Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D6E3387ACB11F09CECC2AFDAE4EC9C.roa
File: 20D6E3387ACB11F09CECC2AFDAE4EC9C.roa (raw, json)
Hash identifier: IIFVp8mJZ9Jd7Qq68mL6idw2+NgNRLZr2ui/WF5klDo=
Subject key identifier: 73:F7:EA:30:A3:A8:25:08:98:6A:8F:5D:9D:F7:98:4E:50:50:43:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D6E3387ACB11F09CECC2AFDAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:02:10 +0000
ROA not before: Sat 16 Aug 2025 18:02:05 +0000
ROA not after: Sun 21 Sep 2025 18:02:05 +0000
asID: 57043
IP address blocks: 154.84.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102893 (0x191ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 18:02:05 2025 GMT
Not After : Sep 21 18:02:05 2025 GMT
Subject: CN=68a0c7a2-07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:a4:06:01:15:ae:3f:0e:01:04:33:87:b3:
01:e3:41:10:bb:34:11:04:5a:7c:7c:24:9a:14:b4:
d3:68:ce:c2:99:ee:79:21:d3:e0:58:81:9a:38:a0:
a9:d9:b6:2e:ce:f7:48:55:35:cd:4f:a9:46:65:fa:
38:44:6e:55:d9:ab:28:3f:40:d6:30:3a:01:b5:ed:
28:20:e3:d4:eb:18:0f:e1:33:72:59:5c:de:03:61:
1e:3d:e7:be:ea:ae:0d:19:bb:a1:56:9e:e4:52:79:
2a:d1:37:4d:8e:c8:ab:2c:9a:9f:9c:a9:74:65:ad:
95:40:54:1c:46:d6:02:6d:6e:4f:4d:ac:22:7d:81:
2a:e0:4f:50:4f:bb:9f:4c:f6:b5:49:3f:fc:e0:dc:
1a:91:f7:56:1a:6c:4f:03:c0:76:39:81:dd:3e:ff:
b5:f8:29:09:f2:5f:eb:e2:bd:19:66:1b:91:5c:78:
d3:b1:80:60:79:53:f8:02:65:07:84:55:26:a5:f4:
e2:65:fd:2c:85:08:1d:21:b3:3a:c7:7e:63:bc:ae:
67:f2:60:89:f6:c3:63:78:0a:a7:a9:84:2a:ca:5f:
9c:ad:9e:43:66:1c:72:76:5a:48:31:05:6f:f1:1e:
72:64:f0:38:aa:7e:d6:64:8b:17:8d:c0:39:62:0e:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:EA:30:A3:A8:25:08:98:6A:8F:5D:9D:F7:98:4E:50:50:43:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D6E3387ACB11F09CECC2AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d7:37:41:dc:a1:56:41:ba:00:9e:5d:0d:ce:74:97:0a:e8:
87:d9:04:90:2f:6c:15:3e:36:72:ba:8d:e7:e9:73:7e:8e:47:
57:32:21:ad:85:61:19:af:14:86:db:28:d6:40:47:a2:41:d4:
1e:b2:ed:fc:69:f2:f3:10:30:71:94:8b:bd:59:f2:51:23:65:
23:9c:64:3d:1d:e4:f3:29:31:fe:9c:41:05:45:24:14:57:21:
32:f1:3e:c0:b9:c8:ff:d3:e5:27:87:1b:1a:19:05:57:75:dc:
e2:ab:e2:50:44:ec:6c:9e:1c:c5:11:c3:1e:fa:c4:dc:c5:3b:
89:3f:36:c9:21:19:c1:cd:8f:49:f4:6d:0c:95:71:1a:b8:df:
f9:f3:29:5d:9f:92:be:63:01:dd:69:35:43:2a:f1:73:b4:05:
9d:92:95:ec:d6:07:4d:5d:c3:c6:e9:b6:81:96:6e:df:ff:13:
54:8b:f5:b2:ca:4e:d4:30:a0:ed:06:d4:28:28:66:a8:ef:18:
52:78:03:d1:91:c4:dd:04:06:1a:8d:01:bf:4d:b7:04:b6:33:
86:5c:9b:37:f5:88:3a:29:bf:5d:36:8d:1b:1b:61:93:65:3e:
c4:ef:21:e3:a6:33:dd:34:5b:23:17:7d:5c:b7:f1:0b:0e:e1:
6c:32:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:46 2025 by rpki-client