Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF025D27AD111F09CD7BFD6DAE4EC9C.roa
File: 1AF025D27AD111F09CD7BFD6DAE4EC9C.roa (raw, json)
Hash identifier: NJ0TcUrsdMtodho0KMEjt319BEUeByRuZYs1yv9pYxw=
Subject key identifier: C1:24:B9:41:F3:43:2E:65:A9:F8:88:D9:81:1D:73:6E:CE:7A:0E:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF025D27AD111F09CD7BFD6DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:44:57 +0000
ROA not before: Sat 16 Aug 2025 18:44:52 +0000
ROA not after: Mon 06 Oct 2025 18:44:52 +0000
asID: 20326
IP address blocks: 154.83.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102903 (0x191f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 18:44:52 2025 GMT
Not After : Oct 6 18:44:52 2025 GMT
Subject: CN=68a0d1a9-161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:c3:40:47:cf:f8:d7:bf:3b:77:1e:21:1c:
55:3c:fe:1e:26:a1:d8:51:a3:d7:f4:2a:52:1e:51:
15:0a:db:43:11:52:d9:90:20:da:6e:4b:48:75:88:
35:85:4b:1d:37:0d:01:36:4d:a4:81:be:cb:c3:09:
8c:6a:27:ec:86:49:8e:c3:08:76:c4:97:54:52:0a:
16:a9:11:e7:22:2a:a4:40:fe:c1:5e:28:48:91:dd:
54:48:08:49:91:34:8c:f6:6e:17:b4:7b:8c:9e:58:
53:6b:03:88:b8:43:ed:33:83:b0:05:65:bc:3d:75:
83:80:ba:bb:42:b8:0d:c0:54:52:ae:b7:6f:a7:86:
ac:77:f2:fd:f0:29:8b:1a:b1:b5:98:d0:ea:ab:5b:
ec:48:75:5c:ff:b4:6e:6c:90:e2:84:c7:1d:fa:ac:
eb:71:89:9a:2d:86:50:6e:92:21:20:c5:9e:23:21:
d6:e1:02:c4:31:07:9f:7c:1c:c7:3f:81:19:e8:6e:
3c:de:1f:69:6e:40:34:8d:38:7d:98:c4:69:78:b9:
b8:ff:c7:fb:17:08:78:5d:a7:ce:2c:64:b9:03:4b:
e6:84:c6:38:16:06:05:91:56:bd:0a:d6:33:96:de:
93:07:81:60:55:be:99:3b:5e:9c:ad:ac:a7:98:ab:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:B9:41:F3:43:2E:65:A9:F8:88:D9:81:1D:73:6E:CE:7A:0E:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF025D27AD111F09CD7BFD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:44:3c:e7:52:f2:2d:30:05:8d:ba:fc:85:97:2b:48:28:5a:
b7:f8:73:90:d9:17:bf:1c:b3:4d:a6:4f:88:35:93:94:18:44:
7f:24:ba:08:38:42:d2:31:36:4c:a6:bc:28:42:3a:ec:08:f4:
56:3e:20:28:76:22:ff:5a:c5:77:11:17:7e:ca:87:c8:ee:ed:
6f:01:ec:95:c0:7e:2a:cf:91:2e:72:9a:b3:a0:84:92:ae:cd:
17:a3:42:1f:e8:fc:d1:c2:29:99:76:8f:c8:6c:2e:fc:72:b8:
6f:ea:ff:ab:ce:86:62:2b:a2:8c:82:13:74:bc:3a:be:9c:a2:
af:b1:19:fe:2d:db:e2:8b:ec:ec:de:e7:25:bf:94:58:e8:79:
53:2b:15:78:39:d5:9b:33:0d:41:7f:51:08:98:6d:e7:f0:37:
39:bd:90:6a:0d:04:f2:94:d5:76:9e:b1:bc:82:d2:24:4d:c2:
2a:26:18:a6:c7:bd:c4:85:10:32:ea:88:0b:24:b9:7d:d3:d6:
a6:05:c0:b8:1a:28:e0:c5:45:d2:a9:e7:82:61:65:5a:fc:d3:
38:04:35:4d:c0:81:d2:27:b9:a6:f0:ed:53:09:09:bf:a3:55:
3d:78:62:28:e8:d3:be:8e:0c:a8:fd:1b:b6:f8:47:be:cb:1f:
f2:95:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:53 2025 by rpki-client