
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24595B4C752811F090541EF3DAE4EC9C.roa
File: 24595B4C752811F090541EF3DAE4EC9C.roa (raw, json)
Hash identifier: 5mj5CTblwBSu8JEHt1tBdiAuFs2sQ1iN1pi/OWiNDo4=
Subject key identifier: 3F:85:C2:35:1F:07:B2:66:C3:31:A2:DB:B2:3F:29:13:50:F4:1E:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01911B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24595B4C752811F090541EF3DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:52:52 +0000
ROA not before: Sat 09 Aug 2025 13:52:47 +0000
ROA not after: Tue 16 Sep 2025 13:52:47 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102683 (0x1911b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 13:52:47 2025 GMT
Not After : Sep 16 13:52:47 2025 GMT
Subject: CN=689752b4-74f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:dc:34:5d:7f:47:d5:8f:a6:f7:28:ed:3f:
5f:57:32:ce:3c:1a:f6:dd:6f:99:ac:74:8c:1c:74:
36:5c:0d:2d:2e:65:ff:39:b2:2c:d3:56:bf:9d:f5:
1f:3b:49:33:f2:5d:e0:3b:50:93:c5:44:ab:58:0f:
d5:90:46:00:a4:4c:c1:e5:cd:cf:2d:25:7e:f6:54:
d5:0c:53:7a:c7:5c:3c:24:bb:48:96:fc:c9:54:8b:
14:6b:6e:5c:18:05:a1:0b:bd:8f:e2:b1:f5:60:68:
eb:bd:f0:b4:66:07:94:0f:94:33:87:9e:ad:fe:4e:
9c:fd:d0:65:9f:59:12:30:a7:c5:30:2c:eb:f0:4b:
c5:97:66:b8:c5:42:a5:da:4e:9a:cb:28:5e:b3:ad:
14:da:4e:bc:df:f6:50:84:aa:a5:6f:e6:67:23:d4:
ec:2a:00:17:b7:74:5c:80:ed:ac:06:7f:c3:e4:e4:
3c:dd:31:09:96:5b:0e:84:9b:07:4a:a8:02:37:40:
5d:71:09:62:fe:40:ac:ab:e6:74:19:7b:47:e3:a4:
6c:15:1e:97:ea:b8:5d:b3:14:16:70:77:3a:68:6f:
03:8d:42:27:45:06:93:d7:95:b3:21:2f:6e:81:b0:
a0:0f:82:75:f1:ea:4c:57:8b:1e:11:eb:03:77:16:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:C2:35:1F:07:B2:66:C3:31:A2:DB:B2:3F:29:13:50:F4:1E:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24595B4C752811F090541EF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
73:48:7b:e5:e4:00:fa:bd:e5:5a:2e:0c:fd:13:5f:4e:eb:9d:
b7:c5:1d:a1:88:8e:d6:f4:bc:d8:cc:2b:a5:a3:40:29:99:cd:
41:1b:b1:14:e9:03:d8:14:d2:2b:65:bf:21:26:34:26:5c:e8:
8f:8f:ce:dd:cb:b3:02:99:7f:45:e0:85:bb:21:c7:1b:b9:78:
18:ce:19:c5:0b:d4:2a:7c:2c:f4:33:72:13:ea:e6:c1:25:08:
21:27:9b:c6:dc:ca:62:df:57:92:dd:dc:9f:ee:b6:60:da:5b:
75:73:54:aa:2d:09:fd:9b:4e:44:9a:70:c0:07:fa:7e:8c:46:
81:11:1e:94:1b:2f:8d:7a:7b:f3:7d:3f:4f:4d:83:fd:4d:37:
b6:a1:83:e0:40:fb:11:9d:91:a5:d3:eb:a0:99:0c:ef:c0:b2:
10:b9:fa:d7:63:42:93:9a:95:b1:c3:16:08:1d:34:69:2b:19:
11:9c:9c:0a:20:eb:f8:3d:9a:22:f5:9d:08:22:a5:82:a5:44:
4e:7c:f3:35:fa:39:d0:94:2f:39:6c:c7:e1:0e:5d:b2:67:63:
cd:52:38:92:d8:e2:4f:f1:cf:46:c6:a6:ad:d2:42:c2:c3:68:
ff:a4:70:fe:30:e4:10:35:38:eb:63:dd:05:d8:1d:bd:ec:a1:
da:ef:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:08 2025 by rpki-client