Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E3F3BC4C5811F0A579EEE1DAE4EC9C.roa
File: A7E3F3BC4C5811F0A579EEE1DAE4EC9C.roa (raw, json)
Hash identifier: oaYhby8eY0uq+zrSnS5bXwQkjBeN0KOIK2mdwCefA8U=
Subject key identifier: 69:88:25:5B:F6:56:AA:6D:49:47:F7:75:EF:B8:F9:67:AC:60:55:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01875B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E3F3BC4C5811F0A579EEE1DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:26:51 +0000
ROA not before: Wed 18 Jun 2025 15:26:46 +0000
ROA not after: Fri 26 Dec 2025 15:26:46 +0000
asID: 49765
IP address blocks: 154.199.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100187 (0x1875b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 15:26:46 2025 GMT
Not After : Dec 26 15:26:46 2025 GMT
Subject: CN=6852dabb-5f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:13:2e:54:1f:b3:4c:7c:ca:88:37:30:5e:
17:cd:94:95:9c:14:49:83:91:f3:f9:c5:39:c5:74:
c7:ed:75:bb:d5:48:42:16:a2:03:21:9f:40:b1:cc:
5e:42:22:ae:d7:57:86:75:34:6a:22:9f:53:54:f0:
86:91:e3:fd:dc:a3:96:76:a1:3d:e7:42:57:6a:d1:
46:c1:a8:5a:8c:bb:19:2e:cb:42:31:47:ad:f1:ca:
b4:07:d5:b8:76:16:0d:a7:f1:84:cc:68:37:09:66:
5a:be:3a:bb:85:51:67:ac:bc:7d:73:43:51:cd:d3:
7e:09:20:23:19:8d:5b:60:86:a9:eb:ec:0e:62:63:
52:2d:2d:6d:ef:75:f0:78:a1:79:2d:02:8a:bd:7b:
12:c7:54:69:0b:35:95:aa:3e:dd:65:e6:a9:a4:d8:
d7:e5:ca:27:4b:c9:04:d6:9d:b1:cf:f4:85:91:a8:
f9:ab:d2:14:14:43:34:2a:0f:23:1a:cd:f4:6e:ea:
2b:88:6b:5f:55:7e:da:02:a7:44:67:98:98:d4:cc:
43:18:15:5d:ae:1a:eb:33:04:b4:69:95:d3:cf:53:
87:21:13:f7:1a:92:e7:6e:8c:7a:07:d4:da:14:2c:
b0:5e:78:4f:64:3a:cd:b4:23:2a:ac:46:49:07:32:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:25:5B:F6:56:AA:6D:49:47:F7:75:EF:B8:F9:67:AC:60:55:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E3F3BC4C5811F0A579EEE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:8f:43:98:09:a0:76:8b:e8:42:7a:b6:a5:53:7b:6c:af:66:
23:c1:0b:42:8c:1f:33:f3:4e:b1:17:85:1f:39:b4:ba:af:53:
9b:9e:7b:e1:4e:c7:bd:b2:f4:7a:d8:47:58:dc:4e:0a:a5:94:
55:85:ca:9a:27:a2:c9:17:3b:02:90:b6:05:23:ab:f9:bb:2f:
be:8d:33:1b:e8:38:74:ba:de:ab:64:da:a3:aa:80:eb:5d:60:
77:96:bb:81:85:4c:78:75:e9:ec:33:91:28:02:f1:05:fb:db:
a6:9c:4c:97:be:6d:42:cd:0b:d9:49:18:1e:1b:e4:10:fa:23:
6c:1d:53:94:dd:b7:8e:69:4a:8d:6c:1f:3a:ab:1e:7c:7d:fe:
9f:b2:d6:7b:a6:06:0b:38:fd:d2:75:67:4e:62:63:53:be:00:
42:f0:d4:7a:6b:c0:30:13:83:6f:de:a5:d4:96:a2:00:c3:36:
77:7f:04:fb:69:b5:2d:dc:19:f2:9c:c3:53:07:a4:bc:c0:0d:
cd:56:ca:2e:e2:2a:db:b4:85:97:b0:96:18:48:15:6d:fb:b5:
c5:82:ff:22:94:5b:cf:60:e2:d1:dd:32:29:05:bb:19:71:c4:
ca:fd:e5:a1:db:5f:12:c3:74:a5:87:4c:a4:50:1d:ea:a7:f8:
c0:66:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:34 2025 by rpki-client