Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B23C4C7F5C11F08384129FDAE4EC9C.roa
File: 74B23C4C7F5C11F08384129FDAE4EC9C.roa (raw, json)
Hash identifier: Rk9QfOiexyA2aDpc2dR6M0Q6xbt5jYM97e5iuOMKLYY=
Subject key identifier: 45:6B:4E:C9:9D:59:17:02:4E:B2:F7:51:7B:85:E2:2D:06:AD:F8:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0194B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B23C4C7F5C11F08384129FDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 13:32:32 +0000
ROA not before: Fri 22 Aug 2025 13:32:26 +0000
ROA not after: Thu 28 Aug 2025 13:32:26 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103606 (0x194b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 13:32:26 2025 GMT
Not After : Aug 28 13:32:26 2025 GMT
Subject: CN=68a87170-3a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:db:ec:ea:b4:bc:37:42:fa:42:75:92:cd:
7c:f8:5f:7e:fa:e9:5e:e6:00:d1:3a:35:53:b7:f2:
0a:84:1b:cc:2a:46:43:02:62:49:8d:c0:ca:fb:0c:
34:0a:70:6d:95:83:2c:32:cb:4f:b7:5c:8c:9e:7d:
cc:e7:80:3c:59:06:4d:5d:89:2d:93:2e:b6:60:a0:
fe:26:ba:a6:d5:e6:cf:3e:1c:aa:95:f2:0f:84:45:
b1:76:db:da:86:5e:87:c4:06:28:1e:0f:c2:86:49:
e1:3d:5d:c8:c3:56:f8:81:51:05:ec:0f:cd:e2:60:
55:8a:ef:7d:bf:67:ab:8a:9d:9c:ee:ab:75:38:2d:
39:46:ed:b7:35:0b:a8:af:bb:5c:0c:80:85:57:cb:
51:71:de:ca:64:7f:1a:d5:dd:8c:8e:e5:fd:38:2a:
57:a8:e6:32:37:3c:7d:11:25:64:9c:4b:0c:fe:8e:
1a:3b:a2:d0:29:c1:73:84:a4:02:21:56:8a:ff:b6:
1f:ac:8f:ff:d9:b1:0b:f2:26:28:c0:71:0e:2a:52:
62:3f:5e:73:2a:16:82:6a:9d:53:2c:11:8d:47:b7:
d5:1c:45:d1:1b:72:a6:63:98:23:35:34:50:7d:c4:
3e:1a:5f:5a:b3:e1:b8:c2:96:a4:50:79:a6:e9:1b:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:4E:C9:9D:59:17:02:4E:B2:F7:51:7B:85:E2:2D:06:AD:F8:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B23C4C7F5C11F08384129FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.55.255
Signature Algorithm: sha256WithRSAEncryption
c8:68:f0:b0:ec:39:d2:64:91:57:e5:7f:6e:4d:26:11:f1:52:
8f:90:7c:cb:af:63:25:25:51:27:05:35:2f:2a:08:18:d9:2f:
45:57:53:6b:57:5f:e6:7c:a0:38:c6:46:61:17:04:ca:fe:88:
9a:d4:e4:da:f8:fb:f4:16:fb:bf:e1:7a:7a:77:17:9a:ac:7e:
7c:66:55:a7:71:db:53:9a:08:fb:86:4f:5c:ba:db:32:0b:7d:
bc:8e:c2:ee:87:7a:00:61:f9:6a:63:d4:8d:27:3a:63:dd:88:
ef:03:fa:cc:aa:d3:8f:dc:4a:11:c5:70:a8:5e:d5:da:24:fc:
bf:b1:e0:b2:47:73:8d:57:32:5e:18:cb:41:4a:e7:81:ef:21:
64:17:df:32:59:60:3e:bf:27:d8:ed:86:54:14:50:47:62:da:
97:df:d3:87:39:2d:6a:34:cb:6b:4b:ae:2f:8c:81:98:50:d0:
a6:d5:f3:35:71:c0:f5:3c:71:65:9c:19:ce:bb:ea:5d:9c:3c:
cc:7f:b3:45:42:c4:3f:9b:3f:ea:67:d1:e6:5a:6c:2e:50:44:
21:d8:9d:71:e8:b6:2c:7f:3a:b1:10:6d:55:48:e4:e3:67:1b:
12:ef:be:12:fb:d3:b2:1b:d7:f8:b5:a5:0d:29:bb:58:24:77:
12:a0:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:36 2025 by rpki-client