Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FD841A712211F0AB4F8EC8DAE4EC9C.roa
File: F6FD841A712211F0AB4F8EC8DAE4EC9C.roa (raw, json)
Hash identifier: EN8qqTKJE8vSLtY02HySFKghY+TcTe6F9yrhK9mH2bo=
Subject key identifier: 60:CA:E3:13:A3:9A:00:05:9B:EF:6E:E5:28:1B:ED:4B:09:01:11:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FD841A712211F0AB4F8EC8DAE4EC9C.roa
Signing time: Mon 04 Aug 2025 11:05:44 +0000
ROA not before: Mon 04 Aug 2025 11:05:39 +0000
ROA not after: Sat 08 Aug 2026 11:05:39 +0000
asID: 9287
IP address blocks: 154.85.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102566 (0x190a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 11:05:39 2025 GMT
Not After : Aug 8 11:05:39 2026 GMT
Subject: CN=68909408-3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:7a:d9:59:46:d1:9d:6a:2c:1f:9e:21:f7:
30:aa:af:67:b8:e4:11:51:8a:ce:5d:4f:de:17:3e:
da:f4:dd:90:21:28:99:56:b9:b9:6a:86:5a:0d:ff:
21:2f:3a:c5:d8:42:b9:dc:0d:67:c9:33:02:30:c9:
30:dc:c7:a9:73:57:dd:32:60:d4:16:8c:b6:da:00:
d8:4d:c6:f0:a2:1d:65:ab:27:af:a9:da:72:31:0b:
d6:ee:2d:61:a7:11:76:db:4f:0b:61:ee:61:89:61:
e8:9d:98:32:3d:a6:a1:da:58:4d:ea:98:e5:60:b2:
50:69:02:48:8c:a4:22:b0:2b:18:7e:a5:f5:ca:9d:
d8:3a:40:f6:89:5c:51:20:ba:b5:8e:9c:c6:0f:08:
ac:88:29:e6:99:0b:a8:a5:f6:4e:32:e7:0b:ad:38:
df:bc:cb:3a:69:08:65:49:3e:37:d2:60:f9:ad:1b:
6a:98:00:fb:eb:56:3f:f9:0a:ef:f9:59:67:86:49:
b9:98:0a:2a:95:31:21:e7:96:f4:61:8b:1a:c6:35:
39:93:2c:b4:d6:8a:e2:64:05:ce:88:5c:75:21:e2:
a5:d9:73:9c:5f:d2:3c:0a:2c:39:2d:9a:6a:05:ec:
ff:2a:88:5e:d7:4c:13:77:53:44:eb:31:ec:d7:3b:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:E3:13:A3:9A:00:05:9B:EF:6E:E5:28:1B:ED:4B:09:01:11:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FD841A712211F0AB4F8EC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.96.0/24
Signature Algorithm: sha256WithRSAEncryption
94:15:82:94:23:3f:56:bb:5c:38:60:2c:fb:52:cb:78:ad:3f:
0b:95:fb:95:35:25:34:74:0a:76:d8:06:d3:e0:e8:83:be:9b:
ff:3c:3b:9d:76:a6:56:f9:0b:64:df:71:b4:9e:4b:02:b8:45:
1a:87:f2:49:0d:35:53:a3:fa:18:7d:d9:d8:6f:c1:fd:49:f3:
ce:4e:84:46:0e:e5:68:a2:dd:57:8f:15:b4:c6:ef:e7:a2:88:
6b:61:ad:23:d2:a0:dc:9a:80:24:5f:30:32:cd:4f:0a:6b:88:
f4:a5:ab:51:de:ac:8b:89:98:80:5c:03:80:69:43:b5:c4:34:
ac:d9:bd:f3:f6:fd:e8:37:7a:0f:bb:0e:8f:dc:7a:0d:6c:56:
2e:e7:1b:52:ea:89:09:c4:34:50:9a:69:90:19:e6:e7:9e:d1:
3b:fc:f1:6d:33:38:a9:1e:25:04:c0:8f:3c:37:8b:76:94:c8:
c6:79:f9:92:94:ce:cd:a6:1b:f0:f0:36:98:88:77:03:62:55:
be:dc:99:7f:5a:ed:38:11:d9:42:d4:7d:71:8e:c1:a8:ff:ca:
26:bd:0c:53:00:ee:d7:29:01:86:82:5d:f1:6e:e5:e7:19:a7:
f7:2d:6d:97:2b:9d:7b:89:62:5a:0c:ee:37:33:53:e8:a1:27:
1a:d1:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:49 2025 by rpki-client