Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2FD50469511F0BD2DE6C8DAE4EC9C.roa
File: 12C2FD50469511F0BD2DE6C8DAE4EC9C.roa (raw, json)
Hash identifier: ZEicaFYHGSXT6a5ztQJdIYQsBiNZENoPVU1umDbtrFM=
Subject key identifier: 3D:F4:41:5D:52:CD:1A:3D:D4:73:AA:BD:0A:C9:C5:11:0C:90:43:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2FD50469511F0BD2DE6C8DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:24:13 +0000
ROA not before: Wed 11 Jun 2025 07:24:09 +0000
ROA not after: Mon 16 Jun 2025 07:24:09 +0000
asID: 400619
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 07:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99814 (0x185e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:24:09 2025 GMT
Not After : Jun 16 07:24:09 2025 GMT
Subject: CN=68492f1d-b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:7a:4c:9b:3a:a5:c7:b8:3c:d7:ff:b3:9a:
84:e7:26:f2:bf:c6:20:d7:b0:62:ba:e8:b7:b8:25:
06:f2:c8:5b:1d:63:8d:53:7a:26:73:dd:b6:71:c7:
cc:ed:a4:5a:b1:ed:52:6f:6c:14:a7:a4:06:70:e4:
70:bc:51:5c:c2:f1:18:d1:e2:45:0d:4a:4b:de:36:
57:a9:65:84:68:eb:f3:e5:ab:11:df:2c:7b:01:ff:
92:fd:a8:54:62:5b:0e:38:39:36:b1:f8:d1:08:06:
92:2d:4c:e3:08:47:59:c3:f5:63:52:31:3b:78:ce:
4b:cc:a3:d6:c5:0f:ce:7f:ef:92:62:6d:4a:2b:c5:
7f:f7:8e:64:8a:72:b4:40:9d:f9:e3:3d:08:c4:9b:
af:d4:66:af:12:a0:00:27:50:0f:44:5f:6a:43:34:
d6:cd:28:90:d1:49:45:1c:52:80:e7:f2:09:c7:2d:
4e:13:84:0b:29:b9:15:f8:59:90:f6:71:3b:08:d6:
44:30:2d:84:70:1b:e0:7e:44:59:e6:d9:d1:d1:f5:
1a:9a:c5:1c:9b:ab:9a:8e:08:88:91:74:64:65:c6:
62:51:48:5b:d0:7b:88:c7:07:4c:6b:c3:bd:26:aa:
cb:96:47:a4:bf:16:a6:b6:e1:a8:63:59:b9:8b:41:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:41:5D:52:CD:1A:3D:D4:73:AA:BD:0A:C9:C5:11:0C:90:43:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2FD50469511F0BD2DE6C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:0f:f2:05:bf:3f:02:3c:50:8d:14:ca:63:63:d2:75:69:0e:
be:b8:38:3b:7e:23:a1:88:61:91:37:06:b7:de:01:e7:3a:74:
f0:c2:e1:84:48:f9:12:e5:47:46:6d:a3:7a:e8:72:d9:52:4a:
f9:2d:87:e0:a4:46:af:1d:b7:ab:d6:6a:4e:ec:d9:e5:fd:85:
2b:9b:d6:e8:9d:f1:cc:ca:08:84:0c:28:f9:0c:4b:df:62:0b:
fa:91:d4:6c:d3:54:b3:cd:ba:e5:16:6b:69:0d:07:45:b3:00:
f5:e2:2d:22:c9:bc:f5:9e:7c:9a:0b:0f:2e:80:df:23:0c:a4:
ba:9c:27:53:7a:90:51:35:5a:49:d9:69:2a:58:a4:8d:78:92:
09:03:eb:f5:2e:1b:fa:08:4b:c3:a5:8b:75:09:53:b8:16:37:
7a:56:71:62:d1:a1:00:b4:35:a7:cf:65:10:37:b1:af:b1:c4:
7a:92:80:2a:3c:61:3b:8b:61:1d:d2:42:07:ca:3c:7a:16:f2:
57:45:0e:4e:7e:8c:8c:df:90:02:86:6e:07:94:56:f1:0c:20:
08:91:94:21:22:9b:81:46:49:6b:49:cd:87:c9:1c:a9:13:72:
be:d5:b2:b0:78:0d:73:ea:94:f3:53:80:07:12:5e:2b:f8:b9:
15:54:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:17:58 2025 by rpki-client