Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C562E31488C911F08E847491DAE4EC9C.roa
File: C562E31488C911F08E847491DAE4EC9C.roa (raw, json)
Hash identifier: sjeXArDlVL24p9kDeD8A8qCKdqIZ6aYWMGqtbXrr93w=
Subject key identifier: 94:08:7F:01:C0:2F:BF:1A:F0:7F:B5:B4:DF:AD:FC:14:26:95:DE:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C562E31488C911F08E847491DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:27:43 +0000
ROA not before: Wed 03 Sep 2025 13:27:38 +0000
ROA not after: Wed 10 Sep 2025 13:27:38 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105759 (0x19d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 13:27:38 2025 GMT
Not After : Sep 10 13:27:38 2025 GMT
Subject: CN=68b8424f-c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:d2:23:73:3b:bd:3e:60:98:75:59:97:7e:
81:3e:54:fc:49:24:58:20:3d:2f:0a:94:dc:15:41:
64:91:fa:54:e5:85:f1:ba:5b:78:91:05:3a:8f:2e:
21:0c:7f:e8:be:86:ab:b3:08:57:40:05:c9:7d:15:
a2:b4:6f:bc:50:c8:a1:12:db:8c:6a:31:6c:66:c5:
7d:ec:97:1f:42:b1:4a:c0:7e:c7:43:24:26:74:bd:
7c:fa:1d:98:60:08:dc:9a:f7:72:20:a8:02:1d:5f:
d4:e7:70:d1:71:da:fb:dd:39:ad:24:9d:4b:40:53:
9e:af:bf:b5:9c:cf:7f:f4:03:ae:1d:04:cb:8b:ee:
e0:a5:18:bf:b2:ba:5f:9a:04:b8:1f:8d:7a:df:ac:
b4:49:31:52:62:61:22:06:d4:9e:da:b6:41:e9:af:
c5:b8:68:29:73:da:db:80:d2:4a:9e:78:e9:5a:3c:
34:35:43:45:7a:11:42:d6:ae:f8:2c:57:13:1a:6e:
02:ee:cb:98:bd:3e:01:df:92:7c:ba:a6:41:82:77:
55:16:b7:5b:f9:cd:72:3e:60:65:1e:63:b1:1a:19:
18:2c:8e:62:0b:49:3f:b0:a6:9a:ca:4a:43:a8:2b:
ab:2d:f5:25:cb:5d:a0:1b:82:64:5b:98:30:df:ba:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:7F:01:C0:2F:BF:1A:F0:7F:B5:B4:DF:AD:FC:14:26:95:DE:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C562E31488C911F08E847491DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b1:53:f5:21:76:2d:c1:82:92:e4:89:89:d1:58:40:fb:0b:
09:41:38:26:24:42:2e:ea:37:94:d9:00:b4:ce:ba:2c:45:6d:
af:f5:3f:06:72:0b:38:19:1a:6c:92:a3:d8:3b:38:e5:8c:f9:
8d:3c:96:52:02:50:6f:7f:7d:12:1b:10:f5:c8:6b:65:f3:cf:
6b:ee:6f:4b:92:76:e6:cd:e9:27:ae:f5:4e:bc:68:91:78:da:
23:ec:ac:54:df:c3:62:ed:ae:1c:ff:a6:2f:d0:29:88:3e:04:
93:9a:d2:f9:85:eb:5f:9e:49:c0:59:31:9d:7a:eb:23:ca:fe:
bd:92:40:42:78:66:62:69:8a:dd:42:e5:98:20:55:3c:f1:05:
56:b4:e7:81:9c:fb:39:f5:de:3e:b6:db:92:6d:55:02:06:cf:
9d:47:8d:46:33:56:dc:4c:a7:0b:ad:b3:98:84:52:4c:a2:3d:
32:3d:f3:96:db:73:fe:e4:45:1e:82:e6:9a:01:71:a8:1f:5e:
b2:59:5f:c1:a9:d9:53:86:20:3b:36:76:5b:3e:b2:58:ba:21:
b2:41:6b:cb:da:41:79:08:87:9c:91:08:9e:1f:03:3c:83:77:
f5:3f:32:13:f6:48:c7:7f:81:6c:e3:9e:77:b8:1a:28:ae:f0:
bc:c4:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:38 2025 by rpki-client