Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC81058079B311F0935D519EDAE4EC9C.roa
File: AC81058079B311F0935D519EDAE4EC9C.roa (raw, json)
Hash identifier: F8ZrapZUMeyWOaaMET1qB0FI/T0usuurflyfR+cpOLI=
Subject key identifier: 5B:28:23:10:AD:B0:F8:E1:02:CC:D2:1C:80:29:F0:8D:8C:52:A3:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC81058079B311F0935D519EDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:41:45 +0000
ROA not before: Fri 15 Aug 2025 08:41:40 +0000
ROA not after: Sat 15 Nov 2025 08:41:40 +0000
asID: 9294
IP address blocks: 154.92.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102862 (0x191ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 08:41:40 2025 GMT
Not After : Nov 15 08:41:40 2025 GMT
Subject: CN=689ef2c9-eb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:4d:76:18:21:75:cb:81:a1:94:1b:27:59:
73:38:ef:ad:ee:a6:17:f0:f3:37:07:ad:5c:95:26:
1d:16:fd:36:a9:6d:cc:7d:c9:dd:9c:e4:60:df:7d:
1e:1f:c9:95:6e:fe:69:a2:7b:4f:04:3e:74:2a:4e:
18:b0:13:8c:00:42:2e:bc:15:80:85:d6:0b:07:17:
0a:39:80:a2:64:df:7e:16:04:91:70:ff:e1:41:6f:
13:44:2b:d1:9f:16:03:ba:dc:40:7a:2c:e2:70:e8:
3d:d0:cb:40:4c:b5:f5:64:11:c4:df:65:69:16:4f:
89:e8:e0:a1:e8:53:15:83:75:b2:d5:29:8c:1c:5a:
32:8a:30:bc:3c:9c:a6:f8:67:d5:66:af:64:1a:d7:
34:14:5d:ed:0e:99:f6:72:7a:4c:06:7d:01:0e:eb:
f1:82:de:4b:75:69:f7:15:74:88:5d:ba:bc:26:f1:
c3:d6:33:f3:59:c8:35:25:16:57:4a:39:6b:37:12:
4f:93:1a:ae:98:e3:82:6a:7f:4f:27:ea:7a:aa:c5:
08:37:3e:c2:91:f7:a0:e1:2e:22:0c:50:23:18:8c:
8f:5a:f4:a1:a5:13:91:43:17:6d:58:c2:2b:ac:1a:
57:00:ac:da:a6:29:7c:d3:01:83:0c:0c:25:0b:67:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:23:10:AD:B0:F8:E1:02:CC:D2:1C:80:29:F0:8D:8C:52:A3:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC81058079B311F0935D519EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:75:df:e9:9d:d4:93:96:69:13:b6:65:cd:b3:13:f3:c5:5b:
9c:91:24:42:b7:7d:32:f3:22:0f:49:b5:55:15:11:59:f0:ba:
16:b0:32:4e:04:8e:75:4a:1d:dc:76:8e:58:49:76:f9:48:a1:
99:de:b5:c9:ad:1c:16:22:50:8a:84:e3:67:30:f5:d5:26:ec:
dc:c1:0d:af:9d:61:82:20:cb:4d:94:ea:cb:4f:4b:ba:58:ae:
e2:c6:04:f8:81:93:b4:97:56:dd:7d:e1:67:64:d7:e8:7c:67:
aa:d6:ea:50:b0:32:72:58:57:1a:bf:6f:59:40:ea:7a:1b:ba:
13:e4:62:84:e1:f4:dd:50:70:ea:30:ee:dd:dc:07:f4:4b:d6:
79:78:1c:8a:e3:1d:82:3b:f3:91:9f:7e:39:c8:f5:23:c0:10:
94:0e:c2:62:0c:92:e5:52:94:87:7f:84:b2:89:cb:e8:37:44:
ca:a6:51:84:f4:b7:a7:59:d2:c1:f7:f7:8b:98:04:76:2c:54:
f8:b9:bc:ed:98:ec:c2:2b:18:0b:12:0b:77:19:dc:7d:fa:6f:
29:ab:ad:d0:a3:5d:89:fd:92:5d:d5:cc:0b:8b:58:9a:bc:11:
fb:6f:2b:d8:19:da:7b:e9:cd:99:dc:be:89:ce:09:a3:c9:9e:
bb:ce:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:54 2025 by rpki-client