Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745514A7C1311F0927FA797DAE4EC9C.roa
File: 5745514A7C1311F0927FA797DAE4EC9C.roa (raw, json)
Hash identifier: dJa7XPCjOC91ApKzUUgb3aT+j1Kx2ZyTmgMjP/Tpw7U=
Subject key identifier: D2:44:68:A0:AC:7D:88:9B:5A:88:F1:B2:9B:E8:DF:E9:DB:0F:27:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019203
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745514A7C1311F0927FA797DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:11:36 +0000
ROA not before: Mon 18 Aug 2025 09:11:31 +0000
ROA not after: Fri 19 Sep 2025 09:11:31 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102915 (0x19203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 09:11:31 2025 GMT
Not After : Sep 19 09:11:31 2025 GMT
Subject: CN=68a2ee48-88f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:35:ec:4a:4c:cc:7e:37:67:c7:59:99:9d:
b7:37:d3:b7:42:6c:43:ab:3c:79:40:7c:9e:06:57:
d6:81:d3:29:3e:f9:3a:0c:4e:85:e8:13:21:21:7d:
29:51:03:52:ad:b4:33:3f:9d:8b:28:78:e3:b3:cd:
07:37:0a:b8:25:11:e2:f2:18:ef:7b:a0:ff:1d:8b:
ea:9a:31:86:b5:66:41:95:5a:bb:66:0d:f4:8e:5f:
5f:eb:e6:44:60:9e:7f:a8:51:0f:4d:ce:cd:a4:75:
ea:ea:8d:1e:a8:e9:16:09:51:bb:49:1b:51:c9:ad:
98:25:fb:22:91:9f:c8:cc:38:6c:cb:23:86:a7:90:
cf:ad:61:37:ff:d7:93:6d:b9:ee:6c:95:f4:34:ee:
98:7b:2b:32:e0:4f:00:d1:2a:75:12:15:00:57:69:
86:02:a5:a4:ab:a4:3d:75:2e:a5:f2:8b:05:fe:fe:
a1:fe:ff:5f:37:64:20:1b:5f:fd:b3:6a:86:e6:81:
eb:6f:14:f2:37:c5:42:45:f0:84:1b:9a:08:57:31:
ce:c4:67:7f:8e:6d:95:9e:6c:b9:b5:fd:0c:d7:35:
e3:eb:fa:f7:48:5b:d0:bd:b7:c7:26:c4:cd:66:8a:
43:0f:2f:b9:9f:2a:56:26:e1:73:89:d7:6a:71:58:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:68:A0:AC:7D:88:9B:5A:88:F1:B2:9B:E8:DF:E9:DB:0F:27:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745514A7C1311F0927FA797DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
c1:05:c8:c0:d5:a9:89:9d:02:f7:8b:c2:11:48:93:73:75:ff:
96:a6:04:20:06:af:21:ed:4d:14:4c:8c:ee:d3:0d:06:88:d9:
fb:b9:a5:2c:82:8c:9a:fd:31:01:f3:d3:78:dd:da:32:43:14:
24:84:68:1a:e9:d1:c3:b3:c0:75:ed:14:03:00:0f:40:06:94:
64:a8:89:88:83:56:56:bf:e9:99:02:0c:e4:37:46:7f:e3:95:
7f:9d:df:8d:a4:4e:8c:32:f1:19:87:81:99:47:8e:86:b5:20:
c7:04:d5:bc:34:d9:d2:27:2b:1f:53:70:ad:72:89:32:67:ad:
1c:1c:41:8c:1a:12:e0:44:80:1a:6b:94:3a:1a:e4:e0:8b:01:
68:ff:e0:99:af:f3:b5:48:f2:18:2b:55:4f:18:43:65:cf:77:
0b:e0:0b:ce:32:2e:19:17:69:f2:34:e7:10:e4:ec:8a:21:a1:
71:31:e0:04:c3:c6:f5:4e:55:7d:0e:6d:04:35:17:7f:d6:65:
7b:ea:9b:bc:6a:53:a3:19:f9:33:f1:ac:52:31:62:08:0b:02:
65:ea:53:d2:05:05:fd:4d:29:c1:91:61:74:37:b0:8e:47:65:
5f:a9:36:e7:79:7e:73:f3:22:84:43:06:b9:10:4e:3a:d1:55:
09:2d:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:09 2025 by rpki-client