Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348AB68C41D411F0BF65A4E3DAE4EC9C.roa
File: 348AB68C41D411F0BF65A4E3DAE4EC9C.roa (raw, json)
Hash identifier: GCLGNCMPfs0pz7uaaMgYZJxR+G652YwFTrgL6yr6U+0=
Subject key identifier: CA:9D:71:7A:D0:DF:61:D2:43:4B:4E:7E:44:54:6E:38:D7:5E:7F:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348AB68C41D411F0BF65A4E3DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 06:13:32 +0000
ROA not before: Thu 05 Jun 2025 06:13:27 +0000
ROA not after: Wed 25 Jun 2025 06:13:27 +0000
asID: 135097
IP address blocks: 154.197.128.0/17 maxlen: 24
154.197.128.0/18 maxlen: 24
154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
154.197.192.0/20 maxlen: 24
154.197.192.0/24 maxlen: 24
154.197.194.0/23 maxlen: 24
154.197.196.0/22 maxlen: 24
154.197.200.0/21 maxlen: 24
154.197.208.0/20 maxlen: 24
154.197.224.0/19 maxlen: 24
154.204.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99557 (0x184e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 06:13:27 2025 GMT
Not After : Jun 25 06:13:27 2025 GMT
Subject: CN=6841358c-fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:42:67:db:ac:24:5b:9e:21:86:3e:cc:58:
96:44:9d:9e:be:02:f3:7c:91:30:16:54:96:89:05:
fd:90:50:d7:74:aa:b9:af:c4:2b:46:8e:31:97:cf:
10:db:18:2d:1a:06:e6:20:29:c4:5e:ed:6f:b7:0c:
b1:d6:59:13:7a:ab:21:f8:11:5b:4b:66:14:a6:d6:
d0:83:37:2f:fc:27:24:6a:cd:29:97:aa:4e:eb:e8:
0e:cb:00:99:b2:71:31:7d:23:3c:6d:5d:97:34:f9:
da:3d:ee:15:7d:7f:cf:f2:af:af:30:cb:5a:60:1a:
c5:05:09:00:c0:14:7a:f8:c5:8f:c1:68:87:b4:7a:
13:51:83:0b:7f:9b:9f:90:1b:a9:1c:6f:fc:74:61:
bd:1c:5e:d6:de:89:e0:b6:b2:f6:1a:2d:47:a5:f0:
15:28:4d:31:5a:67:78:f2:62:0b:94:0c:ee:cf:2b:
ef:c2:95:d5:8f:33:ac:58:f4:95:1a:0c:4c:75:0b:
e4:b4:8d:69:4a:40:a3:b9:8e:91:04:35:a7:d3:18:
2f:3c:f1:27:4f:a8:03:47:ec:27:42:78:0b:fa:68:
8d:b0:db:a1:7c:38:a0:27:ce:3e:be:e5:41:f0:c8:
fd:68:5c:33:2e:2c:3c:87:9f:fd:cc:fa:5e:dd:dd:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:71:7A:D0:DF:61:D2:43:4B:4E:7E:44:54:6E:38:D7:5E:7F:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348AB68C41D411F0BF65A4E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.128.0/17
154.204.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c8:6d:70:f6:c2:06:0b:46:e2:b6:db:9f:bf:25:dc:f8:f7:f9:
31:6a:cb:b0:6c:1b:b4:a0:79:c9:5f:ea:5a:73:ea:a8:e5:30:
fc:08:a3:b1:f9:6b:dc:07:07:7f:09:ee:73:a7:7f:94:77:6f:
33:8f:a8:d7:17:d8:f3:2a:f8:f2:ba:d5:70:b1:7c:45:d1:f0:
ec:01:3e:b4:02:df:86:f1:f6:32:9e:39:f9:11:ec:48:6e:c2:
2b:66:c6:ed:9b:85:5d:5f:e1:1e:11:13:8f:ab:f1:59:06:2e:
c3:f4:68:ba:22:19:49:da:47:7e:40:f0:40:42:96:16:41:23:
a7:ff:52:f2:17:e3:8f:ee:fe:65:50:16:48:58:bc:92:7d:50:
50:ea:72:3c:56:f6:e1:a2:e9:26:62:23:0b:e5:51:34:e1:b9:
88:b3:e6:4d:c9:d0:bb:cf:1c:5c:2c:f7:82:af:64:05:87:e1:
4a:20:38:5d:e6:a2:fd:99:2b:88:7f:95:7f:7d:b1:69:e8:58:
f2:4e:c8:a9:de:98:f4:13:05:6e:d3:e1:53:44:08:1c:db:87:
58:b3:9f:67:70:3d:f0:3c:08:dc:74:0e:b9:30:48:0a:72:7a:
3d:01:d4:e6:f2:d6:f3:8b:aa:70:b3:b1:45:e6:c9:74:9e:46:
2d:36:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:20:09 2025 by rpki-client