Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60E07507E6B11F08F5EC0F3DAE4EC9C.roa
File: E60E07507E6B11F08F5EC0F3DAE4EC9C.roa (raw, json)
Hash identifier: 1VDErSG9xewiJz+EUv7/Z0e/kpuVcYcXbbebaObWT0A=
Subject key identifier: 1B:F5:83:60:CE:B4:4A:BC:8D:FA:3E:D0:0F:8A:3F:62:6A:0D:2E:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60E07507E6B11F08F5EC0F3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:50:34 +0000
ROA not before: Thu 21 Aug 2025 08:50:29 +0000
ROA not after: Sat 30 Aug 2025 08:50:29 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103160 (0x192f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:50:29 2025 GMT
Not After : Aug 30 08:50:29 2025 GMT
Subject: CN=68a6ddda-1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:27:df:6b:9a:f7:7c:f6:5f:ee:83:69:73:
75:6c:13:68:a6:a9:72:ee:3c:f2:d6:6a:7a:82:15:
5b:68:fb:16:bd:59:22:c4:1a:65:73:b4:58:83:f1:
6a:13:ff:0f:a7:27:16:f1:35:5a:ac:10:be:0f:28:
49:27:40:eb:68:a2:29:61:d4:6f:20:bc:13:88:8d:
0c:8c:5d:a3:94:1e:67:e0:13:b9:db:40:56:54:34:
47:e6:80:b3:88:d4:a3:93:ce:28:45:44:b7:3b:b2:
ac:06:79:dd:ec:26:6f:e7:3b:cf:7d:c9:6c:e1:a8:
ce:d6:8e:76:ec:e8:f2:e5:3f:a5:db:13:67:bd:8a:
84:d3:a0:4b:4c:a7:70:cf:ad:49:30:d8:dc:23:b4:
be:ba:3b:51:bc:84:b8:3f:88:5c:eb:16:79:91:2f:
2d:aa:c9:a0:88:18:64:75:53:7d:38:4f:f5:27:59:
67:98:40:17:03:49:a1:25:fd:8e:1d:88:87:de:17:
4f:f1:90:5c:8c:b9:3b:cb:45:68:af:ac:fa:22:2b:
ff:5a:c8:c7:16:8b:9c:c9:b3:5a:54:af:7e:10:13:
2c:ba:01:fa:5b:62:47:d3:bb:b5:a5:54:fb:6a:65:
ad:9f:de:90:7b:2e:6d:f1:2d:40:2a:5a:ce:52:7a:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:83:60:CE:B4:4A:BC:8D:FA:3E:D0:0F:8A:3F:62:6A:0D:2E:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60E07507E6B11F08F5EC0F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
79:83:9c:5e:e4:ae:c9:74:b8:1a:4e:73:45:65:b9:09:e1:1e:
02:5a:0e:e6:41:f5:3d:68:64:5e:f5:76:7d:46:96:65:c1:90:
96:bb:e8:aa:10:39:0b:72:e2:5a:f1:5a:61:fa:6b:f1:be:ac:
32:a6:f7:26:07:f6:9e:ec:67:21:d1:95:fb:cb:c2:b3:be:7b:
22:1c:60:2d:df:db:91:08:d5:a7:76:e4:8b:d2:38:35:0e:c6:
cf:07:6b:0d:3e:49:ae:0c:46:ff:e3:56:6d:8a:4a:84:e7:c1:
6f:41:50:64:41:42:ee:84:7a:42:0f:04:c6:3a:21:66:df:66:
e0:3a:a2:e8:b6:69:8d:66:12:27:0e:18:4f:65:d6:44:33:25:
56:99:7e:60:a2:7b:f3:1b:61:70:2c:a6:d7:40:98:3f:e7:ba:
42:d7:28:29:ad:c6:9d:d8:c8:97:1c:b7:a0:04:27:7f:2e:8b:
56:af:55:3d:ac:d4:3b:77:39:7b:f4:dd:4b:8b:a2:b9:dc:1c:
b1:09:81:85:72:95:55:ad:35:60:f0:f9:dd:9f:06:0a:89:3b:
d0:ff:7e:50:cc:3c:fe:a4:f0:76:33:9e:e5:39:9e:41:7f:09:
81:85:84:8a:b7:72:e9:03:63:92:aa:c5:5b:fd:c6:4a:42:37:
79:6b:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:43 2025 by rpki-client