Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909DA0127C1F11F0961329E9DAE4EC9C.roa
File: 909DA0127C1F11F0961329E9DAE4EC9C.roa (raw, json)
Hash identifier: EgQtfruncEFi2XO8LO7ZN6/7K3uvqnTq3UM9ot12wmI=
Subject key identifier: 81:EA:D6:DA:FD:C5:1D:DF:42:DE:C1:C9:1D:A5:91:45:D8:04:06:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019211
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909DA0127C1F11F0961329E9DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:39:06 +0000
ROA not before: Mon 18 Aug 2025 10:39:02 +0000
ROA not after: Thu 25 Sep 2025 10:39:02 +0000
asID: 57043
IP address blocks: 154.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102929 (0x19211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 10:39:02 2025 GMT
Not After : Sep 25 10:39:02 2025 GMT
Subject: CN=68a302ca-4c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:6c:62:75:da:83:8e:0d:d9:8f:e5:96:a8:
13:bd:be:52:d7:f7:00:05:c5:23:bf:4f:2b:c8:f5:
f5:62:f1:b5:79:68:1a:86:de:ec:a0:04:29:71:c5:
ab:0c:b4:2c:ef:67:37:6d:b7:47:5c:23:43:64:34:
49:91:6a:6b:62:01:83:94:5e:8f:b3:c9:20:ab:e1:
a0:8a:d7:aa:30:16:de:c1:10:8f:13:9d:49:1c:31:
d6:6e:17:ed:d5:0b:6c:d1:e0:d8:99:ab:55:90:b6:
6b:87:6f:18:1e:5f:e7:9e:14:71:46:17:34:f1:cf:
d1:d3:06:4e:4e:00:99:5e:ef:03:62:99:82:a7:86:
7c:d3:0b:46:22:c6:c4:94:89:47:29:99:da:00:03:
bf:d4:29:c8:4b:87:f2:fd:f1:13:ef:3d:db:73:e8:
4e:fc:ad:61:1b:63:7e:13:58:14:6a:2a:f9:6b:73:
34:80:db:ef:f7:ed:45:9b:88:7c:f8:79:8f:85:e4:
30:6a:2f:5a:be:35:e5:4d:8a:93:16:0d:91:80:2c:
aa:65:c2:0b:eb:d2:46:4f:9a:58:3a:70:73:8c:92:
02:18:85:1d:b6:3c:ba:7e:de:43:53:fb:10:43:fb:
14:87:7a:81:26:58:62:10:47:6d:58:cf:ca:b2:82:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:D6:DA:FD:C5:1D:DF:42:DE:C1:C9:1D:A5:91:45:D8:04:06:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909DA0127C1F11F0961329E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3e:81:d4:19:97:45:3e:d9:20:2f:52:77:aa:cc:12:08:2f:
f6:23:0a:15:04:83:69:1b:33:e0:b9:4a:b7:d1:84:0d:da:45:
db:44:60:88:9a:bb:1b:41:e0:9d:04:36:49:bf:4d:5b:0d:82:
1d:40:46:8a:14:d4:98:f1:c0:8b:a7:4e:78:26:1a:11:6f:c1:
fb:09:8c:c6:aa:cc:14:22:6f:0c:c0:2a:68:00:7f:b7:31:92:
65:90:2e:c9:31:af:ca:ed:49:9e:72:38:54:98:dc:31:53:df:
60:f4:90:de:7c:b1:32:35:08:b2:0c:52:df:8d:04:2d:1f:43:
f3:20:8c:7e:dd:db:e9:70:28:27:55:3f:a1:b3:97:56:5a:65:
ad:25:ba:c2:c2:b5:8f:08:a0:09:85:59:ed:8f:c2:d0:8d:1b:
95:61:21:7d:35:80:3f:8e:ad:9a:f5:6b:c2:28:86:c5:5e:50:
11:56:80:71:b6:6e:98:c2:45:81:e4:47:f9:cd:21:16:f8:f9:
c5:c9:67:8e:05:32:52:e8:ea:97:1e:3f:45:0f:c1:5b:39:8d:
ae:9f:b4:29:df:e2:84:54:fd:39:f4:d1:6b:84:0d:13:65:fc:
b3:41:59:06:55:ad:c6:17:b9:0d:59:9a:6a:ef:44:78:08:d4:
ed:28:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:17 2025 by rpki-client