Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA4B5AA7E6711F0A99169D9DAE4EC9C.roa
File: BEA4B5AA7E6711F0A99169D9DAE4EC9C.roa (raw, json)
Hash identifier: kF9vQSSiXkGRtNNPpnemnH0evG3LJSG/1EggRgcYx1g=
Subject key identifier: 0A:F4:EA:8B:55:28:A6:54:5C:F3:0F:E7:16:7F:4F:2E:B7:BB:19:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA4B5AA7E6711F0A99169D9DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:20:50 +0000
ROA not before: Thu 21 Aug 2025 08:20:45 +0000
ROA not after: Thu 25 Sep 2025 08:20:45 +0000
asID: 14315
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103144 (0x192e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:20:45 2025 GMT
Not After : Sep 25 08:20:45 2025 GMT
Subject: CN=68a6d6e2-7e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:17:ae:e7:3d:89:ea:56:59:ce:cb:bf:f6:
84:34:0f:6a:78:aa:b4:35:99:31:3e:f4:b6:69:40:
34:7c:7e:32:5f:2b:b9:4e:1e:16:4e:04:c9:d4:62:
35:0b:1d:f6:cc:b5:63:cb:40:ac:50:02:45:d5:9e:
6b:b1:e4:8a:b1:07:2b:d9:53:b3:3f:95:3d:98:8b:
95:a8:93:25:ec:f6:cc:47:a9:b1:ca:72:41:e3:c7:
9e:9d:7e:04:37:18:04:11:92:7c:ba:0f:03:7c:7c:
3d:b1:b5:fc:b4:41:5d:d4:84:4d:c1:e2:86:9b:68:
df:64:3e:bb:3b:14:8a:08:ec:3d:13:19:06:77:d8:
4d:ab:a2:f8:a8:8f:d8:b3:38:d1:a7:d0:e8:31:0e:
09:32:3b:7e:e6:27:66:a0:66:40:34:1e:20:5b:e9:
1b:ac:aa:56:d6:48:c3:6d:18:c4:81:90:97:77:9a:
87:ce:6d:0f:8e:e3:f9:0e:5d:da:a0:2b:69:39:5c:
c5:28:67:d4:9a:8f:45:f8:d8:af:c7:6f:09:ab:fd:
86:cf:38:91:ef:fd:fe:2a:67:3f:01:5a:04:c0:bc:
f0:c5:03:77:31:cf:e5:f4:51:7f:e9:db:3c:b9:13:
3b:78:97:01:39:c2:a5:5c:9b:0d:24:0d:b7:ef:5d:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:EA:8B:55:28:A6:54:5C:F3:0F:E7:16:7F:4F:2E:B7:BB:19:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA4B5AA7E6711F0A99169D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:32:22:02:3f:6d:dd:e1:1a:bf:81:ac:f6:74:a3:29:1f:b6:
bf:a5:a9:10:5e:c8:b1:62:d9:9c:a1:b9:dd:d5:2b:5e:b2:14:
01:d3:99:28:3f:00:ee:98:a3:1b:86:c9:99:79:1f:db:13:10:
22:5f:7c:dd:a7:0e:aa:6b:d8:b6:58:8c:1b:db:3c:3a:59:0d:
40:78:c3:bf:26:b7:99:8d:04:f7:a9:bb:39:c4:b2:2d:bb:55:
22:f6:da:e1:c7:40:df:b3:b0:0b:39:67:13:65:28:e4:4d:8d:
24:85:4c:91:0a:4d:ee:64:6d:fa:d7:c3:e8:23:f5:fe:24:73:
97:bb:ae:cc:f4:f1:c2:de:02:90:01:86:e5:22:15:92:ee:e3:
44:06:34:d3:36:bc:6c:13:6f:34:57:05:64:f1:28:d4:b3:86:
1c:1d:76:c4:3c:2f:93:b4:23:10:5b:94:1a:59:ba:38:80:ce:
e1:36:23:16:a5:c1:d5:52:ed:b1:f3:f1:4f:a8:90:d6:9a:5f:
2b:f0:67:84:ad:33:53:c6:b9:37:56:f7:6d:90:b4:cd:f1:ba:
aa:fe:be:59:15:16:e5:19:dd:2b:9f:b2:cc:7e:82:8d:5a:07:
15:1e:3e:26:55:e7:c7:1b:fc:a2:8b:b8:7c:bc:ef:54:f6:14:
94:d2:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:43 2025 by rpki-client