Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1D97A848711F09D1F99D4DAE4EC9C.roa
File: E7B1D97A848711F09D1F99D4DAE4EC9C.roa (raw, json)
Hash identifier: ezAubBlORD3e91N1HkeXvThrTww3Jlq6htNZtgB2TSA=
Subject key identifier: C6:53:16:B7:A8:70:04:74:FE:35:28:60:C6:FF:A9:5A:6F:71:63:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1D97A848711F09D1F99D4DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 03:26:09 +0000
ROA not before: Fri 29 Aug 2025 03:26:02 +0000
ROA not after: Sat 06 Dec 2025 03:26:02 +0000
asID: 214483
IP address blocks: 154.222.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105014 (0x19a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 29 03:26:02 2025 GMT
Not After : Dec 6 03:26:02 2025 GMT
Subject: CN=68b11dd1-eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:b5:a0:61:d2:e6:f9:7c:e8:5f:1a:7b:6d:
d2:82:39:fb:26:45:47:36:8b:95:cc:8a:5d:64:43:
fa:70:29:f9:95:ea:92:d7:e3:6c:00:fc:80:10:ad:
51:10:d8:77:7a:46:83:d1:20:ec:16:01:84:03:d3:
c6:ea:52:8d:72:bb:c7:7c:5d:28:55:aa:99:e0:d9:
57:98:61:94:c5:cd:19:d2:a6:b4:a8:1e:b8:77:ef:
f1:69:a4:20:e5:58:69:50:a1:2c:ce:61:ce:09:04:
e0:bd:d8:0c:fd:89:20:76:93:04:51:d2:ff:44:3b:
d1:ae:e7:d7:13:0d:b1:8a:92:34:d3:cb:85:6e:b1:
25:e9:b7:38:48:15:21:31:f8:bc:ae:24:80:82:cf:
02:3e:54:28:a4:61:5f:19:6f:a1:36:ef:6f:cf:cb:
22:8b:a6:ee:1c:1b:b3:7d:67:ab:fe:38:8a:fd:a4:
fc:1e:3c:07:c1:cd:9c:fb:29:71:89:fe:9d:1f:a8:
4c:b8:56:04:41:a0:aa:3c:bd:9f:0a:49:0d:cb:cc:
5b:8c:55:f3:a0:98:00:c0:3e:c0:d1:8e:fd:7f:5c:
86:42:64:6d:2a:86:e0:ba:e3:aa:64:06:36:3b:62:
c5:ff:6d:06:a6:27:5b:30:f0:ba:b1:7c:99:89:07:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:16:B7:A8:70:04:74:FE:35:28:60:C6:FF:A9:5A:6F:71:63:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7B1D97A848711F09D1F99D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
73:aa:61:7d:74:45:70:53:00:e0:84:d2:ce:2a:e6:44:49:e4:
2e:9b:69:2c:64:d4:24:72:99:00:be:6b:08:1b:a9:50:81:50:
91:bd:a9:77:fd:ad:cd:bc:2d:e3:ca:14:0f:d8:dd:41:e3:e3:
da:47:04:ea:80:15:41:96:a1:fd:8d:68:c6:6c:22:3e:5a:c1:
15:05:4b:4b:b0:7e:5a:85:28:20:8b:dd:59:50:8a:e6:17:d5:
19:63:b4:d2:2a:6a:24:8c:06:c0:6a:c6:00:84:0f:2a:7c:90:
07:97:12:d4:2c:0a:f8:1d:84:40:d7:fe:b0:47:44:51:2a:ca:
61:63:20:a6:81:9e:8e:45:d7:1a:83:ad:ab:26:59:d0:f5:b2:
95:7a:a9:be:68:0b:05:9a:cf:fe:ed:82:a4:2f:ab:5e:73:26:
85:ab:99:61:a3:58:fb:7b:49:1f:6c:b6:15:d0:dd:be:71:56:
9d:fb:a7:ce:0f:41:08:7e:6c:8e:e7:ab:b4:65:9c:4a:32:de:
a4:40:ab:0a:9f:19:3a:50:9b:11:ea:40:2a:76:34:f7:04:4c:
34:6f:df:94:f0:fe:3b:54:e5:fd:8c:8b:5f:97:d3:90:dc:36:
63:5f:62:92:29:bd:11:0f:7b:44:8c:9c:81:cc:12:66:b4:e0:
c9:c0:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:44 2025 by rpki-client