Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/681F208679B111F081452491DAE4EC9C.roa
File: 681F208679B111F081452491DAE4EC9C.roa (raw, json)
Hash identifier: zkpVnbbsUJPWqkCPu0xIRphQr1O1l9GpWZhZoD8/0No=
Subject key identifier: D5:42:3C:ED:95:C6:41:38:27:E6:5C:5B:13:AC:9B:16:47:0B:11:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/681F208679B111F081452491DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:25:32 +0000
ROA not before: Fri 15 Aug 2025 08:25:27 +0000
ROA not after: Wed 17 Sep 2025 08:25:27 +0000
asID: 203020
IP address blocks: 154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102854 (0x191c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 08:25:27 2025 GMT
Not After : Sep 17 08:25:27 2025 GMT
Subject: CN=689eeefb-b973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:de:3f:28:ab:b5:78:60:75:cb:67:1f:a4:
b8:8f:d3:55:d0:e1:96:1c:a1:43:8f:75:ac:40:2f:
73:7b:b4:e0:a6:3f:89:0a:dd:db:4f:4d:eb:a8:c1:
50:a3:14:5c:c9:c2:0d:a1:25:70:9e:5a:9b:5c:a7:
db:92:fc:ea:fb:95:61:11:9e:12:89:c2:f0:43:ed:
e2:67:90:e0:45:9d:0e:da:de:81:97:9c:80:89:26:
81:d7:cd:51:31:ca:a8:97:18:aa:fb:80:4f:e9:ef:
dd:94:75:2a:93:18:71:d0:a9:10:49:00:3e:a6:b2:
0c:e0:ba:ea:78:a7:ee:02:e4:c7:c6:82:5b:c9:d5:
1b:a8:8c:9c:56:81:b4:96:de:4a:47:22:98:8c:4e:
0a:bd:f5:a5:7f:34:ef:87:3d:a9:8f:68:d5:93:88:
96:57:cb:23:0b:b4:ec:31:98:c5:3e:7c:65:98:b9:
9b:f9:9c:9c:a9:cb:70:28:71:1a:3a:8f:79:54:48:
72:19:b5:f5:fb:af:cb:3d:3c:26:96:a1:37:2e:31:
01:7a:32:26:3b:70:69:db:28:75:03:e1:ab:71:21:
ed:5c:4e:67:a5:aa:27:be:f2:a4:21:14:cd:e8:6a:
63:4c:6f:74:ab:b5:6d:6a:ad:a6:f6:8b:cf:99:f5:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:3C:ED:95:C6:41:38:27:E6:5C:5B:13:AC:9B:16:47:0B:11:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/681F208679B111F081452491DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:b3:33:e3:16:94:6a:88:de:58:02:62:62:fe:c9:3b:ca:f6:
85:48:78:a2:5c:33:d4:b5:28:e3:a2:28:e5:45:71:04:32:3f:
ab:d0:2e:d1:6d:76:89:54:e2:fb:79:61:8c:c4:6c:19:a7:5d:
4b:ce:43:21:7f:9b:6b:f7:fa:1c:24:34:46:f3:bb:1c:65:22:
11:bd:44:25:46:22:ac:06:f2:d5:c2:bb:50:62:e5:16:13:3e:
e1:36:72:48:b0:2a:78:cc:5a:08:27:43:2b:f0:a7:16:bb:20:
6e:43:cd:69:54:f8:52:85:7f:c7:d5:f6:7a:46:b7:e5:ba:77:
8a:75:50:5f:62:ed:9d:b5:f1:a2:91:ce:6e:2c:09:91:9e:65:
b5:e2:46:7b:dc:9f:98:cd:7f:d8:ca:55:c4:06:34:3c:27:72:
c2:c5:7f:75:01:51:68:dc:16:6f:e7:57:f8:43:9c:fa:ae:ed:
d1:39:85:4b:e3:52:14:34:b9:2b:8c:2b:95:c8:05:41:50:13:
88:ea:c2:61:2b:df:e0:a9:60:91:a3:bd:87:e1:8f:7e:57:8e:
30:5f:c4:f2:cd:39:52:ad:48:ad:76:bb:d0:34:34:c0:d5:30:
3a:0a:bf:0b:06:d7:b8:79:83:d5:a8:b9:09:a2:20:d5:fb:d9:
a8:c8:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:26 2025 by rpki-client