Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BC844647E9C11F098433AB3DAE4EC9C.roa
File: 8BC844647E9C11F098433AB3DAE4EC9C.roa (raw, json)
Hash identifier: V036HuRNtYGfMBL1uxxgrZ48Be/0IXfoGg06Gog1KM8=
Subject key identifier: 39:75:E5:28:25:7C:75:16:3C:F9:AB:0F:4A:65:F8:68:B0:F7:93:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01939D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BC844647E9C11F098433AB3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:38:48 +0000
ROA not before: Thu 21 Aug 2025 14:38:43 +0000
ROA not after: Wed 21 Aug 2030 14:38:43 +0000
asID: 17561
IP address blocks: 154.92.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103325 (0x1939d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:38:43 2025 GMT
Not After : Aug 21 14:38:43 2030 GMT
Subject: CN=68a72f78-14e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:c3:5b:e9:a9:8b:5d:5d:46:29:b0:19:0e:
5d:d4:fd:d1:15:13:c3:67:a4:f9:f8:7d:42:3e:53:
c9:2a:d7:1a:5b:ed:9b:81:d1:79:5d:44:a3:ed:a3:
cc:2f:e8:a7:01:3e:9f:a5:fd:06:eb:83:c2:d2:6e:
bc:16:23:8c:16:53:7b:19:e8:0e:76:64:b3:9d:95:
7f:a9:06:d6:b5:53:0f:98:7a:a0:a5:6f:36:41:f6:
87:62:54:98:0e:88:d9:d8:9c:a1:76:bc:75:1e:10:
b1:62:08:d2:c1:c3:f8:69:df:7c:18:31:7a:6e:d6:
f2:d5:57:3c:09:19:3f:e0:ea:74:ff:86:f5:ea:b8:
10:6a:02:46:ef:54:ff:32:1e:e9:e7:bf:dc:70:cd:
c1:2b:78:de:34:d1:45:0a:3d:d0:e0:44:d9:2a:c3:
48:77:a9:42:d0:e9:ad:c7:37:9a:43:55:21:1a:f6:
93:4d:b4:65:2f:66:e6:03:8b:ab:d0:b7:4a:5b:79:
f2:48:fa:e2:42:0b:66:df:fe:4c:34:3c:7c:6d:25:
7b:0b:e5:a1:03:93:c9:37:a8:a7:61:b2:d3:ed:67:
07:27:a2:ed:cd:b6:06:fe:cb:73:cf:6e:3a:d2:c2:
59:76:6d:2d:e4:fb:02:c2:a4:3b:8b:75:d1:2f:10:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:E5:28:25:7C:75:16:3C:F9:AB:0F:4A:65:F8:68:B0:F7:93:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BC844647E9C11F098433AB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:9a:96:11:2c:fa:68:7e:49:05:93:58:a6:e9:4b:13:6b:3e:
fc:00:fb:fa:e1:46:96:d4:36:57:9a:1c:c5:1b:61:f3:90:0e:
d0:0d:b0:ff:a5:b4:b3:88:e6:02:86:25:0a:0a:9d:02:9d:5d:
ee:51:9f:a2:aa:49:a1:b0:b5:20:52:ba:cf:77:0b:45:1d:da:
76:4f:5a:2b:22:37:25:af:71:f9:28:be:87:a9:5c:5b:79:9b:
e1:97:ee:e3:d3:5e:a1:14:32:39:bc:2a:e2:01:cb:60:2b:f5:
35:27:fb:61:92:5c:70:fb:24:9a:3c:a6:c2:93:43:7c:0d:44:
b6:a3:a4:a0:b7:61:34:45:ad:df:a4:9e:3a:51:07:53:9e:d4:
51:ea:f6:f0:69:5f:cd:5e:12:c8:df:5e:7a:9c:4b:bc:29:40:
b5:39:e7:2e:86:03:8f:dc:7a:79:6c:f8:57:96:0b:6d:5b:01:
0f:47:dd:c7:d0:67:e6:72:3d:71:26:07:23:40:0d:86:03:f3:
22:8c:07:f7:23:eb:61:72:2d:a2:e9:3e:e2:f4:26:5b:ce:9c:
84:12:b3:3f:ad:1a:05:04:bf:c5:a1:90:a6:27:d2:2c:86:65:
8a:20:9c:71:6a:65:11:35:4f:66:2d:cd:99:70:b6:41:6a:9d:
73:71:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:57 2025 by rpki-client