Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D999F5D8836B11F0A284D58DDAE4EC9C.roa
File: D999F5D8836B11F0A284D58DDAE4EC9C.roa (raw, json)
Hash identifier: Rv/KXZRPIzgNnjVw/oqa2Df23zPkuOgICaM+6QnsHZk=
Subject key identifier: ED:46:6E:96:58:CA:75:E9:95:01:E0:3A:CC:0F:37:9B:1B:FE:85:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D999F5D8836B11F0A284D58DDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 17:32:49 +0000
ROA not before: Wed 27 Aug 2025 17:32:44 +0000
ROA not after: Wed 15 Oct 2025 17:32:44 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104685 (0x198ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 17:32:44 2025 GMT
Not After : Oct 15 17:32:44 2025 GMT
Subject: CN=68af4141-7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:02:1e:71:6c:15:f6:f4:e5:70:14:35:89:
28:03:62:8a:3e:75:e3:c6:a2:60:ee:fe:b9:e1:a3:
14:08:46:66:ce:c2:fb:0b:a7:31:ad:89:b7:72:dd:
03:53:37:44:42:a0:1d:80:21:f3:49:f9:d7:ba:b3:
80:dd:da:d7:76:6c:b1:58:87:dc:a3:c1:c0:75:8f:
25:f4:2c:ab:a2:5f:a4:84:57:90:26:02:31:58:1e:
a2:d5:61:4e:c1:e4:30:8f:e3:29:0c:17:91:db:e1:
21:2a:bd:9d:fd:b9:58:ab:b4:33:68:2e:cb:52:f4:
f8:d3:dd:c5:e9:cb:62:17:73:b2:25:73:f5:2c:4d:
30:62:5a:46:aa:c0:73:33:5d:a1:ad:21:76:3f:9f:
00:bd:6f:b3:c6:27:1d:a2:55:5c:5d:2a:26:12:3f:
ae:fa:ac:72:4a:a9:8b:4d:54:8e:69:b5:f3:52:12:
4f:9f:18:d7:14:22:92:20:11:7b:75:59:61:e4:b0:
92:0e:60:82:cd:d4:80:70:d3:f3:1a:87:4b:02:05:
ea:6d:d5:74:90:56:d1:b4:d9:2f:52:85:9e:43:7d:
5e:a5:31:a7:84:62:7f:f4:99:60:3e:ba:75:48:62:
9f:f8:a5:d3:87:8c:89:77:0b:30:6f:9f:04:1f:d8:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:6E:96:58:CA:75:E9:95:01:E0:3A:CC:0F:37:9B:1B:FE:85:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D999F5D8836B11F0A284D58DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:61:2a:55:6d:a4:9d:b6:41:e2:e4:99:e6:29:4d:a7:35:fd:
fc:88:56:b0:34:50:02:62:bf:08:63:b8:70:43:1c:b2:e3:e3:
85:04:27:68:12:b3:ec:b6:45:d9:df:a7:22:54:6e:49:9b:2c:
b6:64:1c:48:59:92:d1:e5:2c:56:28:7f:ad:e5:2d:1f:e2:62:
3f:6b:04:16:bc:ad:e7:25:9f:2a:09:f8:0c:1f:06:88:54:7a:
5b:0c:ee:a4:3a:16:64:6f:11:fe:90:6a:c6:2e:d8:14:38:91:
5e:ec:48:d3:c6:09:1d:e3:27:31:79:fb:6f:a0:f1:57:dd:a8:
0a:60:a1:7d:1f:b5:b7:65:9c:5b:bc:70:e8:0d:83:47:86:de:
bb:5b:2c:b4:2f:86:15:89:1d:47:b8:8d:f1:40:67:e7:45:65:
2d:f1:31:f0:8a:4d:5b:f8:67:10:bf:44:04:f3:bc:6e:56:4d:
22:26:6a:58:cf:51:fe:c6:6a:fe:61:1d:14:ab:ee:18:57:1e:
c8:dd:21:2b:a9:85:57:ae:c4:df:aa:b7:db:78:d6:3e:71:8c:
7a:c1:d0:62:de:fa:b0:f6:a1:7b:04:a4:44:73:88:bc:4d:01:
91:cb:2e:d9:c8:0d:dc:de:64:9e:17:9e:b7:00:ee:57:36:2e:
8c:57:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:33 2025 by rpki-client