Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9CDFFC07E8811F0B2B277AFDAE4EC9C.roa
File: B9CDFFC07E8811F0B2B277AFDAE4EC9C.roa (raw, json)
Hash identifier: 54yTQ0y/KMmFwzWJUBL3bOFQNEPIb9cC3VeCr/Ky5kM=
Subject key identifier: 21:AD:5C:21:B6:07:B8:4A:AD:48:27:DD:AE:9D:56:A4:9E:81:1E:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019348
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9CDFFC07E8811F0B2B277AFDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 12:16:55 +0000
ROA not before: Thu 21 Aug 2025 12:16:50 +0000
ROA not after: Fri 26 Sep 2025 12:16:50 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103240 (0x19348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 12:16:50 2025 GMT
Not After : Sep 26 12:16:50 2025 GMT
Subject: CN=68a70e37-28fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:4e:09:9e:db:09:6f:a8:7e:ee:70:c3:4e:
1e:93:bc:40:8d:06:f5:17:47:2c:e9:72:9b:7e:3f:
39:7e:50:97:8c:64:e5:18:8c:21:19:f0:f0:8b:49:
ef:eb:9a:31:6b:c4:56:3b:c5:8e:dd:3f:92:90:11:
87:42:5f:df:05:4f:74:83:b3:03:e0:ee:30:5f:1f:
a6:ca:04:1e:3b:0b:17:52:25:85:c3:e3:64:5e:19:
97:bd:d9:84:c2:3f:e5:69:3c:7d:dc:8c:9b:a6:3b:
c3:d0:45:ef:5a:94:e0:aa:27:f3:70:12:da:4b:3e:
58:9a:fe:d7:0a:d5:71:d9:8d:f9:9f:f8:e2:89:3c:
5f:36:2a:56:da:aa:30:8f:f4:41:bf:61:9f:9c:23:
db:14:ae:6d:71:fc:a6:3f:24:fa:16:a0:df:07:8a:
dd:92:2f:cc:18:1a:47:11:23:d2:1a:4d:79:3a:b7:
f1:07:d1:79:45:fa:3c:07:f3:ab:1a:2d:02:50:79:
42:0d:1d:cf:f6:85:3e:40:25:c4:ac:e8:e6:1a:1b:
ac:c6:f2:83:11:f8:36:64:a8:ed:18:81:03:86:af:
80:fc:c0:aa:cd:2e:02:9d:8b:1d:fe:fe:b0:ca:f7:
0c:ac:e7:81:67:5a:1d:a0:3d:9b:f3:5a:1a:9b:bd:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:5C:21:B6:07:B8:4A:AD:48:27:DD:AE:9D:56:A4:9E:81:1E:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9CDFFC07E8811F0B2B277AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f8:07:95:fd:c2:07:0e:80:37:1f:5a:9b:18:a3:f0:86:eb:
88:c3:23:56:c6:c7:44:92:33:68:2c:bd:90:f1:9a:c1:4a:1e:
19:8e:ce:ca:2d:f2:94:da:bc:7a:f9:9e:0e:d3:31:8e:3c:da:
2a:7d:e9:83:2d:c2:f2:11:16:a8:e8:1d:da:28:8b:0c:07:79:
b9:87:24:f3:a4:44:ee:ae:f2:89:dd:9b:77:db:30:68:ae:7b:
52:c3:ea:f6:b3:99:e8:7f:5a:15:38:48:4e:cb:72:9e:34:1f:
1d:07:9c:ae:e0:bb:3c:f1:6e:a4:24:d9:d4:ba:37:41:51:bf:
de:ce:30:7f:fb:17:d9:7d:11:cb:c6:e3:92:f0:fc:d7:69:57:
2e:e2:52:1e:4e:3a:6b:d4:e6:a1:b7:46:32:93:6c:a6:c8:64:
af:a9:5b:f1:1e:98:5a:23:ed:2f:82:cd:66:64:3c:e1:a4:84:
7e:c1:5e:f0:99:63:f4:e7:86:86:2a:34:c6:f0:33:6f:c7:66:
5a:22:1f:05:88:a9:4d:c6:90:76:ef:79:ee:f0:98:35:0b:f2:
e9:2d:b2:c4:53:5c:e8:af:68:72:e9:7e:fe:bb:c7:bd:89:f9:
05:58:4f:66:f1:d1:e4:95:0f:7a:78:63:6c:33:c6:9a:5b:47:
c8:ae:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:52 2025 by rpki-client