Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53B5750802811F09620C1DCDAE4EC9C.roa
File: F53B5750802811F09620C1DCDAE4EC9C.roa (raw, json)
Hash identifier: 4xqycogHB6p6pAnlfAhMLO4CaaqznR+WywgMQIinZ+g=
Subject key identifier: 67:7E:52:A5:89:57:DC:70:94:71:86:3A:C7:73:C9:11:21:97:0F:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53B5750802811F09620C1DCDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:56:25 +0000
ROA not before: Sat 23 Aug 2025 13:56:21 +0000
ROA not after: Tue 30 Sep 2025 13:56:21 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103883 (0x195cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 13:56:21 2025 GMT
Not After : Sep 30 13:56:21 2025 GMT
Subject: CN=68a9c889-3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:62:ff:01:61:fe:00:a9:cd:3e:00:5c:5a:
c4:9a:ea:e7:32:53:5c:90:47:13:cc:37:ad:26:4a:
5b:1f:38:56:fb:d8:ce:06:d0:1b:aa:c9:dd:86:20:
cf:7d:81:63:9b:62:e0:11:cd:8f:9d:66:24:f4:01:
20:db:81:a5:34:f1:e4:85:14:57:ea:f0:65:76:94:
97:77:cb:d4:1d:c4:ed:d3:bf:ff:8b:6c:d6:2f:0b:
e0:01:f2:27:84:e0:91:cb:a0:54:2e:8a:e0:fd:38:
c1:45:8c:64:53:29:57:2c:0e:9b:84:89:7d:4f:d6:
2a:87:8a:c4:88:e3:25:ec:ad:55:b1:e2:ff:f3:23:
64:a0:94:e0:61:47:71:c9:30:b5:0a:8f:1e:b4:9e:
fe:aa:95:2b:b9:46:1f:12:bc:a7:98:8d:53:2f:68:
a3:23:c7:5f:4a:df:8f:08:65:4f:cf:d1:76:1f:91:
c1:7f:12:74:8a:d1:0f:78:b1:b5:74:53:be:84:92:
3f:03:d5:d9:cc:61:f2:40:93:d5:6c:c3:86:e7:b5:
d9:32:14:14:3d:a3:72:36:16:64:d4:b3:78:99:6b:
29:66:8f:61:70:d4:26:47:93:6d:64:09:95:4f:19:
1a:c8:49:50:9f:35:c2:3f:bc:b5:d4:7c:ae:9c:69:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:52:A5:89:57:DC:70:94:71:86:3A:C7:73:C9:11:21:97:0F:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53B5750802811F09620C1DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
32:ef:f2:a1:a7:3d:3d:b0:54:e7:96:3f:99:71:ae:44:a8:7a:
5b:28:74:16:5c:e6:5d:58:d0:9c:b9:dc:2b:68:2b:9e:17:e8:
8d:92:67:a6:d1:7f:28:d0:64:a2:42:b6:cc:ff:17:fe:ce:61:
c6:6f:b2:cc:82:4e:4a:c5:ab:be:6a:af:29:93:7b:f2:7f:1b:
f4:65:99:e6:73:6a:46:83:f0:bf:2e:a9:bf:7c:50:1b:e9:7c:
c9:e9:c0:5b:03:98:85:64:d7:0d:95:a8:aa:e1:f6:48:c1:8a:
e8:3d:e9:82:e5:09:61:e5:5d:3c:a2:43:97:f0:31:df:17:39:
74:bf:c8:f4:3a:2e:ca:a9:07:6d:19:36:d1:1f:98:b3:65:7e:
3d:0b:cf:59:54:d0:89:44:a4:3f:fa:eb:5b:6a:17:99:ea:02:
f5:2b:06:7a:1c:80:5d:35:1f:d4:bd:c0:6c:a5:9d:fc:de:61:
14:63:1c:4f:c6:95:27:7d:f8:0d:2d:cb:b3:e0:a0:a4:29:dc:
0f:c6:b5:bd:b7:8e:1a:c8:4e:5c:3e:78:47:f2:c1:db:d9:14:
26:ff:d1:f2:02:80:25:a0:72:d7:bd:8c:59:bd:c5:cb:4f:ff:
68:e2:61:c0:18:7e:5c:c2:28:05:e2:ad:69:79:ec:6f:51:f8:
6c:13:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:19 2025 by rpki-client