Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6590E79A7E9E11F08730A7BCDAE4EC9C.roa
File: 6590E79A7E9E11F08730A7BCDAE4EC9C.roa (raw, json)
Hash identifier: AQmjl1eNbBufULeQJFImTMzzzOq1aPrzBF8U+o93fnM=
Subject key identifier: 74:69:3B:73:3B:82:04:EB:6D:FF:BE:B6:7C:9D:1B:1B:BD:2F:67:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6590E79A7E9E11F08730A7BCDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:52:03 +0000
ROA not before: Thu 21 Aug 2025 14:51:57 +0000
ROA not after: Wed 14 Aug 2030 14:51:57 +0000
asID: 17561
IP address blocks: 154.88.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103333 (0x193a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:51:57 2025 GMT
Not After : Aug 14 14:51:57 2030 GMT
Subject: CN=68a73293-4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:69:29:60:a2:28:91:c5:d3:07:20:a1:41:
2c:97:3d:c5:3d:71:6d:33:14:b3:83:b6:5c:2e:be:
4e:a6:7f:c0:19:c3:41:e5:dd:35:df:84:83:0a:6c:
4c:c4:3d:c8:49:1c:ae:d6:b4:27:f5:93:4a:ee:d8:
2a:8c:f4:29:61:8f:05:91:1d:be:6a:33:01:92:51:
d6:77:ce:59:5d:d7:4b:8c:e6:04:4c:e9:3a:f8:8d:
1d:94:a5:b2:ce:5c:ae:cb:35:d1:c1:5c:5a:ad:44:
d5:a0:82:68:62:ee:a1:98:4b:cc:52:10:29:a8:c1:
62:9a:20:a8:76:6b:b3:65:e1:51:6b:0a:83:73:20:
86:f9:d9:5e:46:7c:b3:6f:52:3b:8f:10:80:2a:f0:
87:36:d8:86:eb:1d:e9:df:0e:f5:7c:ea:58:d4:d9:
8c:d8:77:f2:ce:84:f9:88:0e:d4:a1:d5:9d:ce:03:
68:b3:8e:7e:40:31:6e:b6:6b:f2:3e:fd:fd:5b:ad:
7b:48:bd:c2:e0:1d:9e:3d:26:f5:9d:18:04:4d:10:
3a:cb:f9:78:5c:c8:f7:f9:9b:fc:9a:62:2a:4e:8b:
69:49:9b:bb:79:64:7c:f6:43:6e:91:84:cd:22:c5:
ee:a7:20:94:fe:ee:b3:cf:71:d5:59:5b:8f:e6:c2:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:3B:73:3B:82:04:EB:6D:FF:BE:B6:7C:9D:1B:1B:BD:2F:67:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6590E79A7E9E11F08730A7BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/18
Signature Algorithm: sha256WithRSAEncryption
15:58:19:f8:26:ae:72:5e:ae:f7:00:3a:0d:ca:ce:22:5a:2f:
a2:62:ab:47:43:ff:97:d8:78:9c:7f:fe:e3:dc:53:7d:85:81:
8d:97:6f:8d:14:ae:63:e4:73:57:6f:ed:78:42:db:af:56:19:
a2:80:f1:ec:4c:af:cc:5d:a1:83:72:a7:9a:00:d7:0d:f9:b5:
f4:62:6a:02:74:15:66:a7:97:1a:5c:46:07:81:0e:af:d9:f3:
ed:7e:80:ab:1a:08:35:5c:8c:d6:18:b1:db:65:1a:7f:bd:ba:
4a:8a:f1:86:96:55:24:83:93:6d:f0:6f:e7:e9:e9:43:05:4e:
7d:ca:3f:6d:d6:4e:b3:13:b6:03:5d:d5:73:85:58:bd:12:20:
a3:e2:dd:fa:1e:e0:0a:09:db:64:0a:4b:e6:e9:c5:62:1f:f7:
62:0f:9d:37:26:a7:86:ea:25:92:57:49:aa:d7:ef:fa:eb:fb:
20:15:cb:28:08:27:ca:a7:64:b1:fb:98:b9:db:da:c0:b7:f5:
66:fd:c3:f1:42:ba:21:4c:82:84:b2:3c:a2:22:9e:c7:d2:95:
bc:b0:07:1f:af:7b:de:76:c5:e1:1d:8a:ae:7c:ae:19:96:0c:
b2:52:02:65:ff:d4:fc:e3:b0:56:b4:58:01:c0:99:dd:fa:98:
29:0c:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:07 2025 by rpki-client