Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F93D1279A611F0A7F050CADAE4EC9C.roa
File: A4F93D1279A611F0A7F050CADAE4EC9C.roa (raw, json)
Hash identifier: vk9C8nM5O/OlVEUIQYY07W1XmzoAj/6dwQyT2Mxg1Ww=
Subject key identifier: 95:48:74:8A:B4:BE:59:60:54:A3:B2:D2:87:8B:B4:42:FF:0D:51:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F93D1279A611F0A7F050CADAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:08:29 +0000
ROA not before: Fri 15 Aug 2025 07:08:24 +0000
ROA not after: Sat 08 Nov 2025 07:08:24 +0000
asID: 9294
IP address blocks: 154.92.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102837 (0x191b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 07:08:24 2025 GMT
Not After : Nov 8 07:08:24 2025 GMT
Subject: CN=689edced-e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:9c:43:d0:db:1a:6a:57:b8:ec:55:1c:9c:
61:c3:4d:d7:db:7d:f3:58:51:1a:30:6d:d9:8f:10:
51:51:96:06:7e:80:83:87:d0:c5:c0:01:e1:89:e7:
f8:dc:9a:97:63:1b:e0:98:73:2b:13:fa:7a:0a:d3:
b4:63:b6:89:0e:a7:c0:66:ad:73:5a:e7:33:bd:94:
38:6f:d7:b2:f2:9d:22:e2:8a:2b:ed:55:b2:f9:e3:
cd:3a:ee:9c:c3:7c:c6:04:91:fc:9f:59:a1:06:e7:
8f:ea:89:c0:bc:e3:1f:f3:72:87:c0:7f:f8:ca:6a:
d8:42:ab:d8:8a:b5:43:76:1f:24:3a:12:ed:0b:2b:
92:d7:f8:dc:d9:c2:7d:16:e5:e6:f0:d7:57:c4:ba:
10:6e:ad:e0:e7:01:c6:8c:70:4a:45:76:c3:15:de:
0c:d3:9c:8d:91:c7:83:d5:5a:15:db:2d:a6:ae:31:
c0:db:fe:5a:ca:21:51:01:6b:78:d9:c1:0f:d4:69:
0b:df:86:5e:a1:d9:0c:ce:71:f3:28:7e:14:86:b4:
1b:00:04:c0:a0:11:25:75:ed:1b:9a:c0:53:b9:2d:
7a:6b:e4:5c:57:50:f0:8e:9c:01:4a:2a:ea:a8:61:
d4:71:06:f3:c6:6f:13:7c:b4:59:b4:2e:16:0e:e4:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:74:8A:B4:BE:59:60:54:A3:B2:D2:87:8B:B4:42:FF:0D:51:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F93D1279A611F0A7F050CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:48:11:58:31:29:d5:ac:82:77:93:5e:9d:fe:c7:ec:13:b0:
c5:86:a1:f4:bc:5a:09:fc:1c:ff:73:67:73:03:83:6d:0b:ad:
84:98:ba:50:76:91:0c:81:e7:ef:c8:86:c6:7d:29:93:03:8e:
b9:c1:d3:c6:6b:55:56:6c:4d:c0:8b:b5:22:54:04:6b:2d:d1:
08:f8:cb:07:92:9c:ed:46:3b:af:3a:9c:e2:cf:3d:31:59:10:
0b:df:cc:d1:bf:02:29:0c:61:8f:10:49:5c:2f:d1:f3:8b:6b:
06:e7:c5:20:1e:d9:80:2d:ca:6f:de:78:53:e6:74:54:55:42:
c7:dd:e6:1f:c6:bb:3e:1e:e8:56:1e:dc:bc:52:85:ea:70:c8:
51:53:2f:e1:94:32:46:bb:b7:8c:38:18:ac:82:24:d6:e6:60:
2e:fe:55:7b:67:db:8b:89:88:38:3a:28:2f:53:d4:0a:d1:11:
28:f0:82:9b:58:38:0a:07:38:3d:ec:5f:37:b5:7d:7e:84:66:
4d:58:4e:70:7f:7e:4e:ab:f7:74:e4:39:78:a3:c8:5b:79:f3:
e0:c4:e7:28:84:da:38:9d:a3:a7:23:b5:ec:cc:31:ae:b8:eb:
7f:db:dd:88:20:da:d3:1a:70:87:5e:69:c2:b1:64:19:68:8d:
2c:d9:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:38 2025 by rpki-client