Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1304DABA79BA11F095F4E5C5DAE4EC9C.roa
File: 1304DABA79BA11F095F4E5C5DAE4EC9C.roa (raw, json)
Hash identifier: 7Wer4Qq9b1mAhNL+JwauykoFwDdKXIiVVylWggVtv7o=
Subject key identifier: 4A:91:1D:73:D1:FB:53:A3:87:D1:13:53:53:58:E2:3E:FA:55:00:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1304DABA79BA11F095F4E5C5DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:27:34 +0000
ROA not before: Fri 15 Aug 2025 09:27:29 +0000
ROA not after: Sun 14 Sep 2025 09:27:29 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102868 (0x191d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 09:27:29 2025 GMT
Not After : Sep 14 09:27:29 2025 GMT
Subject: CN=689efd86-9c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:08:5f:be:a5:50:84:30:7c:22:a1:d4:93:
56:53:f9:4e:1f:07:c7:79:cf:df:98:90:7a:c5:eb:
01:c3:dc:71:2b:53:0e:9b:33:5b:de:e3:35:1d:97:
f1:48:0f:5a:08:b0:8f:66:80:52:ff:70:d5:77:e2:
ed:04:a6:13:a6:74:a8:19:5d:f2:c6:aa:dc:cd:bb:
dc:5e:84:cc:71:a7:70:74:df:f2:a2:fa:84:03:51:
05:d0:4b:eb:cd:54:1a:32:81:2a:c3:52:ed:f7:28:
10:b3:bb:63:aa:52:4d:7b:1c:2f:84:82:aa:a8:e6:
88:08:bd:45:a3:8d:60:29:50:e2:11:74:9e:3d:6a:
db:ae:9d:6d:63:3e:fc:89:da:73:7f:ba:ce:0e:f2:
8f:89:3f:0f:d7:c6:87:70:6d:a4:6c:7f:e0:93:98:
8a:1f:aa:b1:7d:0a:83:75:bf:6e:ca:ed:16:c5:77:
6b:1c:10:73:f1:eb:e8:6d:bf:af:d0:85:38:d0:13:
cc:f7:d1:42:3c:54:5b:91:98:c2:52:6d:5a:12:cf:
28:ad:80:3d:8e:fe:31:39:a9:81:3e:5b:10:c7:fb:
80:c8:7b:e0:35:09:25:04:01:d8:7d:e3:83:56:a6:
44:17:11:70:96:16:c4:96:66:6c:9d:c6:f7:2e:c8:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:1D:73:D1:FB:53:A3:87:D1:13:53:53:58:E2:3E:FA:55:00:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1304DABA79BA11F095F4E5C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:d2:ca:46:49:c4:dd:2f:14:5b:2b:2c:47:8c:7d:2f:54:e3:
dd:93:3a:f0:9d:2f:15:73:e9:8c:fb:3a:16:c2:55:33:5c:03:
04:a9:bb:9c:ad:26:50:27:98:83:d0:7d:65:ee:6c:cd:c3:39:
b6:f8:39:72:3c:7b:b3:75:0a:b9:7b:d0:63:94:1b:d9:b7:a7:
48:f1:53:ac:72:3f:3e:db:9f:13:a8:22:d0:c8:98:df:05:28:
8c:4b:9d:ca:02:aa:da:a7:6b:6d:0e:4c:ab:09:0c:c0:ef:5f:
4d:a0:d7:0e:7f:fa:df:2d:0c:1f:16:1e:0b:e0:52:83:df:40:
10:c5:58:69:cf:9a:0e:03:ff:87:90:aa:b3:2d:be:86:b6:65:
4c:2e:dc:4f:da:57:8b:69:18:50:66:2f:73:0b:ec:0b:f4:b9:
1e:a7:62:c3:78:20:50:5f:d0:84:31:49:eb:8e:0c:dd:1a:8c:
42:d3:40:9d:a9:ad:ba:c9:99:28:81:9e:09:5c:9c:a0:ac:ca:
87:3c:fd:b0:58:45:a5:0d:7b:12:a4:20:a8:67:ae:f7:20:6c:
63:28:f0:f4:c9:62:59:c5:a4:5c:02:3c:95:53:79:23:26:a4:
c3:a4:17:38:92:b3:58:49:3f:ba:84:a5:17:73:27:e5:e6:ad:
be:56:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:19 2025 by rpki-client