Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6E4FA4E7F4211F08E5E007CDAE4EC9C.roa
File: E6E4FA4E7F4211F08E5E007CDAE4EC9C.roa (raw, json)
Hash identifier: xEBav+0fUynHfeSaXWWSYCRxIhPbcOyoJhAc041mFro=
Subject key identifier: D5:96:38:EE:F6:01:5D:A5:64:E1:5C:A0:FC:B0:D3:2A:E8:6D:DB:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01948C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6E4FA4E7F4211F08E5E007CDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:29:37 +0000
ROA not before: Fri 22 Aug 2025 10:29:32 +0000
ROA not after: Mon 01 Sep 2025 10:29:32 +0000
asID: 141883
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103564 (0x1948c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 10:29:32 2025 GMT
Not After : Sep 1 10:29:32 2025 GMT
Subject: CN=68a84691-11c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:11:6c:f3:27:cd:c7:e9:7b:10:5c:52:79:
09:b2:45:00:6f:bc:46:6c:eb:b3:9b:e0:f0:07:82:
d2:0f:83:0c:5f:d5:81:b8:25:0f:8b:62:15:1e:5d:
50:ed:e5:50:c5:d0:b3:84:54:d1:59:73:3e:36:df:
37:a4:d2:cc:14:ad:d9:aa:60:73:19:dd:16:ec:18:
49:1b:c0:86:3f:97:a2:63:d2:4e:6c:6d:2e:fe:1f:
c6:65:ff:5e:8a:a3:da:fe:bb:d2:28:80:0c:06:e4:
e0:cd:72:fd:4d:47:f9:d0:2a:b4:e0:61:3f:7d:21:
5a:0a:65:d8:32:93:f9:6b:90:60:b4:df:0b:9d:01:
3f:dc:8b:c9:c4:fe:22:36:e7:cd:b2:b7:8a:b6:28:
f8:07:5d:16:90:36:ed:68:d1:8c:a6:64:d9:42:c1:
10:68:fe:53:17:93:d5:a9:76:e4:0b:b2:74:07:51:
ed:09:68:08:eb:79:27:46:88:64:66:bb:2c:f6:ae:
2a:ce:b7:c0:04:9a:f2:64:e0:fb:5d:ef:ea:ea:d1:
4f:0a:86:f8:6e:9a:0f:8e:0b:f9:f2:fc:5c:5d:d1:
3a:50:51:04:61:51:3e:71:cb:81:73:38:65:ed:5f:
18:9c:f3:52:7d:c9:d9:e3:12:4a:06:9b:83:3a:b3:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:38:EE:F6:01:5D:A5:64:E1:5C:A0:FC:B0:D3:2A:E8:6D:DB:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6E4FA4E7F4211F08E5E007CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ce:4f:75:b4:ab:6e:4b:03:1e:62:dc:89:1b:c1:e2:ee:1d:3c:
ac:82:90:41:a9:bc:e8:fb:fa:48:4e:b9:b2:57:aa:09:e5:b8:
bf:38:c0:76:da:16:fa:61:71:6c:84:5e:2c:bd:85:08:0e:f5:
34:84:c7:99:1c:47:4b:a8:61:0c:ac:06:9c:b4:da:43:3d:0a:
95:b1:eb:fd:f3:cd:fc:a7:22:aa:3b:e1:71:b2:2a:56:a2:0c:
9b:87:e7:51:34:4a:c7:a0:91:f1:eb:74:bd:af:cb:65:c1:a0:
04:90:c9:06:1b:f9:9a:3d:38:99:f7:d8:11:58:dc:a0:7c:9c:
9b:e8:65:93:ff:97:66:8b:e2:40:3e:a7:e6:f4:de:99:8d:78:
5d:bd:82:38:03:82:04:7d:aa:ba:8e:f4:6b:1b:2b:03:ff:3d:
30:ea:b8:5f:e0:49:37:6d:e4:0f:18:bc:c7:15:bc:3f:c3:5c:
29:50:a5:bb:27:7b:e9:80:44:b1:10:8e:d5:d8:58:d4:cb:e1:
4e:dc:72:64:f5:c2:75:6f:2a:c2:8f:fa:3f:eb:1c:a7:c9:9e:
a2:bb:a3:b7:60:e3:fb:c8:07:94:3e:42:ae:b1:cd:76:4d:cc:
46:6c:7c:bf:d7:6b:b4:ec:a7:2a:2d:e8:bb:8e:11:24:0d:cc:
9a:ab:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:54 2025 by rpki-client