Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D5E05E7EA611F098509DF3DAE4EC9C.roa
File: E7D5E05E7EA611F098509DF3DAE4EC9C.roa (raw, json)
Hash identifier: WQiN3hQp8XfmdT1CVGo6qB1x2mLhB6aEep2ly2mmgpk=
Subject key identifier: 32:D2:76:69:F3:51:F7:8D:D1:D1:24:72:24:D0:CB:59:A7:24:A3:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D5E05E7EA611F098509DF3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 15:52:57 +0000
ROA not before: Thu 21 Aug 2025 15:52:51 +0000
ROA not after: Wed 21 Aug 2030 15:52:51 +0000
asID: 17561
IP address blocks: 154.199.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103369 (0x193c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 15:52:51 2025 GMT
Not After : Aug 21 15:52:51 2030 GMT
Subject: CN=68a740d9-dfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:2c:4d:f0:ad:a2:ef:c6:d4:0d:f6:e2:19:
2c:3f:be:3b:2a:51:27:c7:a9:9f:5e:5a:0c:78:36:
d6:0c:54:ef:18:09:ad:37:31:23:04:7b:bf:55:2c:
76:c5:56:43:c6:27:6e:f7:6e:92:ce:fa:3a:55:63:
72:cb:3e:1d:d0:e3:0d:9e:3d:f1:db:5d:ea:2d:00:
1c:9a:b2:57:6c:43:de:1a:6a:6e:c8:9d:d6:fc:36:
3c:4a:1a:cd:6a:c8:32:df:51:33:fe:27:23:a7:5d:
c2:8b:e7:42:32:df:e2:67:8e:5a:bd:25:be:70:a6:
82:38:7e:14:ff:04:de:20:68:a6:7d:02:ec:f9:91:
52:6e:2e:0d:2a:00:58:1f:79:9b:9c:87:c3:50:a9:
e5:3e:6b:d0:59:2a:1f:f9:b2:08:69:75:09:e4:7c:
e5:f1:cc:7a:2a:1f:52:09:a5:ff:10:b0:20:d8:01:
de:c8:4f:2b:af:96:cd:59:dd:ae:26:f9:ee:1b:75:
12:ba:97:d1:ed:b7:8e:d1:82:b2:3c:ab:69:88:ba:
ac:e9:18:98:7d:98:d8:bf:84:82:0f:89:b6:ad:92:
c1:c8:47:01:a1:c4:99:0e:ee:ec:83:87:d5:1d:a9:
74:39:71:cd:e8:99:54:00:13:ae:e1:d2:f8:ad:e0:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:76:69:F3:51:F7:8D:D1:D1:24:72:24:D0:CB:59:A7:24:A3:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D5E05E7EA611F098509DF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:91:77:21:1b:92:60:53:ba:87:e0:1d:02:68:d5:8b:92:58:
a9:48:61:b3:ec:4c:70:ef:0c:97:1a:81:d4:87:72:53:86:01:
c8:78:29:fb:90:90:08:fc:bd:60:c5:2f:d3:9f:54:57:36:bd:
02:4a:05:a5:f5:7c:d8:39:ed:47:87:d3:a2:3c:57:e2:95:56:
a3:37:40:59:2a:1b:a2:11:75:ac:8b:8a:5f:b9:8d:9d:37:8f:
a3:75:07:e0:a2:fc:93:61:fc:57:80:21:a2:00:b1:5d:24:68:
5f:82:7c:bf:7a:63:c5:f2:1c:cb:3e:5a:2d:6b:92:6a:77:df:
9d:b6:7d:ba:9f:ea:4e:9c:e8:2f:ae:32:21:8d:c8:f7:0b:70:
eb:3d:ba:9c:9b:6e:9f:ce:63:25:1b:b8:f8:2a:04:46:07:dc:
39:49:e1:67:9b:87:dc:71:8a:45:e2:d9:4f:fd:98:3c:55:76:
a1:38:f6:4d:a7:5d:38:a1:64:7f:61:a0:93:1b:dc:01:97:70:
72:79:e0:6f:4a:bc:31:58:b2:cd:35:8a:ac:d0:e1:79:c3:b3:
68:15:b6:dc:6d:9c:3f:1c:42:8a:a0:9c:1f:10:63:87:e7:a2:
d8:1b:b7:04:16:6a:8c:1b:3e:00:aa:3d:31:41:67:54:04:8d:
1e:3b:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:12:13 2025 by rpki-client