Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E52CE6736011F0B00D51E7DAE4EC9C.roa
File: D7E52CE6736011F0B00D51E7DAE4EC9C.roa (raw, json)
Hash identifier: 9YWAR6xYu+cJw4JCU5Ff7NEo7ZLkU7BO/jS9opYAxyE=
Subject key identifier: 2A:5F:39:25:F9:BE:AF:D3:40:DD:57:69:F7:7C:14:C1:34:EB:C8:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E52CE6736011F0B00D51E7DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 07:33:43 +0000
ROA not before: Thu 07 Aug 2025 07:33:38 +0000
ROA not after: Sun 07 Sep 2025 07:33:38 +0000
asID: 212238
IP address blocks: 154.90.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102597 (0x190c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:33:38 2025 GMT
Not After : Sep 7 07:33:38 2025 GMT
Subject: CN=689456d7-8efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:0b:ec:cb:e8:dc:86:03:f3:6e:a8:32:b9:
8a:bc:05:8f:02:f8:97:28:d5:4e:c1:d6:17:a5:57:
ef:60:d3:8b:5d:cf:f0:b7:90:7c:db:d5:93:f5:8c:
63:af:3a:1a:fd:1f:f3:cd:7a:ed:d5:91:43:93:18:
07:73:63:9c:ee:05:cc:ce:86:cb:70:55:90:84:da:
02:b1:47:a3:ba:06:ef:9b:2f:d7:64:04:94:66:06:
81:5d:64:c9:ea:89:4d:af:a4:93:c5:32:65:dd:9e:
e5:c3:09:50:9a:23:7f:b2:0b:dc:d5:e6:21:5d:89:
83:e7:90:4e:7c:3d:de:6c:33:75:56:a7:9b:72:87:
6f:c6:d9:bd:25:f4:ea:cd:ad:c1:a4:56:3c:c2:7b:
46:dc:f3:4e:3a:1f:74:ba:a8:15:dd:a9:a3:ad:4c:
e8:c2:f3:78:44:7a:45:b8:72:08:0e:7d:5d:fa:4e:
c0:a7:d1:5e:a3:b1:c0:d6:f0:c2:9e:55:bc:9b:17:
88:e0:fe:6e:9d:e7:11:3e:c1:db:3e:c5:1f:5e:89:
87:21:cf:3b:a3:7a:3d:c3:bb:dd:9f:58:e0:89:c6:
53:3d:6e:b5:8d:73:b4:3a:51:44:56:15:4e:bb:91:
34:6c:10:04:ad:80:3f:e5:5b:95:3a:0c:36:ca:cc:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:39:25:F9:BE:AF:D3:40:DD:57:69:F7:7C:14:C1:34:EB:C8:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E52CE6736011F0B00D51E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.71.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:05:5b:b2:85:4b:08:03:c8:af:43:d7:fd:b6:6d:97:4d:
14:f5:8c:c2:4e:60:0c:3a:68:e2:21:16:a3:76:15:97:22:41:
00:76:bd:6c:90:2b:56:9b:4d:10:4f:80:24:08:aa:cd:96:82:
32:6f:bc:4c:1c:7c:e2:91:5e:9d:a5:ec:27:9e:82:60:af:33:
b8:98:d7:85:93:99:30:41:3d:f3:79:dc:c6:4a:15:8f:75:04:
f1:f7:d8:07:25:43:36:50:c5:3c:35:a0:b3:97:3f:81:1b:ea:
1d:8b:05:39:8d:49:c6:71:80:f0:8a:e1:09:c5:6e:e8:e3:aa:
98:4c:d5:b9:8e:e3:1e:a9:fc:19:31:58:be:df:65:d6:70:cd:
41:f0:d5:0f:8b:7f:af:90:22:23:5f:ef:f0:b4:93:7f:b3:d2:
d1:4f:35:87:17:96:9a:3c:fd:5f:48:39:24:dd:e1:bf:a7:ae:
c8:01:79:cf:79:36:41:45:6a:fe:4b:3d:e2:25:02:fa:c5:d5:
55:8e:46:3e:54:ef:11:18:90:7e:9d:9f:ab:71:b9:43:dd:ce:
5b:db:15:4c:29:16:f8:9b:e0:ab:2f:15:54:ca:63:52:d2:db:
49:44:0a:1f:33:3d:cf:17:b8:97:b1:69:38:e5:8b:cc:6e:37:
83:98:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:18 2025 by rpki-client