Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0AD66E0896D11F090388CC3DAE4EC9C.roa
File: E0AD66E0896D11F090388CC3DAE4EC9C.roa (raw, json)
Hash identifier: UzJ5Ur9n1HwN0s8nWqNWhCqxa+NSbfMHMU2Xf4WPxmg=
Subject key identifier: 4F:AB:22:89:9A:BB:B2:8A:23:46:14:D6:55:45:45:21:11:51:4F:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0AD66E0896D11F090388CC3DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 09:02:26 +0000
ROA not before: Thu 04 Sep 2025 09:02:22 +0000
ROA not after: Thu 23 Oct 2025 09:02:22 +0000
asID: 21859
IP address blocks: 154.198.164.0/24 maxlen: 24
154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105863 (0x19d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:02:22 2025 GMT
Not After : Oct 23 09:02:22 2025 GMT
Subject: CN=68b955a2-a1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:80:65:7d:a3:77:48:6c:b4:0e:2c:7f:c6:ad:
1b:93:6f:9b:d0:2c:37:ff:0f:e0:16:ef:04:a5:96:
9a:f3:47:bd:30:32:be:7f:09:c2:be:f7:be:06:4a:
72:6b:06:42:b0:ff:74:35:7d:1b:28:e8:df:d7:ad:
c1:f0:4a:37:23:23:51:02:5c:75:6e:e8:1e:30:dd:
b6:e6:a0:3c:1b:fd:ab:5a:ae:ad:a0:de:e9:aa:11:
84:90:9e:6a:43:0f:f4:f6:27:3f:81:18:7a:e5:b3:
86:ac:e1:65:ee:e6:b2:eb:ba:8d:55:42:5d:85:8a:
82:d5:7f:54:5e:e3:04:3c:6a:bb:27:4b:ed:fd:91:
98:b1:f1:e8:02:0a:56:05:ea:ef:f3:16:44:80:84:
83:fc:6d:7e:3b:56:3b:68:08:e3:e2:5c:e0:d5:70:
f7:73:99:a3:34:27:b6:b4:24:28:96:68:cb:49:2b:
e2:1f:76:5c:d3:59:0d:b1:37:e1:a7:86:ec:a5:bc:
d0:4e:77:1d:59:79:52:94:f0:9c:b1:50:fd:1b:5a:
b4:e5:33:c8:2e:77:af:f5:90:f0:95:bf:72:41:28:
d5:95:1f:ed:f6:49:fd:ae:16:3b:10:91:9c:c8:ac:
2c:d9:0a:89:0e:bf:e3:fb:cd:73:19:c5:74:1a:f2:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AB:22:89:9A:BB:B2:8A:23:46:14:D6:55:45:45:21:11:51:4F:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0AD66E0896D11F090388CC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.164.0/24
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e2:de:05:83:92:db:2d:cb:7a:a7:a3:03:a5:5c:0e:2e:9b:
38:54:43:81:27:85:ad:95:3b:b2:ca:0e:bf:45:8e:5d:34:b5:
3b:d5:f9:c2:a6:da:09:b4:7f:b0:b8:18:e7:1c:8a:a6:23:c6:
a2:07:bc:0a:7a:47:7f:cd:cc:0b:37:2f:4c:39:3c:05:c0:fb:
b8:85:ec:c3:5a:f8:b0:5a:91:92:8d:42:5e:52:87:7f:aa:ba:
23:e9:93:a6:7d:86:9f:2d:ca:15:79:31:a6:d3:1f:84:63:97:
6f:86:c8:6c:d8:a6:ce:3a:0d:12:fe:83:f1:86:d1:fa:79:ab:
d0:b9:f3:de:bd:10:7f:f3:65:c5:a1:b5:62:d1:69:9f:37:6f:
4a:a7:cb:61:bd:67:37:c8:fc:19:97:d7:6f:68:8b:3b:2a:57:
1a:59:63:11:fc:a4:b0:27:e8:90:28:f4:7e:e8:40:80:f7:51:
38:f6:bb:26:ac:ad:cd:9c:a9:33:b1:d8:e4:32:71:e1:39:0c:
a9:4e:bc:cb:03:ab:4a:17:3b:91:01:97:c5:dd:f5:23:78:13:
3c:1c:25:55:a1:2f:74:ff:21:84:85:50:78:dc:c1:72:ba:14:
76:50:51:17:f4:24:9c:6c:af:42:ab:f7:85:61:9d:95:a1:03:
68:a1:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:46:51 2025 by rpki-client