Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50FE71A47EA711F0BCAE2F79DAE4EC9C.roa
File: 50FE71A47EA711F0BCAE2F79DAE4EC9C.roa (raw, json)
Hash identifier: zBGz8ic7iJ9YbZySpNJ4G4/zEr6xQO04bjyIMBrBt9k=
Subject key identifier: 27:35:19:AA:9C:09:D7:74:B3:09:AC:07:50:3B:C5:BC:C6:98:36:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50FE71A47EA711F0BCAE2F79DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 15:55:53 +0000
ROA not before: Thu 21 Aug 2025 15:55:49 +0000
ROA not after: Wed 21 Aug 2030 15:55:49 +0000
asID: 17561
IP address blocks: 154.83.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103372 (0x193cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 15:55:49 2025 GMT
Not After : Aug 21 15:55:49 2030 GMT
Subject: CN=68a74189-3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:f6:c4:2a:0c:f5:ba:04:3b:e8:ea:e3:e1:
3d:fa:a0:56:d7:76:c4:50:fc:a8:c1:22:2b:c7:e8:
d3:f1:57:7b:42:c7:3d:79:30:b6:2f:5b:1d:d2:1d:
00:e2:2e:91:fd:a6:09:8a:e6:4a:89:7e:8c:5a:fd:
d7:bc:66:c4:3a:52:0d:cf:41:be:80:b3:19:1f:6a:
96:0f:06:11:60:30:f6:e9:42:79:2b:7f:ad:f1:68:
65:58:a7:94:d9:b4:ca:82:4e:46:5a:ba:92:3e:3f:
28:64:c7:60:df:f5:eb:31:9d:18:5a:51:1e:81:22:
11:3a:ab:c7:37:66:f1:86:08:95:98:ff:b3:ca:64:
ec:de:ad:e8:37:08:b7:98:f5:01:ea:55:6c:e1:12:
6a:85:34:31:79:fe:d3:38:bb:28:c7:8b:70:d6:99:
f1:dd:c7:b4:81:b7:9d:28:13:fe:86:ee:96:48:3c:
2a:32:26:cc:40:7f:c4:66:36:ed:1f:a4:99:18:2f:
90:24:76:73:43:b7:41:b6:50:4b:55:c3:4c:f1:ac:
78:5e:52:7f:f6:8c:c1:4b:6d:17:3c:1a:c6:26:b4:
bb:fe:92:61:9a:b5:38:2c:22:a8:21:a6:7b:da:6c:
45:9b:fc:30:86:ca:ae:3d:74:a8:ff:04:df:31:18:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:19:AA:9C:09:D7:74:B3:09:AC:07:50:3B:C5:BC:C6:98:36:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50FE71A47EA711F0BCAE2F79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d7:d1:77:d3:f6:8f:a4:f1:19:ce:56:2f:85:65:9b:c7:64:2f:
6b:ea:aa:be:83:89:9a:46:f4:fb:fd:b5:37:8d:76:b7:cc:7e:
66:a7:07:0d:39:9f:c4:ce:01:e3:17:ab:64:9e:b7:b5:cf:d9:
12:e6:fc:b0:7b:4f:82:3b:c8:2c:3b:01:3a:3c:77:13:d1:36:
9d:9a:88:99:aa:30:f4:c4:b1:29:3b:d5:c8:65:fe:b8:36:55:
d6:f9:da:c3:0f:fd:bb:8d:e1:6b:d6:88:25:31:20:d4:b6:93:
47:29:22:56:f5:5a:05:61:d8:73:ee:2c:50:c6:74:65:26:f9:
7c:27:0d:3b:aa:83:fc:ea:4c:38:e9:76:c0:75:0c:55:5a:c7:
87:a5:fa:87:e0:d7:28:f1:d2:e7:cd:f6:c5:44:cd:d9:df:44:
be:10:79:94:86:59:6c:0b:97:cc:9b:b8:ad:e9:74:3c:13:48:
d0:cd:cd:6c:95:ca:a6:9d:df:a7:46:b7:89:c6:fd:91:fe:4d:
e2:75:03:83:9a:0e:3b:53:d3:94:dd:8a:4f:3e:9c:cd:f8:05:
eb:26:4b:d9:ea:be:d8:36:c8:9c:b5:04:b9:f7:98:44:20:e9:
70:c8:94:c3:18:4e:c6:c9:c8:2b:88:a7:b2:f8:20:9e:e8:b6:
1b:e8:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:18:57 2025 by rpki-client