Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC279067E9411F0A4039F82DAE4EC9C.roa
File: EFC279067E9411F0A4039F82DAE4EC9C.roa (raw, json)
Hash identifier: VIg2Hcj5i6zFiRDW9vxdjuLgYRtBLNsxeGJqFBkQm1Q=
Subject key identifier: EF:F2:9E:6A:A1:07:14:88:DB:70:9A:C7:09:01:60:3B:C8:BE:82:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01937F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC279067E9411F0A4039F82DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:44:19 +0000
ROA not before: Thu 21 Aug 2025 13:44:14 +0000
ROA not after: Wed 21 Aug 2030 13:44:14 +0000
asID: 17561
IP address blocks: 154.195.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103295 (0x1937f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 13:44:14 2025 GMT
Not After : Aug 21 13:44:14 2030 GMT
Subject: CN=68a722b3-5578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:d2:3c:0a:23:d8:05:27:13:17:fb:9e:68:
a2:72:f0:62:36:83:9f:db:a5:28:b2:fc:89:99:69:
d5:21:0a:23:38:cc:88:cf:d1:c7:1e:b9:8d:22:35:
08:49:9f:38:d9:07:d9:20:e3:bc:e8:24:7d:32:f7:
13:ec:b5:92:a5:02:d0:4c:2b:fd:09:20:af:71:ba:
97:3f:78:7d:e4:42:f2:ea:9b:31:6f:45:46:85:61:
85:2c:89:54:6e:a3:33:56:ab:83:12:3c:cc:fe:86:
df:81:1d:45:47:ab:8a:2e:00:7d:c6:74:ef:38:4a:
22:f9:64:e0:88:4c:97:b4:d6:5d:ea:bc:ee:23:f1:
31:9c:9f:cc:60:16:57:ee:ad:69:cf:fa:87:f2:d5:
40:b7:1b:71:79:18:b1:94:6c:5d:53:98:2e:c4:b1:
2f:28:3d:64:1c:f2:0f:1c:a8:73:82:54:08:18:cf:
f8:13:04:c1:69:df:c7:9a:d6:f1:ef:e7:c3:39:28:
ad:b9:b5:25:39:83:e2:80:55:fa:5b:78:a9:3d:80:
4e:24:1a:31:d0:53:8c:8f:1c:12:39:fd:bb:f1:58:
9d:27:32:4a:7d:ad:ef:6f:32:b7:7b:1e:56:39:50:
fc:30:4b:cc:89:22:d6:72:22:5b:ba:0f:4c:73:00:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F2:9E:6A:A1:07:14:88:DB:70:9A:C7:09:01:60:3B:C8:BE:82:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC279067E9411F0A4039F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:7c:11:c0:d0:29:10:ba:9b:92:76:62:a5:76:ae:dd:72:00:
81:12:16:85:90:d7:53:52:be:a4:0b:63:ff:d8:0d:d2:4a:86:
a7:19:1b:a3:19:e5:85:d4:ac:28:d1:30:e9:93:02:e3:15:60:
ca:fb:56:41:28:ec:3a:9f:eb:97:6d:c2:b5:45:22:c1:e7:19:
de:08:58:8f:8f:a8:17:f9:04:bd:ec:0d:ca:cf:4b:8e:b3:ef:
a1:a3:c2:3c:73:ba:7c:56:37:11:23:f4:5e:cd:47:1f:c0:2b:
f4:0d:8d:e4:ec:e5:0d:48:1e:75:5b:59:ad:17:14:5e:ee:bd:
53:4c:b8:fd:10:e8:88:c6:34:27:13:b5:75:6a:05:d3:1f:2a:
45:9e:c2:58:7c:d9:33:d0:6a:6d:a4:2c:99:10:c4:47:03:f9:
e4:10:49:12:cb:7e:bb:cd:a2:4c:13:4d:87:d8:8c:e6:4b:37:
b6:cd:8f:0f:fe:fb:5d:d5:9c:26:d3:cb:7f:e6:ad:ad:b0:9a:
c2:13:c2:9b:5e:d5:39:7b:fa:58:10:be:3e:b4:91:58:1d:51:
e4:8a:66:e7:a3:45:b7:ad:9b:c6:ed:e5:63:9d:f5:71:8b:c9:
13:e8:8e:b3:de:6e:86:80:f0:6d:6a:9b:d5:99:07:de:15:3f:
13:23:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:20 2025 by rpki-client