Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAD0F667EA711F0AE6D847DDAE4EC9C.roa
File: CEAD0F667EA711F0AE6D847DDAE4EC9C.roa (raw, json)
Hash identifier: ZL0o0dATYX+JrTpCOLzQOmXCARNM0wGNUXaLElUUWqU=
Subject key identifier: A4:D1:5B:CA:90:73:69:1F:D7:27:33:1E:20:F5:21:06:65:C4:D5:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAD0F667EA711F0AE6D847DDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 15:59:24 +0000
ROA not before: Thu 21 Aug 2025 15:59:19 +0000
ROA not after: Wed 21 Aug 2030 15:59:19 +0000
asID: 17561
IP address blocks: 154.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103377 (0x193d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 15:59:19 2025 GMT
Not After : Aug 21 15:59:19 2030 GMT
Subject: CN=68a7425c-d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:c4:14:d6:eb:0d:99:16:e0:be:c2:81:77:
d0:b2:dd:3a:dd:00:6b:e6:af:c6:d9:b3:bf:69:52:
88:5a:af:a7:d9:c7:f3:39:76:80:73:da:b5:4f:02:
94:27:4f:c8:cd:3d:34:2c:ec:59:4f:f5:97:b9:d1:
13:c2:28:6c:3e:69:62:e0:b5:d9:39:f0:2b:3a:30:
61:58:0a:59:58:1b:51:20:c9:3a:4b:a7:09:08:ff:
4e:c6:02:51:b5:ba:e5:ca:36:df:c4:4d:05:7a:e1:
88:fa:45:5d:12:c2:d5:27:95:0e:34:d7:8c:2f:b0:
c6:53:84:ab:6b:e1:c1:bb:04:a0:79:38:8d:05:e3:
8a:70:b0:3a:40:2e:f0:7f:3d:d9:83:55:47:b1:5c:
0c:3f:8d:ca:d0:e2:f4:f3:15:5b:13:52:df:c0:08:
8f:65:cd:4a:3e:9e:f0:d7:bb:dd:2c:5e:fc:e3:26:
42:96:77:f4:54:4e:60:aa:25:d7:28:a5:2d:e8:0d:
35:74:ef:56:ba:23:71:ab:82:7d:7a:37:cd:0b:28:
b4:49:6b:43:5b:07:b5:3f:9c:98:c3:a6:eb:61:f2:
9d:30:4b:18:ef:6a:83:2b:6c:f6:e6:18:f1:3b:3c:
96:c6:c1:9a:1d:48:05:8c:50:f4:e7:60:ef:e4:5b:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:5B:CA:90:73:69:1F:D7:27:33:1E:20:F5:21:06:65:C4:D5:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAD0F667EA711F0AE6D847DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:8e:54:ec:47:c3:ce:ba:46:8b:2e:76:72:28:45:46:08:a6:
9f:8d:65:42:b4:15:1a:ed:c2:15:16:88:09:5b:8f:59:cd:a3:
71:18:cf:95:7f:d7:db:7e:80:c5:f7:60:60:ed:6a:61:c4:f7:
ea:ec:d4:48:92:1a:d8:d4:d2:73:d3:6d:11:97:54:7e:28:e2:
8c:52:c2:f4:f9:a7:c8:21:71:fb:71:1b:be:6d:b3:fb:5c:97:
91:b5:68:13:cc:54:46:5f:32:31:76:5b:87:77:83:cf:7e:64:
b4:f1:a4:32:52:27:f1:5f:fb:4c:bc:c9:00:0a:30:4a:ae:e8:
96:94:6b:b4:18:e5:10:7b:90:ba:47:75:fa:fd:4d:c6:37:0d:
75:f1:72:29:a2:74:f3:ce:e3:7f:d7:69:33:a0:89:d2:a3:f6:
34:69:80:57:f6:b1:14:27:a6:46:ba:a3:39:f4:eb:fc:a2:d9:
ae:66:1c:94:04:02:c2:fa:66:5d:51:10:75:c5:55:f7:64:5e:
6d:0e:95:c3:62:4a:38:a9:55:e6:73:24:60:48:60:b3:2f:47:
3c:2b:bd:ca:1f:ef:73:fc:74:45:68:94:b2:c9:7a:58:a9:2c:
ed:94:27:d6:49:9e:1f:d1:45:80:75:82:50:a9:7a:b2:5a:4a:
0f:61:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:28 2025 by rpki-client