Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F88060737411F0BFF40EE1DAE4EC9C.roa
File: 10F88060737411F0BFF40EE1DAE4EC9C.roa (raw, json)
Hash identifier: 0muLp+Kw/b52ikSrNh1PWTeoh10whdR457wlYT/41+g=
Subject key identifier: D8:4B:FC:97:EE:76:18:12:5F:27:09:3E:EE:33:16:BA:E8:D9:61:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F88060737411F0BFF40EE1DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 09:51:19 +0000
ROA not before: Thu 07 Aug 2025 09:51:13 +0000
ROA not after: Thu 11 Sep 2025 09:51:13 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102638 (0x190ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:51:13 2025 GMT
Not After : Sep 11 09:51:13 2025 GMT
Subject: CN=68947717-63b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:2a:dc:d7:a3:d8:c9:70:47:fc:1a:38:12:
8d:0b:8a:d3:64:54:2c:af:73:8e:2c:ac:4d:62:c5:
3e:52:f3:47:fd:c5:53:45:5b:13:15:ae:34:73:db:
00:a9:f9:79:f4:9d:7d:6a:d2:01:6b:f4:15:c6:1f:
e6:07:f0:ed:49:83:15:30:8d:8e:ed:bb:26:e5:01:
8e:48:4a:cf:eb:9f:65:00:59:38:28:1d:30:51:ac:
5b:3b:cc:69:db:8a:c2:ee:da:36:5e:f5:cf:8c:69:
e7:c7:f0:d0:0d:fb:93:a0:29:37:b0:fe:dc:52:fb:
56:2f:5d:2a:f5:7d:5b:ab:44:97:a7:75:3f:44:61:
5f:b7:40:91:eb:1a:09:fa:58:24:62:80:be:0a:ea:
9a:72:e0:7c:7f:b3:15:0d:9f:f8:23:3f:5f:b0:81:
0a:00:70:d8:86:b6:9f:d8:4b:83:c3:af:0b:66:9d:
be:62:f0:16:25:93:72:72:d6:4c:d9:15:f7:a5:42:
26:fe:d1:02:19:47:61:95:a6:3a:41:ba:d7:56:c3:
5b:0c:4f:3e:f4:6d:3c:76:ce:96:c2:15:5a:01:53:
74:54:8c:c2:34:81:89:83:a0:1b:a0:69:b9:1d:0d:
bd:9b:e6:ca:0b:ea:27:e9:f8:3d:fc:2d:c6:20:e4:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:FC:97:EE:76:18:12:5F:27:09:3E:EE:33:16:BA:E8:D9:61:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F88060737411F0BFF40EE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:db:d1:ef:62:72:bb:c4:da:13:a4:94:21:4c:6e:57:73:3c:
c3:e6:2f:7e:4d:44:01:6a:03:7b:9c:db:fa:74:c8:f8:9c:55:
92:4a:63:da:27:d7:ec:ad:dd:c3:c4:98:9e:68:9a:f3:ea:0a:
63:1b:64:6a:d8:70:0f:24:eb:99:2d:1b:23:6e:d2:de:93:06:
9c:0e:83:09:11:73:5c:5e:33:0c:68:69:ab:15:82:f1:75:c8:
79:c9:2f:7a:fa:c1:1e:75:5d:d4:8d:f7:48:98:42:ec:07:d2:
f1:e0:14:d3:cb:ca:db:f1:23:25:9b:f0:6b:8e:cc:d8:54:35:
99:f4:98:50:2c:37:90:e5:6b:65:b6:30:4f:90:7a:49:7d:f9:
8e:a1:06:7e:60:1d:a5:1b:e7:99:9a:19:ee:d9:6f:02:92:fa:
65:83:22:2a:3e:59:8f:73:f1:cb:4a:75:59:8e:8a:d6:67:05:
87:d3:45:4b:cf:ab:06:1c:d1:9c:6c:d9:95:df:66:3e:12:57:
cc:a5:f8:95:d9:cb:2c:8b:00:73:c1:df:22:5a:80:db:0b:3b:
ae:8a:cb:6f:45:78:92:15:ea:f6:ab:fa:48:66:5e:25:d7:5e:
35:42:82:dd:81:c3:c8:4e:06:1d:05:94:18:e4:f6:05:a0:2f:
30:63:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:06 2025 by rpki-client