Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BE38467E9B11F0BD30C8AEDAE4EC9C.roa
File: E3BE38467E9B11F0BD30C8AEDAE4EC9C.roa (raw, json)
Hash identifier: Hgp1FKBeWfjRenArjhQbmScYstzFOp0rLyWZ/fOL0/4=
Subject key identifier: C4:1E:D8:FD:FC:EE:32:C8:59:6C:8B:FD:5D:E7:EF:A6:5C:39:73:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019399
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BE38467E9B11F0BD30C8AEDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:34:06 +0000
ROA not before: Thu 21 Aug 2025 14:34:01 +0000
ROA not after: Wed 21 Aug 2030 14:34:01 +0000
asID: 17561
IP address blocks: 154.89.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103321 (0x19399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:34:01 2025 GMT
Not After : Aug 21 14:34:01 2030 GMT
Subject: CN=68a72e5e-db9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:45:b1:f4:ee:0b:aa:22:d1:0e:1b:4f:ee:
c6:46:ca:ae:2a:ed:8a:36:eb:0e:dd:bc:65:5e:dc:
7e:98:eb:a8:99:ee:2c:c4:26:92:77:94:1e:4a:f7:
17:39:13:5a:ee:41:16:1c:f8:96:34:96:a2:6f:a4:
b1:40:3e:05:c0:5b:77:bf:12:dc:b1:9d:ae:58:01:
3a:17:e0:dd:1b:ef:32:10:ce:c8:59:0e:26:56:0b:
82:8b:c2:5d:19:cb:e9:ff:30:d8:5e:d6:be:b9:b5:
28:0f:ba:8c:22:52:77:09:86:cc:1c:16:2f:44:21:
36:1c:7c:d1:4b:7b:71:15:78:54:be:19:7a:f1:63:
f2:10:31:b8:5c:01:8e:8b:9b:17:fe:18:7b:ff:46:
2c:18:6a:87:a2:1a:44:e6:7f:7f:8e:05:1c:68:20:
dd:5b:2f:a9:ab:5d:c5:18:0c:ee:2e:f7:81:e3:2f:
1e:72:31:16:f4:7a:89:d4:0d:e6:e7:28:37:7b:82:
5f:5b:e0:55:d2:e3:1b:30:59:64:ff:21:81:44:9d:
80:8c:5a:e3:25:5d:4f:ce:a7:22:6f:7e:ce:d7:f6:
db:13:94:a3:e2:38:ed:b9:1d:27:83:e6:3b:0d:ce:
ec:da:0c:3c:d4:d2:dd:73:ea:16:d5:ab:bb:9f:8c:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:D8:FD:FC:EE:32:C8:59:6C:8B:FD:5D:E7:EF:A6:5C:39:73:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BE38467E9B11F0BD30C8AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:30:70:b3:4b:80:3e:b4:04:b5:7b:79:1c:ae:d7:be:be:b9:
e9:ca:cd:67:72:5d:a7:ef:ed:16:26:aa:d0:86:87:75:33:f5:
a9:cf:45:e9:98:1f:39:84:38:cb:23:aa:db:3b:a8:60:d5:f6:
17:ef:75:c3:50:11:46:7f:1d:44:d8:2a:70:f0:80:45:a5:62:
eb:db:ce:af:9d:bf:78:2f:45:d4:c7:80:0b:9b:f9:5f:0d:7b:
96:4a:ef:b8:80:2d:b3:75:27:26:d8:f2:5e:6a:fc:a0:f7:0c:
16:b0:92:c7:64:46:da:cf:47:48:6f:6f:21:86:d4:19:b8:77:
36:53:11:60:94:03:b6:a5:49:dc:7e:1d:a3:fc:be:03:2c:88:
6f:4e:d3:6b:f8:51:ce:dd:ff:ba:3f:d7:3c:82:5d:4f:a2:57:
ec:5e:46:c9:27:b7:b3:55:68:20:92:98:bd:c9:32:bf:7b:30:
fa:eb:81:c1:b5:d7:b6:d4:97:b5:aa:71:28:57:1a:b6:20:b5:
2b:86:a3:b0:0a:7d:02:ed:59:e4:02:85:f9:5a:1a:7e:38:2b:
5a:54:be:ea:ff:2f:76:9d:4d:be:99:41:b7:ee:76:31:9b:af:
c4:61:79:5d:f2:5d:f7:f3:a9:33:93:1d:bc:23:fb:8d:40:e6:
95:d4:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:16 2025 by rpki-client