Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3338B90E68A411F091EF55EEDAE4EC9C.roa
File: 3338B90E68A411F091EF55EEDAE4EC9C.roa (raw, json)
Hash identifier: YggU67jAZM8EW8tzrcrFFKbegOPnrh0sr9o1jlZLrdU=
Subject key identifier: 25:64:59:3E:11:2C:C5:99:7A:59:48:E1:15:8D:25:CF:56:E6:0C:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3338B90E68A411F091EF55EEDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 15:38:09 +0000
ROA not before: Thu 24 Jul 2025 15:38:04 +0000
ROA not after: Mon 08 Sep 2025 15:38:04 +0000
asID: 62084
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102300 (0x18f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 15:38:04 2025 GMT
Not After : Sep 8 15:38:04 2025 GMT
Subject: CN=68825361-7bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:43:25:54:2d:92:ed:02:c1:fc:8b:78:5d:
f5:fe:4c:e9:a8:18:70:4f:1a:df:71:60:ca:5e:61:
ec:65:27:7b:6c:a3:a8:14:af:09:c6:3b:3a:49:0d:
c5:63:b9:73:3a:b9:56:1f:38:cf:d6:4b:49:c3:06:
d7:a6:80:0b:76:2c:a4:3c:a4:24:35:9a:6a:20:50:
d8:d1:7b:a2:21:87:b8:e9:de:67:4f:e8:f8:1b:63:
a7:96:b3:37:91:1a:6c:9b:2c:63:94:7e:98:4e:00:
ed:b4:32:da:0a:a9:e1:4b:6d:0d:34:7d:13:55:14:
55:bd:d6:20:c1:c8:26:9d:7c:f0:b7:2d:19:0c:12:
5f:ee:f1:70:88:ba:c4:42:a3:2a:ac:dd:5d:08:5f:
b1:1c:89:fe:20:2b:b3:76:ac:31:b3:74:dd:50:c3:
89:e8:6b:a8:74:6c:d4:54:a2:c6:4d:54:f0:e5:55:
ae:95:14:aa:fc:d4:d9:35:4f:44:c9:ed:05:19:77:
09:c6:17:4a:56:86:31:fe:9e:4f:16:97:b5:a7:1a:
02:60:ae:3a:71:84:0e:9d:ad:d2:b3:9e:7e:aa:31:
6b:cb:47:ec:3b:b9:e3:4b:bb:be:1e:b7:af:56:65:
f3:30:52:5c:a0:52:ee:62:62:bf:ad:48:d5:72:11:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:64:59:3E:11:2C:C5:99:7A:59:48:E1:15:8D:25:CF:56:E6:0C:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3338B90E68A411F091EF55EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
65:f0:96:e8:f4:8b:82:a5:cc:28:11:55:eb:60:b2:80:0d:8a:
5e:85:16:55:f9:cd:11:e5:a7:7b:6e:a9:69:b3:46:b9:62:7c:
39:7b:50:e3:5a:28:3c:76:c5:be:98:88:91:6a:8c:71:5f:50:
a3:1e:5e:d6:66:ee:8e:de:ef:52:5e:f6:0c:ca:08:4c:fa:a2:
9d:c9:3c:c6:3e:60:5c:80:45:3d:ca:97:8e:38:41:06:89:8a:
77:48:64:67:f7:72:23:95:25:08:ee:77:45:90:1f:da:e8:19:
e3:3c:52:b8:4b:96:a3:df:05:57:c1:40:0a:8b:73:5b:e8:39:
21:f2:f1:fe:46:40:9a:c4:b0:62:5b:ea:8c:eb:d8:fc:c2:2e:
14:35:bd:58:d2:08:ad:10:f4:e1:4d:61:13:b1:ef:f1:4b:1d:
13:69:67:3a:68:ed:79:25:18:02:2d:96:5b:19:66:4c:33:8c:
e7:1c:2e:8c:23:59:57:05:af:2d:f2:73:55:17:f1:6d:0b:31:
9d:19:03:54:38:e7:4e:23:71:70:9d:00:22:58:1d:d1:f4:e7:
c7:e8:75:8c:42:0a:6b:72:1d:89:e1:8a:a6:0d:84:85:d5:c1:
36:f9:ef:db:27:73:ab:7e:c6:3e:3e:c9:44:ee:ec:b0:13:a4:
eb:1a:51:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:32:08 2025 by rpki-client