Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FD7CDA753211F09B393AB5DAE4EC9C.roa
File: 07FD7CDA753211F09B393AB5DAE4EC9C.roa (raw, json)
Hash identifier: rYR67DPxK6bHTqMLiEsZEH7UVY7qmA70Yic4f8oB4BQ=
Subject key identifier: 5E:17:71:92:00:CA:30:8A:9C:D9:71:A8:9B:B7:66:DB:00:6A:D8:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01912D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FD7CDA753211F09B393AB5DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 15:03:39 +0000
ROA not before: Sat 09 Aug 2025 15:03:32 +0000
ROA not after: Sat 27 Sep 2025 15:03:32 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102701 (0x1912d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 15:03:32 2025 GMT
Not After : Sep 27 15:03:32 2025 GMT
Subject: CN=6897634b-89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:0d:96:35:f0:a8:32:92:93:c1:ba:7d:9e:
ec:b5:90:3c:5a:a8:f4:a2:f5:ea:ba:f3:cc:e3:f0:
69:f2:21:35:71:27:fd:ba:1d:d2:c2:08:4e:5a:e4:
c7:43:0c:e9:ab:e4:ac:ae:ee:54:5f:fd:79:7e:c3:
d8:df:0b:c1:e8:e3:74:8a:fe:64:85:60:04:43:fe:
1b:bb:b5:e4:e7:6d:88:45:ea:d8:cc:b5:d5:9d:ae:
f4:27:20:f2:16:9f:38:00:c4:6e:2d:5e:13:bf:ff:
a5:40:5e:4c:30:a6:36:80:f5:72:d7:2c:65:a3:b1:
82:ea:d7:a2:a0:a3:3d:55:fc:3a:cb:af:38:9e:79:
ba:5f:23:dd:5e:df:54:5a:b3:da:71:cf:1c:f5:9f:
06:e2:dd:47:aa:f7:57:c8:67:d4:7d:6d:f4:63:ae:
89:d5:bf:e0:34:82:d4:74:6c:11:c2:73:36:83:94:
ef:84:cc:0d:9a:5a:ca:a0:14:6a:55:f1:d0:d0:b9:
20:c4:a5:54:c0:31:47:24:8d:8d:6a:76:fe:10:b7:
1d:85:af:b2:a5:bb:43:02:04:c8:eb:30:c0:13:67:
87:0d:a3:ef:2f:e2:22:b6:5e:e7:d5:cc:af:40:3f:
ad:63:90:7b:f1:05:a7:cc:20:7b:9c:ee:a1:c8:5f:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:71:92:00:CA:30:8A:9C:D9:71:A8:9B:B7:66:DB:00:6A:D8:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FD7CDA753211F09B393AB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
57:ff:c4:c3:4e:10:c1:38:61:ad:72:25:b5:54:ce:ce:93:87:
a3:eb:eb:08:5e:d3:06:89:f0:e0:54:c2:fa:19:6d:64:6d:e1:
51:5b:94:e0:32:33:92:9e:9d:3d:2f:da:32:7a:1d:c3:91:9f:
df:de:f9:a1:4d:51:ca:41:3a:3a:3e:29:1e:dd:55:5f:33:4e:
78:19:40:e0:87:e9:b3:5f:9c:56:b4:0b:13:9c:8c:46:64:27:
90:87:e9:e1:bd:aa:84:c6:41:01:52:18:f1:e4:c9:05:a9:f0:
53:83:27:48:1b:99:11:43:bf:3d:f1:03:9d:1e:5c:be:0d:63:
a3:a5:fa:a9:4c:c2:fe:a3:f3:80:9d:38:1b:7a:3b:0d:82:36:
83:62:f6:ae:e2:c0:42:c9:24:38:17:48:1d:f3:92:db:78:ef:
cd:01:43:f4:7b:43:1f:cc:c5:43:d3:ec:b2:97:9b:17:a7:fe:
86:3d:e1:9d:cc:83:b4:7f:c9:35:ec:1f:29:96:1c:87:a8:6a:
d8:2c:91:c9:bc:22:9e:6c:ce:5f:18:7d:d5:b1:c1:4e:10:27:
b9:23:0c:33:e5:86:fa:3d:62:da:4e:ff:05:0e:0f:f4:2e:72:
2a:59:68:2f:bc:ce:72:8e:4d:99:9d:c8:4b:c6:3d:cf:6b:3d:
16:a3:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:40 2025 by rpki-client