Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED331E2A79B211F0A11FED99DAE4EC9C.roa
File: ED331E2A79B211F0A11FED99DAE4EC9C.roa (raw, json)
Hash identifier: N2gbgO30Qyio077RXq51xjC+FRI6z1IfMYQScccLmhs=
Subject key identifier: 6A:CD:57:15:40:6F:D2:97:F2:30:F3:53:63:EA:BD:64:2E:46:8A:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED331E2A79B211F0A11FED99DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:36:24 +0000
ROA not before: Fri 15 Aug 2025 08:36:17 +0000
ROA not after: Thu 18 Sep 2025 08:36:17 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102860 (0x191cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 08:36:17 2025 GMT
Not After : Sep 18 08:36:17 2025 GMT
Subject: CN=689ef188-1fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:59:af:cf:fa:5b:35:3b:43:20:63:96:21:
1d:82:0c:c6:0f:a3:39:68:27:7a:a3:83:63:1b:79:
ae:71:7e:d4:19:d2:e2:e8:0a:31:3e:e0:87:64:d1:
36:47:0c:d2:b6:f0:64:a3:a5:fc:d9:59:8d:1d:fd:
83:a1:6a:0a:5f:f1:25:f5:75:cb:6f:64:20:8d:ab:
ec:3b:b9:09:aa:c4:06:c6:1e:03:52:aa:ef:f7:23:
a4:07:9c:cf:8b:5d:9d:54:b7:f3:87:aa:a3:18:85:
85:c6:bd:71:56:0b:ae:fa:cc:2b:20:52:2f:0d:a5:
b2:1c:da:82:8d:3d:0f:b9:3b:92:77:b9:66:7a:55:
75:4d:02:82:cd:d8:84:f8:20:45:f6:72:91:c6:23:
20:9a:19:c4:1a:06:47:dd:e4:ac:20:a0:3d:8c:72:
0a:c0:c9:12:7b:91:96:09:49:be:b4:72:0c:05:2f:
7b:e6:da:1c:a3:0c:0d:e4:da:36:cc:e3:dc:e0:da:
e2:34:34:87:84:7f:7d:68:5d:09:45:1e:df:15:e5:
75:f8:7b:ea:74:5a:9d:f7:70:28:0a:f5:ed:1b:5b:
72:8d:52:8a:39:36:ee:77:69:d2:33:43:7a:18:34:
3a:0c:e5:d5:1e:43:90:b3:c7:50:27:7c:3b:6c:6a:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:57:15:40:6F:D2:97:F2:30:F3:53:63:EA:BD:64:2E:46:8A:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED331E2A79B211F0A11FED99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:6d:10:82:bd:ed:c9:cd:9b:ae:3d:97:dd:a3:8e:4e:78:0e:
9c:95:05:bb:84:56:ba:bb:9a:9c:65:27:e0:c8:ac:d3:46:7f:
16:9c:c2:6d:44:78:c8:f1:f1:92:32:d3:e2:74:71:3d:fd:b2:
68:3b:cc:66:ec:9b:b0:7e:a0:64:7b:0e:1c:38:e9:ce:42:fa:
f1:cf:ad:f5:f5:7c:ba:e8:c4:ac:70:c6:8a:46:41:32:0b:3a:
7d:7c:60:f3:b4:17:2b:36:54:34:2a:64:d1:23:b1:6a:13:cb:
a0:d3:c9:61:56:47:26:f8:8c:75:fb:e1:a3:6d:80:70:aa:12:
7f:61:05:1c:e1:d6:7d:95:41:f4:91:cf:78:e5:e0:97:2e:ec:
e9:29:67:42:30:57:eb:08:65:06:48:d4:53:ae:75:be:cf:56:
e3:89:3e:81:63:15:e7:72:e6:47:0b:f8:99:92:4c:04:85:09:
63:48:c3:2b:44:64:0f:73:a3:4c:9f:ea:95:e0:44:68:90:16:
3b:ed:a8:36:c3:8d:13:22:1e:7b:0f:05:b3:2a:f1:9a:d1:9a:
8f:db:b7:c3:b7:35:2e:1e:af:c3:42:66:4f:f3:f4:ac:c1:f0:
3b:ca:43:9b:e9:0a:30:f2:27:48:ec:49:28:db:68:5f:7f:4d:
17:2d:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:29 2025 by rpki-client