Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F5090E828C11F08C34FED9DAE4EC9C.roa
File: C4F5090E828C11F08C34FED9DAE4EC9C.roa (raw, json)
Hash identifier: E9KcvAnxvPbuFNtFBZfHwUtZreDj2G2ULbh+DaNmjHs=
Subject key identifier: 36:3B:4C:A2:24:CB:35:99:AC:6E:D3:0E:83:CF:0B:CD:56:2C:F1:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F5090E828C11F08C34FED9DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 14:55:56 +0000
ROA not before: Tue 26 Aug 2025 14:55:51 +0000
ROA not after: Thu 02 Oct 2025 14:55:51 +0000
asID: 20326
IP address blocks: 154.83.129.0/24 maxlen: 24
154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104417 (0x197e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 14:55:51 2025 GMT
Not After : Oct 2 14:55:51 2025 GMT
Subject: CN=68adcafc-f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:0d:0d:55:1c:9c:0f:a1:34:e2:27:4e:c1:
59:d7:21:bb:91:3a:48:8e:1d:6b:ac:20:44:45:4b:
10:33:87:7b:c6:29:c7:9d:85:3f:d9:4d:15:48:fd:
be:29:94:ef:92:d9:3c:55:5c:8f:3b:f6:0c:e2:5d:
4b:57:44:ba:4e:d5:da:ec:07:32:91:05:9a:d8:ec:
b6:2b:36:f7:c5:c7:12:fe:81:02:18:fe:56:7a:b0:
dd:55:ab:ae:17:a9:e6:b0:2e:2d:40:9f:82:58:1b:
1d:3f:96:0e:93:6c:58:db:7f:a2:55:00:f6:48:e1:
dd:45:a8:12:0f:f0:37:10:e4:0a:e5:51:14:bb:93:
64:4f:41:6e:40:b2:0e:73:3e:49:06:80:b8:30:65:
43:dc:d8:bc:6a:17:42:cf:f6:9f:b0:9a:3b:3c:c5:
4c:2f:9c:2a:44:f8:40:46:33:a6:37:c2:64:fc:ef:
f6:48:44:df:d0:22:b2:5a:00:37:3f:83:d0:04:a3:
9d:61:b2:52:f4:de:e1:75:a2:a4:0c:18:4e:df:f9:
ac:22:7d:29:de:88:06:89:dc:0e:fb:4b:e6:50:01:
37:e1:f4:49:cd:5e:03:37:12:cb:61:63:ea:28:c5:
2a:61:e0:16:3f:d8:b8:cb:22:eb:8e:4c:3e:60:97:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3B:4C:A2:24:CB:35:99:AC:6E:D3:0E:83:CF:0B:CD:56:2C:F1:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F5090E828C11F08C34FED9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:61:e5:18:fe:50:a9:2b:7f:2f:fb:6c:cf:54:6b:62:b4:ca:
a6:65:5d:5b:a8:fe:e3:09:a9:c0:14:a6:f5:53:b2:aa:7a:8a:
35:14:15:ba:76:32:1e:b8:7d:5f:1f:bd:bc:b0:d9:cc:30:b0:
1d:9d:2e:6c:50:70:56:a1:78:14:ab:e7:9f:0b:e4:53:fd:be:
09:c8:54:ec:83:e2:e1:42:a8:fd:c8:25:eb:ac:fb:4f:09:58:
2d:5f:92:6e:d8:80:f5:91:dc:e6:27:29:11:a4:9f:83:48:23:
38:d8:00:c0:b5:ce:d6:44:8e:e0:a9:8d:20:64:5b:b2:c7:c9:
e6:cd:5b:a9:f0:3d:1d:e8:3e:bb:2a:d2:32:3a:1c:d8:60:f9:
61:b0:3f:9e:24:1e:d2:42:83:5d:1e:bc:73:5b:53:40:1c:61:
c4:4b:69:8d:b2:a7:1b:30:72:01:e7:03:92:ea:14:bd:e6:9b:
1e:5e:d5:e9:9b:59:2f:31:5b:c0:aa:7d:ad:e1:93:d5:30:ea:
30:d8:b0:f7:6c:0f:98:7a:8e:3a:31:4f:c2:6a:40:fa:16:3a:
e7:7d:1d:a6:d8:37:1c:e6:8c:33:28:b6:33:87:b9:59:e5:ed:
2e:cb:49:83:5b:7a:54:fc:b3:64:6d:5d:d2:fa:84:a5:9d:b5:
f9:cf:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:36 2025 by rpki-client