Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADA75847EAA11F0B369638BDAE4EC9C.roa
File: 1ADA75847EAA11F0B369638BDAE4EC9C.roa (raw, json)
Hash identifier: SMOzzTZOeD1dbPZXDkyTFTsz8pbci/T8HgoPJEgUdYE=
Subject key identifier: 37:02:95:2C:70:27:FE:EA:FD:16:66:3C:4B:E2:81:A3:C3:74:AA:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADA75847EAA11F0B369638BDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 16:15:51 +0000
ROA not before: Thu 21 Aug 2025 16:15:46 +0000
ROA not after: Wed 21 Aug 2030 16:15:46 +0000
asID: 17561
IP address blocks: 154.202.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103385 (0x193d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 16:15:46 2025 GMT
Not After : Aug 21 16:15:46 2030 GMT
Subject: CN=68a74637-3a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:b9:31:3a:e1:8c:77:0d:f9:b4:31:a7:13:
38:1f:1f:b5:6d:8c:b5:21:c2:d0:73:50:94:c1:e8:
2e:9f:b3:aa:e9:d1:5a:d1:1f:d1:74:5f:19:a3:f4:
17:cd:cd:81:bb:92:fa:fb:e0:0a:f3:20:b0:6d:d8:
ad:43:73:5a:7e:72:cc:b0:d4:04:0a:fd:44:65:ce:
81:04:97:f8:c4:18:51:b5:23:ae:1f:8b:dd:c8:f5:
5b:99:ce:2e:c8:5a:db:23:1d:1f:fc:27:df:39:57:
77:0b:3c:2f:42:68:59:5e:71:a7:d1:8b:2b:96:f4:
ef:13:99:46:92:c9:94:92:74:a6:d9:00:97:9f:7d:
8e:44:e9:eb:97:d4:78:cd:4c:1f:d0:98:25:a8:d7:
ec:fe:fc:33:d5:7e:a9:d4:71:7f:e8:8d:83:ec:a9:
ca:0f:c6:85:06:4e:9a:b1:db:c5:7f:56:7f:8d:9c:
63:38:3b:16:15:78:bc:22:e7:e9:18:72:71:d7:75:
30:3d:c5:ca:20:fc:29:f7:48:d3:df:67:9b:6d:82:
c3:3c:10:b4:bf:46:81:3c:80:ba:07:2e:56:ca:07:
ff:21:49:c1:d3:8f:23:90:a1:f4:ea:32:5f:c6:fd:
98:eb:0a:5c:ce:1a:c2:7b:e2:83:7b:3f:9e:e5:2f:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:95:2C:70:27:FE:EA:FD:16:66:3C:4B:E2:81:A3:C3:74:AA:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADA75847EAA11F0B369638BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:49:8f:2c:90:dd:ae:4f:7e:a8:a5:f5:a9:96:95:5e:29:4a:
6d:3f:fe:a6:18:2f:a8:74:16:58:9e:d5:bc:d6:d5:dd:83:c9:
20:fa:84:37:98:c2:ec:d1:e8:6b:21:25:26:1d:39:56:18:34:
63:2c:5e:84:c6:33:27:df:fe:00:1a:2d:a7:82:cd:f7:37:13:
99:29:22:04:4d:46:45:50:96:cd:0e:68:ac:24:76:d6:d1:cc:
22:c4:c6:cb:c0:70:e4:05:10:98:16:0c:d1:e8:ec:b9:47:fa:
b6:61:76:18:69:a9:6e:bd:31:3e:e7:b4:37:bf:cb:8f:35:06:
9e:79:dd:da:e9:50:24:0b:f1:e2:b4:ed:23:f1:83:2d:e9:16:
c5:27:c4:bb:af:6b:c6:2b:09:ee:89:e5:dc:59:0d:48:78:21:
7a:1a:39:87:59:59:15:54:50:f9:9c:17:33:03:a3:8a:e4:04:
53:a8:3d:52:e9:e2:11:98:cf:35:3b:61:6e:c6:ac:9a:29:61:
69:e4:d3:92:52:06:4e:14:08:13:09:2d:7e:3a:fc:64:bb:3a:
df:8c:e9:27:a6:2d:22:5f:42:17:a8:58:27:e4:02:1d:d3:8f:
62:68:a7:21:43:df:39:47:ef:62:2f:9d:1b:cf:0b:da:11:cc:
f6:ec:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:04:55 2025 by rpki-client