Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C2C88753211F0AFF267BBDAE4EC9C.roa
File: D16C2C88753211F0AFF267BBDAE4EC9C.roa (raw, json)
Hash identifier: Xbstm592sWcW72O3bAXVXyAXYOwhy48sGvllpMOBLOw=
Subject key identifier: 17:89:74:7B:84:D0:09:72:27:03:F9:79:62:80:98:B4:94:7C:03:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01912F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C2C88753211F0AFF267BBDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 15:09:18 +0000
ROA not before: Sat 09 Aug 2025 15:09:13 +0000
ROA not after: Sat 27 Sep 2025 15:09:13 +0000
asID: 40779
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102703 (0x1912f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 15:09:13 2025 GMT
Not After : Sep 27 15:09:13 2025 GMT
Subject: CN=6897649d-9b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:f6:16:82:b1:e7:f8:0a:1a:ce:80:c0:df:
68:8f:4e:df:91:40:d9:35:9c:c4:69:56:5c:ac:85:
d9:7f:84:cc:f0:a7:94:0c:32:db:1b:01:85:f1:89:
61:0a:52:7b:86:3a:2c:3f:a6:75:56:81:e3:33:5b:
c4:6d:22:24:e9:a2:7f:34:c6:68:2e:8a:97:9f:91:
be:fe:58:d5:64:22:89:48:50:26:4f:f8:8e:02:d6:
d6:83:92:ce:7d:91:fc:06:43:0a:98:10:cf:ac:19:
87:8f:02:33:98:ce:94:fb:04:0e:a8:85:62:70:a6:
70:22:53:73:ea:75:6b:b5:80:a8:71:7a:0c:12:be:
fa:39:8a:c5:d0:0a:2c:11:71:c0:c1:88:e9:f1:f4:
cf:0d:60:0f:52:27:fd:e3:e3:1e:29:36:cf:db:63:
9a:c8:0e:7e:1d:e0:cd:a1:ca:dc:0c:0e:68:b0:4e:
d5:5f:6e:e5:04:8c:ec:0c:5b:29:6e:78:70:44:35:
f5:b6:05:30:ca:dd:b4:17:b5:4d:69:88:6c:b3:51:
52:ed:ce:17:6e:d4:76:71:bb:46:52:d0:07:70:b8:
2f:05:95:3e:9d:fa:7d:88:35:db:4a:06:5b:f3:60:
4b:dd:3f:41:a1:2f:4e:82:3f:d3:d6:0e:66:49:83:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:74:7B:84:D0:09:72:27:03:F9:79:62:80:98:B4:94:7C:03:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C2C88753211F0AFF267BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
69:39:bb:f0:ae:7b:47:36:eb:a5:b3:1b:29:25:24:c9:1b:3d:
9d:2c:da:31:a3:ff:3f:2f:4e:90:cf:60:65:07:a3:a2:46:dd:
0a:f1:92:f3:44:cb:10:e8:0b:d7:08:ad:82:2c:0c:fb:c4:da:
d8:13:c5:d5:a1:6e:5a:b6:48:5e:b7:75:55:9a:41:cb:49:57:
da:c3:44:fd:57:0d:41:da:dd:a9:91:f1:73:4d:1c:6f:cc:40:
82:a5:34:1c:b2:7d:7c:fe:10:f2:3d:1a:25:f9:63:b3:e4:1d:
66:13:0f:db:9f:9f:b1:d1:99:c5:6c:1d:97:54:3c:79:d1:b8:
42:ea:cf:a5:60:9d:e6:38:02:71:ce:1b:8a:85:e8:cb:ea:54:
a9:b1:43:25:3d:02:0b:ea:9f:03:05:b3:cd:35:8f:27:3d:cd:
67:9c:8f:33:fb:9b:4f:53:21:c9:9c:f7:90:ed:b7:e0:1e:12:
cd:24:19:9f:8f:62:35:4c:56:36:af:09:b6:53:d3:66:6c:3a:
e0:4b:b1:79:03:20:fd:5b:40:f3:55:79:c9:e6:65:33:4a:17:
06:33:a5:4c:7d:20:fa:24:7e:27:41:3d:84:ac:b2:3e:fb:64:
a6:98:74:b3:3a:a9:c0:dd:fc:3e:23:64:1c:2b:90:5e:5b:ef:
6b:fb:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:56 2025 by rpki-client