Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD4C51E863611F08DF333D7DAE4EC9C.roa
File: CAD4C51E863611F08DF333D7DAE4EC9C.roa (raw, json)
Hash identifier: mUcC+aq9GazlZ1P/SNaRoFTQCHK/0etzFn8XV96DjiM=
Subject key identifier: D5:79:F1:96:94:54:6A:83:2B:DC:F1:64:5C:92:D1:B7:A7:46:14:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD4C51E863611F08DF333D7DAE4EC9C.roa
Signing time: Sun 31 Aug 2025 06:50:34 +0000
ROA not before: Sun 31 Aug 2025 06:50:29 +0000
ROA not after: Sun 07 Sep 2025 06:50:29 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105077 (0x19a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 06:50:29 2025 GMT
Not After : Sep 7 06:50:29 2025 GMT
Subject: CN=68b3f0ba-8309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:9c:66:88:45:b2:a5:24:76:09:36:93:35:
64:ba:ed:73:a0:ef:49:4c:72:97:bc:41:ef:5a:1c:
70:d0:42:09:8a:5b:56:21:6e:93:54:d0:f7:75:2d:
64:b2:1a:86:47:a4:76:3b:49:63:e8:6a:27:3b:cc:
9d:6c:4f:4e:d6:0d:02:69:f9:a3:07:6f:c0:70:74:
a3:8f:21:3e:de:65:dd:cf:c9:3f:75:81:5d:53:94:
c1:00:39:ec:c7:6b:5b:35:70:1b:ce:53:1a:67:09:
27:84:ee:26:d9:46:bd:d9:db:5a:78:42:1d:05:21:
bb:a7:b6:a2:6f:3a:a9:58:10:cb:27:9f:a8:24:59:
7c:6f:87:38:9f:a0:e8:02:39:90:4d:62:15:31:28:
19:34:08:6b:b6:0a:09:64:99:92:7d:e1:da:b4:8a:
eb:cd:a5:35:2e:b3:6f:28:24:9b:ac:ae:84:42:eb:
22:21:48:5e:d6:b8:e4:d4:25:11:cf:99:3d:bb:5a:
d0:78:4f:69:93:1a:2e:dc:cd:ae:c4:b9:c6:d5:a0:
89:0a:7a:ab:1c:b4:3f:55:06:50:69:8f:eb:81:47:
4b:b6:49:e7:cf:09:f1:d8:06:c0:9b:14:9f:a5:b2:
b1:bb:cb:e6:79:f6:2c:93:79:2b:c8:bf:47:69:fd:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:F1:96:94:54:6A:83:2B:DC:F1:64:5C:92:D1:B7:A7:46:14:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD4C51E863611F08DF333D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:30:31:0a:ce:5c:b4:36:e6:8a:73:da:cb:11:b9:25:b1:4a:
ba:ef:38:c7:f7:07:b2:e3:d2:1c:d8:f0:d4:4e:c1:5b:80:73:
ab:66:6b:73:25:2b:f4:03:4e:ca:45:de:2f:0a:97:63:da:e4:
fa:32:cd:98:96:e7:79:1f:e5:b9:4e:d3:5c:29:f7:4d:6c:15:
05:9c:03:1b:98:50:14:a2:92:c7:92:f0:ba:32:dd:cd:02:1e:
dd:ea:0b:5a:2e:88:36:e5:54:f0:b5:fc:49:4f:7a:23:0b:9b:
26:dc:d3:b9:70:72:05:95:0c:7e:01:45:6c:ab:01:dd:08:54:
68:00:92:d5:6d:16:b4:58:f7:b8:74:11:54:95:d2:5e:d4:7d:
f9:ce:b4:3e:83:72:3c:e0:e9:e2:9c:2c:5d:24:c4:58:ce:f6:
99:28:46:0d:20:68:39:54:6d:14:e7:ef:00:84:2f:8c:a2:96:
b1:6d:ce:51:bc:f3:8e:8e:18:97:b5:c0:f6:66:48:04:b5:2b:
d4:4d:b1:5b:06:25:e9:b8:91:35:b2:84:bc:94:95:22:fe:91:
cc:b5:1e:e8:c4:cd:d7:a6:d8:aa:02:6c:42:41:b7:e5:75:d9:
2c:4e:ca:11:6f:7f:4d:dd:a2:0f:ea:47:f6:fe:b2:1c:6f:4a:
7c:1f:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:34 2025 by rpki-client