Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E06DEDAA844311F081DFC195DAE4EC9C.roa
File: E06DEDAA844311F081DFC195DAE4EC9C.roa (raw, json)
Hash identifier: LaUAlUtjcj2WkJlaHng+HGnuZ7bnGdDt4gXUhBLnVCY=
Subject key identifier: 4D:34:6B:95:D0:50:F8:9D:59:32:41:A1:51:89:FA:FA:44:99:1B:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E06DEDAA844311F081DFC195DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:19:12 +0000
ROA not before: Thu 28 Aug 2025 19:19:03 +0000
ROA not after: Mon 03 Nov 2025 19:19:03 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
154.93.126.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104994 (0x19a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 19:19:03 2025 GMT
Not After : Nov 3 19:19:03 2025 GMT
Subject: CN=68b0abaf-d40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:f1:08:7e:68:36:f8:bc:43:dd:e0:51:25:
1b:22:e8:cd:2f:bd:14:c5:34:7e:3d:0b:6c:cc:ed:
f4:f9:e5:69:d7:9d:50:dd:ae:8d:ed:e4:fa:2c:79:
f3:22:1d:24:04:81:3f:39:99:76:fb:79:67:51:b9:
0f:98:84:34:d0:95:60:b9:cb:f1:ec:21:28:4e:3d:
b3:98:26:16:a5:dc:4f:d0:1c:13:aa:5e:e1:bc:88:
a8:9e:67:6b:01:39:92:92:73:b7:f6:ed:eb:af:70:
65:0b:07:18:c8:97:e3:25:2d:19:63:2a:92:c0:22:
eb:ac:77:28:5e:4f:67:f5:b8:de:1d:87:db:a9:f0:
9e:48:ea:a5:b7:7d:6d:64:65:f7:ca:8e:6e:f1:76:
b4:4d:a2:3c:33:3d:59:da:dc:4b:bf:74:4c:72:63:
6d:ab:b1:38:81:f3:5a:69:2a:e3:f7:90:82:ba:a5:
5f:7c:6b:c5:45:2b:4a:b4:8a:68:9d:99:a7:a6:6c:
7a:bb:2a:97:60:a3:47:97:66:41:44:56:a5:4a:f4:
89:75:55:e3:57:0a:1c:ce:25:b9:52:5d:c7:6c:5b:
41:8a:ae:ea:f4:53:82:92:87:33:47:f3:5c:7c:b1:
69:54:28:98:88:eb:87:6a:4a:2e:81:ff:06:ff:d7:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:6B:95:D0:50:F8:9D:59:32:41:A1:51:89:FA:FA:44:99:1B:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E06DEDAA844311F081DFC195DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0/23
154.93.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:69:c0:4b:31:a2:f5:e9:2b:2f:8d:f5:04:ea:75:19:64:76:
d2:e1:3e:35:46:d1:ef:10:53:a1:a9:f3:21:50:7c:9a:d5:5c:
7b:6a:54:34:82:88:14:cc:ce:8d:0e:91:0d:b4:19:85:35:11:
5e:13:db:57:ac:e7:6c:25:74:f6:2d:0f:77:2e:a3:7a:02:5f:
1a:bf:31:b1:2e:6d:1a:d7:21:15:5b:7f:6b:ec:ea:ff:ee:25:
e6:77:08:48:68:bf:88:88:ae:f4:3b:84:57:0c:03:79:a2:25:
c0:46:dc:5a:2f:ea:c0:0d:54:06:c9:b0:19:b2:35:0e:b2:45:
f6:30:35:dd:46:7c:d2:77:9a:db:cc:ed:5a:15:67:c8:a4:e8:
9f:2f:88:57:f5:a4:7d:6c:1e:63:1f:a7:c0:19:8d:1a:45:b9:
3a:97:7c:7f:3f:63:26:49:68:95:ca:f4:d0:74:28:bb:2f:df:
01:25:f3:bd:07:a4:2b:0d:ac:a3:1b:4c:11:6b:54:e4:53:5d:
61:86:2d:16:c3:00:cc:4d:19:bc:7f:d0:be:ac:a9:d5:5f:7d:
ca:38:70:5e:d8:db:ab:7c:fa:c3:9b:5a:5a:02:cd:14:de:85:
60:82:48:50:41:a9:d4:bb:39:ae:8c:d5:2b:d6:fd:08:17:de:
a3:50:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:37 2025 by rpki-client