Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2797CC47C6111F0B3526292DAE4EC9C.roa
File: F2797CC47C6111F0B3526292DAE4EC9C.roa (raw, json)
Hash identifier: YJglQ3t1WIfLBOELKSnutYdbVKjajJaVJoQTw0yL3AE=
Subject key identifier: 54:E5:30:0A:BD:1A:D0:6F:CC:C0:A9:59:DE:C1:71:32:4D:D6:C5:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019221
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2797CC47C6111F0B3526292DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 18:34:17 +0000
ROA not before: Mon 18 Aug 2025 18:34:12 +0000
ROA not after: Wed 26 Apr 2028 18:34:12 +0000
asID: 17561
IP address blocks: 154.81.0.0/24 maxlen: 24
154.81.1.0/24 maxlen: 24
154.81.2.0/24 maxlen: 24
154.81.3.0/24 maxlen: 24
154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
154.83.34.0/24 maxlen: 24
154.91.144.0/24 maxlen: 24
154.91.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102945 (0x19221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 18:34:12 2025 GMT
Not After : Apr 26 18:34:12 2028 GMT
Subject: CN=68a37229-5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:f0:7c:1f:65:28:1d:5e:ae:45:67:1e:d6:
fc:4e:a7:46:55:52:08:b6:c1:06:20:63:0b:29:60:
7a:c3:ba:f3:c9:31:f7:03:a4:bc:40:26:f4:48:0e:
c1:dc:88:35:81:41:3e:72:3d:7a:3b:3e:69:f9:07:
84:5a:ef:8a:ad:be:ef:b6:42:76:87:53:f8:10:79:
a1:11:48:a3:ac:31:89:62:44:48:ae:89:9e:da:70:
69:55:92:f1:4a:a5:c0:66:cc:3b:07:be:42:d2:0c:
54:13:b5:1e:10:d7:0a:26:3b:ce:c3:c7:8d:de:ef:
25:ff:5a:aa:de:71:09:6e:58:74:30:89:28:38:6f:
76:d8:f2:c6:11:a4:85:30:6b:0a:d2:67:22:49:b3:
63:08:52:94:0a:89:73:b6:16:80:20:de:87:78:fe:
d6:62:42:3d:80:e6:e4:5b:64:c6:b2:a4:eb:e2:de:
c1:54:b4:2e:fb:30:37:29:be:9a:5b:d6:5b:ed:92:
70:f0:9e:52:38:ba:cd:a8:61:51:7e:5f:d3:73:3f:
a9:6c:5b:b6:6a:e6:fd:93:f1:6d:48:71:dc:4b:b2:
5b:9b:84:3c:42:a0:2e:28:cd:c2:af:9f:d5:80:8f:
f4:fa:f5:5d:a7:7a:2c:03:b1:2a:fd:ca:3e:b7:45:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E5:30:0A:BD:1A:D0:6F:CC:C0:A9:59:DE:C1:71:32:4D:D6:C5:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2797CC47C6111F0B3526292DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/22
154.82.159.0-154.82.160.255
154.83.34.0/24
154.91.144.0/23
Signature Algorithm: sha256WithRSAEncryption
48:71:ad:11:a2:ec:1c:bd:1b:43:2a:84:4e:b5:27:57:c3:df:
bc:92:e3:df:31:31:75:81:ca:35:71:d4:9a:01:95:ba:11:a8:
5c:5c:d7:e6:58:cd:25:01:72:15:fa:a0:f0:bd:e5:6b:6e:54:
e8:5d:85:88:00:cd:3d:ce:b0:02:45:5e:56:c6:a4:ed:16:72:
8d:10:ab:4e:b9:f1:b1:d9:7b:06:4d:f4:d3:0d:0d:c5:03:25:
7c:b5:0c:89:05:19:78:fe:d7:18:07:db:15:0c:60:cc:19:80:
e7:88:ae:1d:20:ae:6b:61:6c:35:93:6f:75:ec:88:b1:08:18:
9c:d3:24:dd:b2:43:12:34:9d:e0:d9:04:cc:8d:07:85:2b:dd:
e1:3d:b0:01:9e:da:bf:66:5f:2e:4d:e5:4b:95:34:b3:7e:e8:
f8:58:09:56:ee:52:a9:6f:95:bd:10:af:d5:d0:3a:14:a5:b3:
2a:e9:57:29:20:ae:16:08:15:a5:e2:79:8e:4c:06:25:2c:e2:
ee:3c:d1:d0:4b:2c:2b:67:16:a7:61:5e:3d:64:95:f7:6b:46:
c1:26:f2:91:51:f5:43:60:a7:63:a9:60:29:0c:0c:19:ce:43:
01:78:bc:58:ab:70:e7:2c:4c:63:24:83:da:bb:f4:f5:8b:a4:
dd:32:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:15 2025 by rpki-client