Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749DAD67D7111F08C20877EDAE4EC9C.roa
File: 9749DAD67D7111F08C20877EDAE4EC9C.roa (raw, json)
Hash identifier: EKgW3ua4PiFDmTy9Xg0isfBl0u4rPMXd+S4KjZOUv5g=
Subject key identifier: 33:B1:55:E6:7B:95:73:AF:B8:0B:23:59:82:53:9B:02:30:E5:A5:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019243
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749DAD67D7111F08C20877EDAE4EC9C.roa
Signing time: Wed 20 Aug 2025 02:58:47 +0000
ROA not before: Wed 20 Aug 2025 02:58:42 +0000
ROA not after: Sun 04 Jan 2026 02:58:42 +0000
asID: 139057
IP address blocks: 154.85.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102979 (0x19243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 02:58:42 2025 GMT
Not After : Jan 4 02:58:42 2026 GMT
Subject: CN=68a539e7-a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:25:79:74:41:d4:c6:aa:e7:0e:89:03:6b:
b1:d7:1e:01:ec:74:1a:19:42:b7:24:6c:45:56:bc:
b0:91:9a:16:17:7c:01:57:ea:45:dc:e4:ba:40:94:
4e:f9:7b:0c:cd:9d:cc:cb:ae:5c:55:8b:23:55:c0:
0d:0c:6c:33:9b:f8:bf:f0:08:42:12:ff:4c:58:0d:
aa:5a:8a:d5:46:dd:a5:3b:83:36:82:22:75:5d:42:
39:a1:a8:67:27:85:2e:ef:1f:9a:3f:ae:36:ad:39:
06:78:e9:20:b2:3d:f6:e8:57:63:a6:a1:06:39:18:
d4:72:06:36:22:ef:98:44:06:f5:42:6e:4f:b0:65:
72:7c:0b:a9:48:c4:9e:ed:03:df:73:80:93:81:31:
66:4e:c0:dd:7c:49:f7:f7:04:59:9d:10:b0:4a:d5:
53:21:ea:0f:49:ba:b9:27:50:7d:3f:38:29:ed:52:
fd:fe:66:da:df:d6:e0:4b:8b:e7:d0:47:8d:46:7e:
f1:d0:6d:83:48:b5:cd:f0:ba:84:55:e6:d2:31:bc:
20:7c:de:53:46:f3:21:d3:ac:52:96:c1:c1:0f:7c:
5b:d5:35:07:a4:53:c7:4f:2c:8e:ae:f7:80:7f:83:
ba:e3:2c:82:31:65:0c:1a:a6:0b:eb:10:5d:6f:fc:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:55:E6:7B:95:73:AF:B8:0B:23:59:82:53:9B:02:30:E5:A5:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749DAD67D7111F08C20877EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:89:d5:cf:e9:b5:21:ed:01:b5:99:40:77:a0:27:cb:47:3c:
82:75:5c:ee:37:33:ec:c8:1b:ce:7b:2b:ae:10:87:54:83:53:
48:f0:e0:d5:c6:91:5e:62:41:76:ea:33:35:fd:88:54:b5:dd:
36:db:9c:73:8a:97:c5:9b:cc:b3:5d:65:cc:0d:2d:6e:55:71:
57:8a:64:d8:18:51:bf:78:c0:c3:4f:91:b4:e7:68:56:98:d9:
0e:69:de:af:9f:38:6c:1f:c3:a7:e0:bc:d1:b0:42:37:4c:0b:
42:33:75:bb:30:2c:d3:39:30:08:43:67:91:08:d4:99:1b:03:
f1:e2:36:fb:c7:7b:ec:91:00:d0:a1:0e:7a:6e:8c:35:c4:e6:
30:ce:34:34:a8:4c:ad:f9:bc:fb:d3:ec:9e:6d:ed:7c:37:c1:
b2:cd:fd:c6:55:36:6d:40:10:01:13:b3:f1:57:18:45:46:87:
f0:22:53:0e:bd:23:84:32:fc:41:6d:6a:93:df:d7:e2:f0:82:
50:af:a0:c1:0a:a2:b6:53:3e:c0:0f:a0:99:e4:02:6a:2f:1f:
e9:ac:35:e0:04:3c:50:90:2b:bb:86:1d:61:10:81:0f:85:7a:
ca:a5:2a:75:6e:85:1d:42:99:4d:fa:f1:7e:01:46:9c:29:b5:
be:35:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:07 2025 by rpki-client