:a7:e0:a2:7f:6c:0f:3e:
c3:31:d8:45:7f:34:c8:5c:05:54:75:7a:a1:45:3d:
05:c1:67:98:0e:27:5b:90:40:64:e3:b7:4e:5a:0b:
9f:4e:37:2f:7d:7e:b0:fa:03:4f:c4:c8:f1:e6:cc:
d5:a1:4e:77:fe:16:78:20:a8:38:ad:72:eb:eb:8b:
79:6b:2d:6c:c9:ce:f6:e4:29:0c:bf:e6:86:5a:fb:
68:7d:3f:76:72:a6:db:1f:b9:cc:a1:00:a7:6a:ac:
58:49:59:2e:83:6b:f9:00:c9:4e:db:97:45:01:00:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:EF:30:3F:B2:36:CE:5D:CD:13:B4:CA:08:F6:CE:5E:4D:62:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD9DF488B1411F0AEE5797CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:e3:01:32:8c:a3:78:30:00:db:26:b5:b7:88:4b:08:9a:77:
cd:1a:f0:4e:37:b9:aa:f5:c5:1d:7b:38:96:46:49:e5:12:96:
dd:d9:cf:19:f9:12:c4:4b:a5:03:72:58:2a:ea:81:71:5c:0d:
5e:00:cf:9d:a4:a0:8c:34:f5:8f:8f:8c:10:53:ca:62:84:20:
cf:4a:f0:76:a3:df:c0:c8:f7:2b:95:4e:9b:5c:f3:4c:6e:05:
5d:37:96:b4:1f:ff:81:18:aa:6c:55:2d:32:45:86:af:f9:d1:
b7:4c:22:61:b3:75:92:37:f6:42:c2:d4:ed:fb:e7:ae:fe:43:
45:19:ac:eb:0c:19:72:31:39:4f:88:ed:50:5a:29:f5:6f:2e:
17:e1:af:15:43:5c:52:9a:07:ab:c7:72:81:fc:7a:9b:c5:f1:
77:c9:f5:65:84:a6:47:b8:d5:87:29:6a:87:41:4c:4f:74:3a:
bd:38:b6:b5:61:ff:6c:4d:f2:c1:96:da:ca:a7:ef:4d:21:e1:
f4:96:21:2b:44:46:82:00:26:52:e4:73:f8:1c:e6:d5:37:9f:
5f:9f:1c:80:66:97:d4:86:c3:df:11:74:e4:e2:0c:5d:ef:de:
7c:5a:8d:b9:79:cb:99:d6:6c:12:c6:71:63:93:c8:3f:d6:e9:
b0:87:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:49:44 2025 by rpki-client