Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084373EE6D3411F0B011DCA8DAE4EC9C.roa
File: 084373EE6D3411F0B011DCA8DAE4EC9C.roa (raw, json)
Hash identifier: Kc8LvbtNQF6YkSrM2qFbHMJxOPLSKUHSdPItYCl92UQ=
Subject key identifier: 6C:00:A0:FE:9C:4F:62:52:D8:09:FF:09:D1:53:BD:05:71:D4:D6:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019011
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084373EE6D3411F0B011DCA8DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 10:57:50 +0000
ROA not before: Wed 30 Jul 2025 10:57:45 +0000
ROA not after: Sat 30 Aug 2025 10:57:45 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102417 (0x19011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 10:57:45 2025 GMT
Not After : Aug 30 10:57:45 2025 GMT
Subject: CN=6889faae-ead0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:3a:b9:7c:e8:dd:e8:60:df:4f:ee:05:9d:
ba:8b:18:57:57:5e:73:a9:28:17:c0:39:c1:41:e1:
33:73:67:c4:eb:70:ae:da:da:3b:9f:42:b8:49:b4:
dc:2e:39:9d:8e:05:46:7c:e7:60:d7:f9:52:8b:c0:
51:d1:db:fc:4c:7c:a4:b4:96:0f:9d:62:ee:4b:2e:
91:88:fb:1c:ce:30:1a:70:4f:0c:94:61:e1:cd:ca:
92:84:e8:dc:32:e1:fa:87:d8:b3:33:e9:2b:88:65:
41:54:23:22:a5:a1:00:9d:29:85:7f:5a:d8:10:cb:
a1:8f:8d:55:ca:ce:e3:3d:36:2f:e5:09:36:6e:df:
95:45:10:c5:53:b0:51:2c:b2:d4:7f:59:b6:42:57:
f4:e2:da:13:a9:11:e8:5c:1c:68:fc:56:0e:cd:9c:
63:4b:99:0b:40:db:f0:eb:45:ae:a5:73:af:d8:04:
b4:c8:ee:ac:49:de:f8:36:c6:79:2c:cd:81:5d:98:
24:68:48:ab:fe:14:b7:97:63:fb:24:1f:89:91:36:
10:4e:b8:d7:36:38:68:f2:d7:b4:1a:a6:8f:ce:2c:
dd:17:72:3e:ca:c9:e3:9c:f8:84:96:a5:5a:e0:0d:
f1:25:6b:e0:62:f4:98:9e:20:de:f8:c4:79:09:ed:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:A0:FE:9C:4F:62:52:D8:09:FF:09:D1:53:BD:05:71:D4:D6:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084373EE6D3411F0B011DCA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
40:33:e9:d0:bc:36:99:33:f5:e6:fc:bf:44:09:88:61:0b:1b:
84:d2:9f:82:84:65:88:2b:3f:43:45:e5:6c:24:13:6d:45:02:
cf:f2:d9:82:3d:5d:1b:00:bb:b4:09:23:3f:c4:3e:f2:aa:ca:
5f:5e:13:3e:dc:0e:1f:90:e5:85:5d:5f:23:3c:f8:3e:bf:3d:
77:55:a6:1a:e6:62:c6:fc:92:03:72:b1:ab:0f:68:7b:fd:f2:
2f:c9:91:3f:87:3e:6c:97:55:0d:e4:22:2b:af:b0:f2:0c:a2:
09:0c:d8:f0:3f:5d:06:ff:29:02:05:66:63:e9:f1:86:6a:3f:
7e:97:3f:6d:a0:fe:30:83:7f:a3:45:b7:59:ee:a8:3a:90:35:
a5:a5:52:e7:9e:70:4e:2e:b5:c0:2e:af:bb:77:96:41:ca:1c:
b4:78:27:ee:a0:38:e7:5b:99:2c:cc:ec:3c:2d:8f:d6:76:ba:
b2:ea:40:6e:5c:d0:be:8e:71:60:0e:3d:14:4d:46:10:d5:2a:
95:16:84:06:02:8f:78:0f:24:f6:75:b7:f6:ea:18:82:32:e7:
a8:41:0e:8d:a8:ab:fe:26:bb:bc:0d:f4:ef:38:12:57:8a:e8:
0e:c8:ef:63:c7:34:f7:76:cf:f1:ba:7a:60:dc:67:47:0f:01:
08:46:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:15 2025 by rpki-client