Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A47A3C7E8F11F0921C61DDDAE4EC9C.roa
File: 86A47A3C7E8F11F0921C61DDDAE4EC9C.roa (raw, json)
Hash identifier: /+AJUs4ouTRlbveJ1Tt3/Vd2Fsy9rgbZE3Q7ZwXNPcA=
Subject key identifier: 24:08:1E:2D:0D:76:57:88:C1:E1:87:93:A3:7C:8D:47:B5:5D:3B:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019361
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A47A3C7E8F11F0921C61DDDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:05:36 +0000
ROA not before: Thu 21 Aug 2025 13:05:31 +0000
ROA not after: Sat 27 Sep 2025 13:05:31 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103265 (0x19361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 13:05:31 2025 GMT
Not After : Sep 27 13:05:31 2025 GMT
Subject: CN=68a719a0-65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:4f:8a:e3:86:7b:8c:4c:ab:e4:22:84:81:
c4:9d:7f:08:1b:8e:df:39:14:a2:c7:5d:18:c1:4c:
88:db:66:93:67:b0:e0:2d:9b:f9:75:f5:10:24:8d:
9d:79:35:6e:fe:de:e5:4a:5f:9e:bf:34:7a:82:46:
99:d9:ab:24:67:1b:11:5b:27:6f:2f:a2:31:d7:00:
a2:bd:46:4c:db:35:80:51:7c:1b:c3:5d:1d:d3:2a:
df:6f:d2:f1:0e:a7:9c:82:88:64:c2:ad:39:c1:92:
1d:07:3c:a3:89:3a:ef:70:da:a7:66:40:12:b1:10:
f4:a2:95:d2:18:03:fa:7a:c8:5c:e4:8b:dd:16:08:
5c:8b:57:6f:ba:d4:bb:32:fb:41:b3:e6:e0:90:7a:
28:01:04:4c:67:a7:6c:be:bc:b2:70:58:f5:48:03:
77:6c:9c:1b:53:1b:0e:71:ce:e5:c8:f7:b5:6b:85:
18:06:b5:2b:ef:b8:df:28:db:b9:ef:82:a2:39:b8:
d8:b8:04:54:f4:f2:7e:61:85:74:5a:e8:0c:2f:1f:
a2:9e:bd:cb:aa:2d:7a:f6:1e:03:5f:8e:fb:e8:92:
67:93:94:14:11:ab:66:6c:c9:09:de:24:5d:95:f7:
64:05:d1:66:4d:a7:5e:7d:7c:8d:de:3e:6d:bc:8f:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:1E:2D:0D:76:57:88:C1:E1:87:93:A3:7C:8D:47:B5:5D:3B:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A47A3C7E8F11F0921C61DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
bd:51:2f:30:e0:68:03:56:ba:20:e3:0f:f0:7c:13:27:a9:9f:
cf:02:e2:09:31:a2:31:d5:ac:c3:3d:aa:50:82:e0:2f:ed:9b:
4c:8f:07:1f:da:64:17:f7:61:17:9e:52:a0:9f:86:ae:2e:dc:
2d:ca:6d:19:b5:db:7e:ba:b3:4e:2f:4d:c5:44:1f:dc:de:9c:
e1:33:d0:ac:99:ea:19:95:8f:06:c1:68:46:45:77:23:22:64:
3d:a5:72:46:66:32:54:c2:72:3c:4d:fa:a8:34:52:b3:4d:bc:
ff:64:1f:1d:f1:e6:4e:85:57:d7:f6:00:70:6f:2c:cd:5b:af:
36:6a:83:dc:5e:5e:ed:0b:f3:95:ad:88:a7:a4:98:49:02:e1:
66:8b:f7:a5:b1:4b:75:37:94:50:90:1d:63:57:9d:48:6e:5c:
86:43:f5:f0:17:7b:cf:aa:3d:ff:a0:5a:ce:fd:a3:b8:04:5a:
79:ca:b7:85:b7:2f:e2:ab:d3:bd:eb:95:0f:95:46:8e:e9:ab:
b0:e9:32:cc:ed:a2:a9:e9:2f:6f:a5:cb:c8:8d:f4:66:5d:4d:
8d:1a:71:43:10:67:95:7c:50:70:8e:2c:e0:56:5e:7e:75:b8:
9c:55:d2:b2:11:59:07:3d:99:80:e3:3f:6b:6f:63:99:90:09:
24:0a:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:40 2025 by rpki-client