Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF803B9A753A11F08963E4EBDAE4EC9C.roa
File: DF803B9A753A11F08963E4EBDAE4EC9C.roa (raw, json)
Hash identifier: FH4fvvJHfMw4oliwNvekyEobIedmfepTPxvBzLFlH+w=
Subject key identifier: 8F:D8:EA:58:C5:51:7E:D3:9F:89:1B:8F:CA:9A:4E:8D:49:A9:1C:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019133
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF803B9A753A11F08963E4EBDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 16:06:57 +0000
ROA not before: Sat 09 Aug 2025 16:06:52 +0000
ROA not after: Mon 19 Jan 2026 16:06:52 +0000
asID: 271990
IP address blocks: 154.223.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102707 (0x19133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 16:06:52 2025 GMT
Not After : Jan 19 16:06:52 2026 GMT
Subject: CN=68977221-85ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:35:31:f5:d9:85:90:48:ed:17:3c:19:a9:
9a:c0:f7:8c:55:61:d2:de:17:63:0c:b8:ac:38:ca:
84:17:40:1c:ed:ae:76:7f:a3:ef:69:1e:43:bd:67:
89:05:5a:a2:db:3f:3f:78:45:54:72:e6:84:43:3d:
b1:1a:47:b0:c2:1d:ee:3c:cf:5f:c4:3e:80:24:08:
a3:da:83:5f:c4:71:c7:04:26:f7:07:05:81:09:57:
73:d1:d4:62:00:81:69:27:2a:93:c2:04:24:cb:ce:
b7:2f:dc:ff:7d:8a:e4:3b:fc:5d:82:ac:92:a7:f0:
e6:9d:af:34:a3:c4:ca:a8:07:36:16:9b:00:fb:be:
a9:f2:81:5b:bc:b6:b4:b6:89:83:91:c9:b8:d9:9f:
a7:94:3a:49:76:61:8c:95:c6:b8:4b:a5:e3:d5:60:
14:e7:7e:30:ad:3d:9d:77:e8:4e:b4:bb:a9:b3:f9:
5b:d0:91:39:d2:c4:60:9e:d9:44:f3:a4:09:b0:07:
e5:49:65:6f:15:0c:3a:34:df:b7:4e:cc:bb:84:47:
18:3e:b1:dc:d0:ae:70:44:46:6c:7b:17:5f:47:c4:
99:01:4e:5a:a8:0a:6c:c0:27:6b:f2:c7:c9:21:09:
09:06:cb:0d:b5:9c:08:9b:bd:eb:bc:55:c9:3a:cc:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:EA:58:C5:51:7E:D3:9F:89:1B:8F:CA:9A:4E:8D:49:A9:1C:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF803B9A753A11F08963E4EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:44:55:99:04:2e:f0:75:4c:00:ca:fb:32:0f:e6:37:27:55:
c1:3e:dd:74:ca:b7:0f:13:73:9d:4e:8d:3c:b4:90:cc:e5:73:
d0:70:5f:19:2d:22:48:b6:c8:72:9e:e1:47:4b:61:ab:1a:0b:
2a:05:a9:70:ac:94:ff:27:ad:3b:ad:8b:b4:c1:2a:3d:c6:c4:
02:b3:00:db:42:27:b8:5f:71:1b:70:fa:c1:02:6d:fd:f1:eb:
dd:31:9a:1a:63:84:2a:8c:78:ce:c6:a0:ec:1b:03:ec:08:e4:
e4:85:d8:7b:de:6f:f3:7a:db:91:6a:6e:e8:1b:2d:3d:17:71:
5d:a7:c7:59:b7:27:ec:78:5d:7a:89:d3:11:be:76:12:28:9f:
35:75:dd:c9:1d:e7:9b:3f:fe:26:55:08:cf:cf:a9:96:0d:cf:
07:54:6e:a5:31:83:d4:50:3f:19:e1:e9:db:35:36:55:8f:6e:
10:93:e5:82:a1:b4:1e:22:09:92:c1:ff:5b:2d:ef:2e:30:e4:
22:2c:ea:30:e3:53:27:ff:46:cb:c3:e8:fa:4f:d7:29:fa:b3:
7a:88:3b:60:74:02:e9:83:cb:94:fd:ef:7f:1d:9e:12:d8:1c:
73:f7:98:bc:7f:40:42:35:4d:fd:ed:b4:9d:20:29:d1:73:f5:
dd:10:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:55 2025 by rpki-client