Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D595D0467E9E11F0B15706C1DAE4EC9C.roa
File: D595D0467E9E11F0B15706C1DAE4EC9C.roa (raw, json)
Hash identifier: fwtMJVe/PS1m08dCteoYXODazH09AilBDkeG9+rxSSU=
Subject key identifier: A9:69:72:29:3E:F7:ED:6C:D3:0C:63:35:F0:DE:F9:FA:FA:51:C3:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D595D0467E9E11F0B15706C1DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:55:10 +0000
ROA not before: Thu 21 Aug 2025 14:55:06 +0000
ROA not after: Wed 21 Aug 2030 14:55:06 +0000
asID: 17561
IP address blocks: 154.203.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103337 (0x193a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:55:06 2025 GMT
Not After : Aug 21 14:55:06 2030 GMT
Subject: CN=68a7334e-37d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:44:c8:55:7b:4e:e2:09:8a:ce:17:49:75:
c1:8d:66:42:5a:6b:27:2b:22:7b:7b:9f:8e:1f:1f:
d8:30:3b:62:27:76:a7:34:90:d7:2a:3a:da:5a:de:
a6:83:d7:17:ca:13:3a:4f:17:f1:87:e7:a8:66:18:
71:8a:d3:61:05:28:4c:af:87:3e:8a:33:e2:bc:08:
e9:7c:66:e6:b1:a7:71:5e:04:3e:60:4d:c0:59:99:
2a:15:0d:f3:9c:b0:be:e9:b8:27:f0:f2:3d:b3:29:
a3:9a:b5:33:15:05:92:e2:cb:16:d6:ca:4b:f3:8d:
b9:9a:39:47:0e:04:52:f2:15:f2:01:d7:83:52:66:
fb:b0:53:40:ac:b1:fc:2b:a5:80:6c:24:10:17:9f:
f4:4c:5d:27:ce:68:9b:03:ac:b7:ea:ec:65:1f:c2:
d0:91:a6:77:f8:49:dc:69:01:00:e2:a0:fe:74:75:
13:fe:7c:5b:eb:f3:e4:05:40:ed:6f:a6:a9:96:2b:
1e:cc:3b:14:f3:35:e4:f6:3d:de:06:7f:84:41:27:
50:7d:e4:f6:bb:50:17:54:16:ed:eb:f3:65:aa:01:
89:67:db:70:db:74:02:d1:a3:26:dd:39:37:36:c5:
7e:48:8c:c6:60:f7:99:0f:e6:4a:d2:ec:38:d7:d9:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:72:29:3E:F7:ED:6C:D3:0C:63:35:F0:DE:F9:FA:FA:51:C3:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D595D0467E9E11F0B15706C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:64:d6:b5:a3:3b:2e:18:08:e6:2d:83:33:73:fa:2d:c5:ed:
71:b9:db:e5:13:e2:ae:5c:f1:3a:92:2d:27:a9:25:6d:df:a4:
8d:10:03:84:35:d0:c7:a7:38:09:ac:60:65:28:b0:76:b9:c4:
dd:c3:55:6e:d2:47:2b:96:2e:26:b9:16:69:b9:8b:4a:6f:bd:
98:7c:79:98:13:7f:b8:d2:fe:c7:46:49:94:67:3f:1e:05:90:
af:bf:74:df:d6:b5:f6:f2:8a:54:e3:84:32:da:aa:8a:8f:66:
77:6c:9e:52:9d:fc:f6:e6:33:65:fc:f1:e0:74:6d:5a:73:fb:
0d:b1:f4:cf:bc:98:2d:82:a0:e1:14:48:38:7e:a5:2d:58:3d:
58:f7:03:ec:a2:8e:ee:8c:02:6b:d6:00:ca:57:95:8f:49:32:
cd:a8:a3:40:6c:72:55:9c:69:3c:cd:94:1a:69:d2:c7:ad:e4:
e4:65:3b:24:71:22:84:f7:aa:2f:d6:e6:88:20:35:22:f1:d9:
55:33:18:a8:dc:e7:3f:4b:3d:08:8e:23:62:bd:4a:8d:ea:fc:
69:a0:3a:79:83:7c:66:0d:a6:78:8c:ba:87:5d:81:97:2e:7f:
ed:fe:07:13:4b:e6:3f:cd:2b:68:5f:f7:54:7a:d1:38:e7:05:
0b:87:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:19:29 2025 by rpki-client