Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F055058C870E11F0B9E6D7D5DAE4EC9C.roa
File: F055058C870E11F0B9E6D7D5DAE4EC9C.roa (raw, json)
Hash identifier: ZpFXUa4vH8eG+3alnC192V2hGv+wEMAwg5jC7sZ+YMU=
Subject key identifier: B8:13:CD:CA:84:75:19:8C:9B:69:E2:FD:94:78:FE:39:CB:19:3E:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F055058C870E11F0B9E6D7D5DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:37:48 +0000
ROA not before: Mon 01 Sep 2025 08:37:42 +0000
ROA not after: Sun 07 Sep 2025 08:37:42 +0000
asID: 132513
IP address blocks: 154.210.3.0/24 maxlen: 24
154.210.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105285 (0x19b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 08:37:42 2025 GMT
Not After : Sep 7 08:37:42 2025 GMT
Subject: CN=68b55b5c-f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:df:1a:3d:e7:5e:5a:3a:b6:da:a7:72:fa:
cb:c4:5f:a2:e3:13:59:e2:3d:f4:08:82:b9:dd:b6:
df:95:31:6f:fb:80:45:cc:1d:ff:9c:84:17:56:fb:
70:d3:bf:4b:6c:2a:b2:ce:51:f0:ee:40:cc:48:6a:
6a:59:d6:e8:18:68:2f:36:43:b2:7b:98:eb:0e:55:
92:75:64:68:e2:a1:b2:dd:8f:0b:32:e0:1e:35:c6:
63:70:f3:2d:d3:7b:51:6d:5d:f1:66:f8:8d:32:e0:
a6:b3:b7:61:b7:72:ea:21:e1:8a:38:6e:b2:fd:ec:
81:81:e0:86:d4:d6:6d:c5:01:c0:bf:af:8e:57:84:
89:3e:58:db:f1:51:15:2d:1b:d0:b0:d6:21:fe:12:
cc:6c:b1:b4:4f:9d:3a:c2:6f:8c:27:ac:3c:7e:bc:
f0:63:d9:89:21:9a:0a:6a:4a:dc:4b:44:62:12:6e:
54:d9:a0:22:47:74:a2:0e:51:5d:a2:f9:83:2e:8d:
48:dc:9a:2d:94:e8:be:ba:be:16:3f:8c:79:5f:a5:
dc:e0:28:bd:3c:97:16:dc:a8:63:57:a2:69:18:7f:
1e:ab:27:79:a5:1d:59:6f:42:54:ef:f6:17:5d:a1:
24:a4:19:cf:97:f8:5d:d4:1d:37:e7:1c:c8:d9:56:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:CD:CA:84:75:19:8C:9B:69:E2:FD:94:78:FE:39:CB:19:3E:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F055058C870E11F0B9E6D7D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.3.0/24
154.210.14.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0d:d3:c9:50:15:4c:5d:98:51:57:a0:28:83:8f:97:b1:9a:
bb:4c:ea:c4:a7:3d:60:13:16:e6:71:dc:83:54:2b:b0:1b:2e:
a7:52:66:33:67:76:7b:5c:2d:35:f8:6d:49:43:13:08:bb:50:
7c:67:af:7e:ac:c7:64:ba:61:aa:91:5c:6a:bd:01:5f:c4:e0:
63:2d:42:12:41:31:fd:2a:52:15:36:aa:e3:d8:00:40:ff:85:
b6:4e:e7:65:7c:d6:10:30:c0:4a:3a:a3:24:f2:1c:c0:8d:20:
9a:3f:f5:4f:43:80:6d:4e:39:d6:a7:9d:07:1c:90:c6:a8:34:
60:cd:ee:14:8c:25:86:37:19:f1:7a:41:a5:db:9c:ea:af:bf:
2f:da:ab:82:9c:b9:3a:0f:4e:66:1e:c0:85:28:83:4e:8a:69:
56:69:24:a3:ce:5b:65:96:df:fd:61:54:ad:16:c9:d4:79:eb:
4d:9c:a9:d7:66:98:a8:df:14:a1:88:31:57:47:fc:98:28:25:
74:3f:16:64:49:50:4c:23:1c:dd:27:b5:6e:ce:36:b0:70:ff:
8f:16:57:76:c3:fe:5e:ca:f7:39:92:26:61:4d:3d:f4:6d:2e:
68:9c:93:a5:db:79:b7:ff:cd:3a:25:36:89:0b:f7:f7:1d:68:
53:37:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:27 2025 by rpki-client