Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59B2E679AB11F0A86A1FEBDAE4EC9C.roa
File: FF59B2E679AB11F0A86A1FEBDAE4EC9C.roa (raw, json)
Hash identifier: 1ZJ0Bi4p4/xmvpJtytSU8NFSMko5bo1iueuf01C7a3A=
Subject key identifier: 5B:80:1C:EB:4B:9C:43:37:E8:6A:E5:80:46:3D:DC:0F:7B:71:64:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59B2E679AB11F0A86A1FEBDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:46:48 +0000
ROA not before: Fri 15 Aug 2025 07:46:43 +0000
ROA not after: Thu 13 Aug 2026 07:46:43 +0000
asID: 137990
IP address blocks: 154.197.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102846 (0x191be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 07:46:43 2025 GMT
Not After : Aug 13 07:46:43 2026 GMT
Subject: CN=689ee5e8-15f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:2b:56:86:fd:48:67:76:00:df:9f:2f:07:
f8:2d:01:86:49:f6:f3:1f:13:4b:4a:42:f3:09:a4:
ed:a2:38:9b:9d:92:a3:78:b0:67:c9:89:82:0a:cf:
f2:cf:11:b0:9b:b0:49:75:5c:0a:b8:e8:ce:b0:8f:
74:02:21:d6:c5:c9:3f:25:18:24:d0:bc:a3:95:3a:
f9:61:c4:cb:fc:72:d3:13:7e:af:04:c6:f6:45:4b:
3a:af:94:12:ff:86:1e:69:4d:c0:2a:4f:c6:c4:bf:
c8:46:60:a3:75:c7:68:fc:93:8a:7e:f5:87:fa:60:
1e:e8:79:5c:bc:62:18:21:74:ce:f0:6c:56:2c:b3:
39:5b:0b:d0:ae:df:56:cf:a9:e9:c8:f2:06:5e:e4:
27:4e:d9:c7:21:26:64:50:ab:97:a8:05:fc:2f:cc:
4f:ef:fa:f7:7b:50:1a:fc:5f:46:eb:6b:6c:ac:7e:
39:48:02:a2:98:9a:54:ae:5b:56:d6:a0:b6:12:04:
0f:4a:04:f9:a8:64:30:89:71:de:17:44:62:af:66:
53:f3:30:7f:7e:2d:ff:99:46:15:22:19:0c:5c:a9:
2c:6e:89:74:67:ad:e9:50:78:bf:87:61:51:da:15:
63:37:63:bb:0b:b4:eb:32:3c:24:0a:2d:da:eb:c4:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:1C:EB:4B:9C:43:37:E8:6A:E5:80:46:3D:DC:0F:7B:71:64:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59B2E679AB11F0A86A1FEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:fd:15:eb:74:bc:cd:e1:76:14:36:4e:c2:ba:e1:c1:72:a8:
fd:a6:78:36:79:94:7c:78:3b:29:b1:92:be:82:d4:04:c3:73:
b1:09:a7:b2:e5:e6:3f:cd:9c:90:5e:4d:ec:b8:e6:29:86:04:
69:3c:20:2d:2c:30:68:49:f7:75:bc:10:aa:ab:eb:b0:f2:81:
2b:c1:41:58:d9:cb:36:2f:70:cd:07:37:55:f6:54:e8:67:4b:
1c:2d:a4:7b:00:38:ae:b1:95:dc:f5:52:17:04:e7:49:4c:a3:
92:c4:1b:15:6f:9b:e3:4b:91:40:fb:ed:83:c0:36:a7:eb:a3:
42:2d:59:c2:14:49:c5:01:b0:50:76:01:88:6a:9b:79:fb:d0:
05:20:37:5a:a1:05:71:db:59:9d:af:09:6b:28:9e:74:a3:96:
12:07:49:50:2c:3f:3e:d4:86:b7:a1:bd:b4:91:cc:6a:e4:6e:
f7:2b:29:d4:3e:67:ea:1a:fa:ba:27:b4:b3:d7:46:56:4a:0d:
a7:cb:7c:f6:18:b8:5a:b6:f6:a3:d9:56:b4:18:45:e8:35:87:
1a:49:04:c2:b0:a5:38:82:e7:ff:0b:3c:b9:82:77:ff:ed:20:
ee:81:c3:b7:4b:0c:06:d8:58:81:68:47:b5:51:92:c8:62:79:
77:75:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:30 2025 by rpki-client