Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E86FF6D0573C11F081FD93B7DAE4EC9C.roa
File: E86FF6D0573C11F081FD93B7DAE4EC9C.roa (raw, json)
Hash identifier: NzWK6ouW2xLW5TrDBjztaArZOOPsh917RxQGsu2+fXQ=
Subject key identifier: 0F:A8:54:FA:F1:25:DB:6A:3C:A4:6A:D9:51:B2:8C:51:A9:E3:55:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E86FF6D0573C11F081FD93B7DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:05:56 +0000
ROA not before: Wed 02 Jul 2025 12:05:51 +0000
ROA not after: Sun 10 Aug 2025 12:05:51 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100794 (0x189ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:05:51 2025 GMT
Not After : Aug 10 12:05:51 2025 GMT
Subject: CN=686520a4-6d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:8c:ca:60:9e:ee:0c:94:73:31:be:77:dc:
a2:84:ee:9a:6f:60:4e:24:5f:40:74:d1:6f:9c:45:
01:f3:3f:7e:d5:cd:3b:02:00:f6:cc:0a:94:92:fb:
ea:bd:53:77:36:a7:e7:59:15:0b:0f:9b:04:86:f6:
40:1b:db:e3:23:f5:23:cc:a8:e6:18:62:87:73:a1:
29:7b:4c:b6:ea:fc:a0:c9:2d:3e:ae:34:00:e1:f6:
75:e9:f8:00:e4:56:6e:1b:e1:78:dd:a7:53:43:86:
39:c6:07:b1:ba:54:1a:94:ca:32:29:09:04:75:74:
94:15:bb:b2:26:20:a3:d1:ce:69:fa:ff:25:62:63:
c7:b6:01:0b:a5:0a:b7:b0:38:6a:ef:03:00:08:19:
9b:6e:3d:85:8a:a5:29:32:e2:82:48:73:1c:9b:35:
f4:ad:2b:9a:fc:49:ff:07:8f:57:fe:82:01:13:ea:
ad:3a:45:1d:33:36:89:a8:aa:8a:9d:04:d8:3b:46:
b9:b9:05:2d:a2:11:bd:3c:57:64:d8:3c:11:4a:d6:
e4:6d:9b:b3:f4:99:2f:88:ae:59:df:92:3f:ba:b4:
ea:e5:6a:32:8b:a9:d6:0c:2a:f9:61:58:72:ba:52:
1f:4a:4b:f6:71:ea:0a:ad:e6:9a:b6:9b:12:d2:50:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:54:FA:F1:25:DB:6A:3C:A4:6A:D9:51:B2:8C:51:A9:E3:55:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E86FF6D0573C11F081FD93B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:77:c0:83:e1:1d:a3:8e:65:07:26:d4:6e:cd:bb:d2:15:4b:
c9:f7:f1:3d:61:75:0b:dd:fc:9c:cc:90:0e:09:13:8e:eb:1d:
fc:5e:d3:02:0a:50:1b:9b:d7:40:d3:86:8f:b5:c1:3e:9b:b3:
91:80:f5:0c:2a:c1:92:72:c3:e5:b4:ce:ad:a2:b4:f4:f4:4d:
de:4f:d8:de:ae:cd:a1:3f:87:71:e1:25:c5:51:67:68:9c:ef:
34:55:7b:a3:9e:bc:2b:58:4a:d5:13:eb:ed:2d:c6:7c:fd:fd:
dd:50:bf:67:94:3e:43:6a:54:c6:2d:b0:60:6f:30:03:e7:f9:
02:2c:7a:8a:77:6c:fd:f9:90:82:66:60:69:3d:bd:0a:a7:b9:
ec:6c:82:84:9e:60:f3:fd:8f:e0:f1:ba:0e:74:d3:81:3e:a3:
e3:ff:fd:62:34:23:bb:03:80:1b:24:fd:f9:c5:0e:d4:c7:f8:
bd:85:92:aa:be:0b:3f:b4:74:2f:c9:b3:b4:c5:01:14:cc:ae:
2b:a4:cd:8d:ce:3c:d7:87:cc:df:40:8a:12:2e:9f:69:a4:d7:
cb:4c:2e:c3:a1:85:e5:49:7f:4e:b3:c1:00:ad:de:f0:29:38:
48:e6:23:5d:d4:74:b9:dc:7a:85:8d:61:84:81:cb:83:a4:05:
98:c3:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:02:03 2025 by rpki-client