Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A3ACA679D111F09E59B6D8DAE4EC9C.roa
File: 17A3ACA679D111F09E59B6D8DAE4EC9C.roa (raw, json)
Hash identifier: GLHn6yuhgg9CElisPv2I7oK/FRqyWA2D+UG2e4BBph0=
Subject key identifier: FA:0F:7A:71:5A:F9:AA:FF:19:BC:17:A7:80:D0:25:5D:24:64:60:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A3ACA679D111F09E59B6D8DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 12:12:20 +0000
ROA not before: Fri 15 Aug 2025 12:12:13 +0000
ROA not after: Thu 25 Sep 2025 12:12:13 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102878 (0x191de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 12:12:13 2025 GMT
Not After : Sep 25 12:12:13 2025 GMT
Subject: CN=689f2424-b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:4f:2f:2c:f3:e4:33:1e:47:9b:0d:a3:4e:
d4:6a:09:ce:54:3b:bc:f4:f0:cf:62:8f:58:93:6f:
4c:68:eb:af:0e:f7:fb:c0:61:57:42:85:66:ab:73:
21:60:8c:75:9f:76:1a:5e:f3:3f:dc:3b:72:be:b6:
10:8f:64:f6:b7:1b:77:93:b4:95:5b:2b:59:41:e8:
b3:aa:5c:83:60:b6:2e:7e:50:47:a8:29:7e:86:fc:
00:a7:9d:95:da:c9:9e:5b:d9:66:d3:24:41:0d:9f:
cd:2d:d1:d0:76:30:03:93:9e:7b:a9:26:ac:3b:b3:
ba:c8:13:cc:64:cc:52:e8:d0:3f:97:67:7b:07:a5:
6c:f0:0e:ac:3a:42:62:e3:4b:88:e6:fe:c7:6c:da:
3d:8c:72:82:02:d6:a5:74:42:d3:30:fd:70:55:7c:
52:88:c0:51:db:4d:c8:be:4c:48:cf:78:89:89:bb:
b8:a3:c7:49:98:40:88:cf:0c:eb:ec:ea:cc:57:f7:
e0:b6:a8:89:4d:90:64:81:8a:33:ce:6b:cf:c7:b2:
ae:c3:2e:62:1b:ef:ca:5c:9e:04:cb:57:66:45:e7:
05:fc:94:5e:34:61:ba:04:b0:de:fb:42:15:6c:6f:
29:1b:49:00:c3:98:22:d5:11:0b:20:31:f1:4b:54:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:7A:71:5A:F9:AA:FF:19:BC:17:A7:80:D0:25:5D:24:64:60:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A3ACA679D111F09E59B6D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ed:84:81:8e:3f:03:37:73:3c:fd:11:a8:f5:ff:3a:6c:89:
65:09:ec:26:2f:90:14:69:c9:b3:3e:1c:33:c7:ab:b1:00:30:
d8:38:f2:74:f0:e4:02:21:34:8e:6b:e2:02:5a:73:11:b2:d2:
89:6b:6a:10:c1:87:df:a5:49:a0:0c:c8:7b:84:00:e0:d7:d7:
63:a2:c2:19:4c:58:be:5e:41:25:59:44:16:b1:12:80:54:7d:
0c:60:c6:44:70:a7:f9:8f:0f:3b:16:39:94:2a:e6:d5:ac:9d:
2e:aa:e6:fa:6b:8d:56:bc:6a:ef:3d:ee:98:38:fc:f7:d2:1c:
f7:d1:d0:ed:1a:18:68:a7:70:a7:07:76:54:68:3f:1f:4b:44:
3e:02:b0:cd:e8:e1:53:06:64:93:06:02:b0:51:13:0f:b9:09:
38:e8:f1:b2:f3:2e:94:a9:a5:59:2f:09:c9:c6:19:70:9f:0d:
bb:66:10:7e:9c:f0:d5:95:17:3a:43:b0:65:42:3c:4e:80:ea:
97:92:c7:ed:1b:f0:a0:87:72:53:77:2f:99:d6:71:9e:10:59:
af:0e:92:d7:d4:64:2b:10:14:2c:cf:51:96:fd:77:43:ea:c5:
9a:7f:18:de:6c:37:d4:9f:06:a2:97:4d:d5:45:7a:34:c9:ac:
ff:66:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:37 2025 by rpki-client