Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5514FA802711F091A2EFD3DAE4EC9C.roa
File: 7F5514FA802711F091A2EFD3DAE4EC9C.roa (raw, json)
Hash identifier: KtFNZZtPzByn5YwNU5UUZDHZylgWdFsS2lF3xU7xDx0=
Subject key identifier: 6C:43:CB:F7:D7:E3:08:4E:93:CE:43:D5:C2:D5:3C:BB:E9:5A:C3:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5514FA802711F091A2EFD3DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:45:58 +0000
ROA not before: Sat 23 Aug 2025 13:45:53 +0000
ROA not after: Tue 30 Sep 2025 13:45:53 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Aug 2025 00:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103879 (0x195c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 13:45:53 2025 GMT
Not After : Sep 30 13:45:53 2025 GMT
Subject: CN=68a9c616-3f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:bc:90:99:94:4f:ce:bf:74:41:10:a1:00:
68:c8:d5:02:44:ca:34:f6:6d:d8:c4:bd:9c:90:3f:
9c:7d:a7:fa:0d:83:dc:3c:71:ed:5d:13:c2:16:08:
c4:f2:82:a2:6a:ee:67:6c:1f:96:85:21:3f:90:6c:
b0:5e:d6:ae:02:4f:38:ea:06:a2:4a:20:69:43:ef:
ad:90:0f:cc:94:04:7f:b8:2a:07:95:fa:e2:d7:e6:
3a:e2:2d:dd:61:d3:d3:9e:24:88:26:27:43:58:39:
d5:e8:b8:36:4a:dd:54:be:cf:ab:c7:f3:ec:91:9f:
69:d9:e0:ac:7d:dd:10:fd:e5:5b:d3:2d:b6:ab:23:
ba:4a:f7:a6:fb:36:4d:24:47:a2:28:04:40:c1:8c:
cf:2f:5f:09:68:46:e9:06:2b:48:02:6a:6f:5d:1a:
ce:d5:f9:b9:7e:3f:86:fe:6d:32:29:2c:8d:f5:51:
76:0d:51:9c:71:a5:14:74:99:32:9a:3e:39:c1:f1:
9f:93:37:5d:2d:a6:b9:5a:12:54:a3:9c:60:73:49:
4e:93:8b:cb:ab:3f:6e:e2:c9:62:1e:73:2d:98:e6:
ae:82:e5:9f:bf:77:43:12:8c:c8:99:a3:1d:e8:03:
db:5d:d9:f7:65:15:ea:f4:8f:f1:b5:30:4c:29:10:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:CB:F7:D7:E3:08:4E:93:CE:43:D5:C2:D5:3C:BB:E9:5A:C3:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5514FA802711F091A2EFD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
27:b1:88:d8:81:0a:a6:28:8c:8b:41:8e:14:25:54:37:c5:18:
42:2d:1a:c5:73:f1:4d:a3:72:3e:2c:89:d3:5f:26:26:58:b2:
3d:1f:65:3a:f7:af:60:d4:b1:a5:43:c6:05:60:ef:bd:ed:bf:
a2:fb:31:05:b0:45:36:f4:dd:87:9c:bd:8d:0b:28:09:53:f5:
52:66:87:33:c3:65:80:3b:7e:91:34:5d:09:d9:23:2e:92:84:
f9:25:b3:d8:1b:8a:af:41:4c:18:b6:62:d1:3c:37:bd:25:7b:
d6:f6:3d:e3:c8:e5:2f:d0:c6:f2:b0:21:19:d3:28:55:bf:f7:
4e:bd:32:da:19:2d:52:09:07:c4:91:b6:63:78:31:bd:f3:31:
52:51:fd:53:08:24:1a:f1:a4:8c:ce:c2:ed:eb:1a:e6:0d:4a:
c2:fd:bb:8d:34:87:06:a2:ab:71:f5:29:4c:86:4a:66:5e:ea:
98:ef:e3:c1:d8:b3:77:82:c2:0e:d3:8d:92:f8:7a:64:ee:13:
11:94:9e:42:85:df:68:1e:83:4a:e8:69:88:53:bc:2f:7c:21:
b1:7b:8d:e6:df:ec:d3:80:18:93:cb:4d:8c:7e:f4:07:d3:ad:
9e:d9:66:c9:8a:28:1d:44:a4:46:c6:5c:46:fe:4d:96:38:60:
43:6c:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:00:29 2025 by rpki-client