Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3356218A774311F09F07ABB5DAE4EC9C.roa
File: 3356218A774311F09F07ABB5DAE4EC9C.roa (raw, json)
Hash identifier: 0xAQ1QA5JUdBitU1iRwuP93yEgBCdV3bcSqFHmfzT6w=
Subject key identifier: 8C:B0:F7:4A:E3:62:70:92:02:B2:96:0E:04:E4:35:D6:CE:55:33:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019174
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3356218A774311F09F07ABB5DAE4EC9C.roa
Signing time: Tue 12 Aug 2025 06:11:36 +0000
ROA not before: Tue 12 Aug 2025 06:11:31 +0000
ROA not after: Sun 14 Sep 2025 06:11:31 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102772 (0x19174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 12 06:11:31 2025 GMT
Not After : Sep 14 06:11:31 2025 GMT
Subject: CN=689adb18-8971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:e5:54:15:f2:a8:ab:1f:93:c8:1c:78:03:
72:e7:bf:51:f1:eb:6e:60:99:c8:1b:0c:84:6e:bf:
43:24:5b:4b:6a:dd:60:31:1d:62:78:7b:ba:ad:96:
4a:9d:09:6b:de:c4:ba:b9:1a:5e:15:c5:05:fc:1f:
f9:f6:05:48:d1:4d:9b:bf:0f:84:95:2e:18:12:13:
aa:6d:53:13:97:8c:ef:97:03:85:4a:ec:3b:43:83:
cf:44:b4:1e:46:5c:19:4f:e7:e1:9e:c5:cc:b6:c1:
8b:d3:04:70:79:2a:69:fe:94:f5:1a:2e:1e:a1:fd:
86:54:b7:e8:94:e1:e6:32:8d:b4:20:20:e9:76:4f:
2b:9b:2b:51:b4:95:fb:50:c9:4d:f8:19:b4:55:08:
03:8b:75:db:7a:08:f8:79:04:04:86:09:6d:6c:5d:
9e:8c:e1:08:f0:58:05:06:53:52:cc:d5:b5:86:b8:
dc:e3:c6:ea:1a:07:e6:e1:d6:9f:1a:94:9a:34:0b:
7b:89:3e:c7:83:19:19:89:95:5c:40:f6:3c:3e:f0:
2d:68:51:6f:b2:f5:da:d8:3d:8c:e0:d3:2f:f0:3b:
37:be:74:80:72:cc:b9:7b:70:2b:e4:f1:6f:df:e2:
cf:e6:81:db:ce:fa:80:ff:23:28:77:4e:a4:1d:7a:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:F7:4A:E3:62:70:92:02:B2:96:0E:04:E4:35:D6:CE:55:33:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3356218A774311F09F07ABB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:7f:45:00:8d:b1:f8:a0:d2:0f:2e:05:71:b3:19:1a:d3:7c:
97:0e:4d:9b:59:be:dc:84:1a:e6:9a:20:5f:df:87:5b:5c:dc:
cd:f0:c3:97:99:8d:ad:ac:f8:1a:81:3e:a3:90:04:0a:7a:f8:
a4:a8:32:94:3f:cc:79:1a:51:db:22:b7:6b:0f:05:f5:e5:58:
aa:d1:1d:5e:ff:7c:50:28:dd:9b:88:63:93:4a:87:65:3c:87:
84:28:16:25:84:7f:77:77:84:c5:a4:b9:e2:b9:e9:ee:7c:78:
49:1b:ce:c0:2e:66:af:bb:ab:01:be:a1:39:0c:96:0a:c9:a8:
ec:22:96:bc:66:2a:74:05:9f:ee:5a:e9:ff:8b:cf:89:8f:9b:
0b:bb:6a:e6:13:6a:0a:b2:f1:a1:44:cc:00:2e:8e:87:dd:00:
98:43:a4:85:3e:c1:1c:b4:be:10:63:5d:ad:8a:81:3c:27:6b:
09:06:33:01:f0:23:4d:b3:b8:5a:44:bd:1b:8a:4c:ae:b4:dd:
3c:18:80:d2:f3:f1:2e:a1:7e:55:4b:5a:25:9f:66:68:36:dd:
01:f1:01:b4:1c:3d:07:4d:7e:02:fa:70:80:b9:b4:23:90:a0:
b8:e6:c3:7c:ad:11:6d:c6:08:e0:2d:16:52:d1:96:d0:df:15:
b5:53:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:27 2025 by rpki-client