Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3003E1BC752B11F08E3B468BDAE4EC9C.roa
File: 3003E1BC752B11F08E3B468BDAE4EC9C.roa (raw, json)
Hash identifier: Usqf+/t4RjY96LVe25u0pkIeAzEwEJLjLiKzKvz0Bao=
Subject key identifier: 53:1F:31:2C:4D:E5:6F:E1:15:DD:E2:4E:7C:9E:5E:5E:99:56:43:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019121
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3003E1BC752B11F08E3B468BDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 14:14:40 +0000
ROA not before: Sat 09 Aug 2025 14:14:33 +0000
ROA not after: Sun 24 Aug 2025 14:14:33 +0000
asID: 141883
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 14:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102689 (0x19121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 14:14:33 2025 GMT
Not After : Aug 24 14:14:33 2025 GMT
Subject: CN=689757d0-a01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:e0:96:58:cb:d5:9c:56:97:b3:ae:a8:b3:
59:28:31:ed:5e:ab:ab:27:59:86:12:6f:a0:f2:d6:
f5:69:fb:3c:d6:18:70:51:be:47:00:3b:fd:90:9e:
03:8b:0f:72:da:e2:fa:18:85:3f:9a:cb:a4:2a:4e:
ea:62:76:8c:1f:ff:bb:4f:65:33:6f:7e:e2:6e:7c:
02:94:10:f6:c7:a2:bc:f8:e3:ec:d9:6e:b7:ef:84:
b7:75:28:ca:c9:ce:4d:6d:6a:26:8e:0c:87:fc:97:
ed:50:bf:c8:1f:ba:e0:14:3d:f7:80:f3:a2:ed:44:
16:cb:bd:bf:18:a5:a2:fd:af:bf:db:0b:fe:d6:16:
d1:42:10:db:3a:4f:df:a7:31:be:6a:a7:d1:5c:9b:
53:ec:27:7f:f7:8a:4d:10:aa:1a:02:df:b3:ae:21:
c0:21:6a:a3:f7:1d:a0:34:08:47:35:fb:ee:59:65:
64:1d:75:96:a6:f1:a1:b4:ab:0e:53:7d:da:88:dc:
c8:e7:33:3a:3d:23:88:99:87:68:ae:a8:67:5d:92:
8b:28:1e:7d:94:33:14:18:dc:85:2c:7c:53:fd:8f:
6e:e3:de:20:54:8e:20:ed:3b:92:3a:7d:37:c1:d5:
9e:f2:9e:f5:fb:7b:f2:23:23:8b:b9:29:2f:9b:ed:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:31:2C:4D:E5:6F:E1:15:DD:E2:4E:7C:9E:5E:5E:99:56:43:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3003E1BC752B11F08E3B468BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
79:cc:95:76:5b:23:0b:01:43:75:6b:61:29:78:e3:b3:07:8c:
c3:5d:f6:10:53:68:8b:e2:0d:e0:1b:6a:82:fc:51:08:1d:0d:
c3:92:be:4b:85:50:41:fe:a6:6b:40:7a:43:55:d8:6d:66:3c:
3e:f5:6b:66:f2:7a:4d:09:3d:99:f2:23:8f:7b:84:bb:ed:b9:
ec:d4:b4:97:ca:97:79:23:d1:94:14:81:07:7d:20:de:2e:fe:
51:6c:f0:48:1c:e6:14:0f:74:9c:eb:ca:3f:ea:5b:9d:a3:8c:
1f:9f:be:cd:00:62:1b:fa:73:82:f6:c0:70:ea:b7:a5:46:71:
7e:8a:84:8f:00:c7:23:ca:e9:81:19:ff:cb:95:3e:c0:fa:77:
65:30:43:1e:32:6c:82:99:9e:8c:81:b7:41:1f:b9:82:c6:48:
55:e8:47:5c:ee:28:48:72:d5:d5:92:15:26:9b:65:3a:57:eb:
95:74:6a:13:20:07:98:c5:41:9e:aa:5b:6a:c4:d1:24:30:49:
79:5e:c5:89:c9:cf:68:7c:ca:a9:f1:60:ff:84:6d:c1:62:67:
4b:f2:4e:19:75:99:cf:74:a4:89:23:e6:9d:a8:de:65:28:35:
7f:3b:b1:75:d9:6f:fa:8d:2c:f2:81:c7:d0:5a:78:69:8a:00:
29:db:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:28 2025 by rpki-client