Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37852B4842D211F08E46F8CFDAE4EC9C.roa
File: 37852B4842D211F08E46F8CFDAE4EC9C.roa (raw, json)
Hash identifier: pBqwy9JZ5buCUZXw/CdhRNxcl0g4qpu98FeZee4KoxM=
Subject key identifier: 4B:1F:A1:0D:71:5F:76:E1:D2:F9:D7:6D:3B:78:DC:5B:74:A1:6A:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018522
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37852B4842D211F08E46F8CFDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:31:49 +0000
ROA not before: Fri 06 Jun 2025 12:31:44 +0000
ROA not after: Sun 31 Aug 2025 12:31:44 +0000
asID: 399077
IP address blocks: 154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99618 (0x18522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:31:44 2025 GMT
Not After : Aug 31 12:31:44 2025 GMT
Subject: CN=6842dfb5-af84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:43:f0:7e:89:af:51:61:e7:e6:99:79:e5:
b0:01:16:08:08:9d:e7:46:ec:d3:b2:f1:5d:8f:02:
68:a5:0c:97:52:9c:7e:6f:b3:63:47:c6:53:41:fc:
42:55:62:d3:70:b2:14:65:fa:11:cd:fa:24:68:f0:
b8:32:61:b0:a3:7d:cf:09:d3:ff:be:7c:1c:ff:2f:
87:3f:a4:1a:8f:b9:8d:68:ae:5a:b8:81:e8:18:ed:
97:93:64:3e:16:df:bb:00:82:6a:47:67:6d:05:17:
a1:b0:e7:dc:a3:6d:f5:6e:48:07:4c:83:a5:7a:fb:
da:23:5a:1e:94:c8:fe:a7:be:d8:45:36:85:a5:f0:
d3:ab:79:eb:44:b6:ff:cb:c9:05:89:af:ad:33:0e:
20:ce:58:dd:97:e6:ae:89:82:e4:86:3d:71:b6:a0:
06:50:61:8d:75:d6:47:8c:a5:fb:d2:ce:a7:a3:2d:
00:d7:6e:2a:ec:35:16:d1:fa:6b:0d:08:6b:17:d7:
a5:71:5b:d9:46:4c:6d:c1:75:c6:6a:fd:29:1e:66:
bb:e6:05:48:c7:dd:44:c2:48:1a:4e:cd:cc:c6:8e:
69:5f:37:2e:fa:8a:48:1d:7e:ab:e5:64:77:c1:ce:
c0:c2:92:43:1e:a1:62:af:f4:12:14:bc:ce:4b:60:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:A1:0D:71:5F:76:E1:D2:F9:D7:6D:3B:78:DC:5B:74:A1:6A:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37852B4842D211F08E46F8CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.87.0-154.91.106.255
Signature Algorithm: sha256WithRSAEncryption
bd:ca:c6:a0:59:9b:91:ff:96:d8:4d:eb:fb:46:9a:8a:97:c3:
96:f9:94:be:cd:2f:fb:9b:a1:ab:e7:b1:ee:be:d9:ce:fd:90:
08:ac:3a:ee:93:7d:bb:93:fc:88:9c:ac:90:34:5d:bd:10:0b:
8a:0e:79:f3:7f:f0:52:1b:f9:eb:8a:b0:94:10:25:6f:c4:70:
d4:c0:e4:18:3e:44:58:7e:b6:e3:13:bb:28:82:6e:10:69:8f:
d2:f3:2b:d9:4b:66:18:30:c8:d3:e6:23:ee:ae:ff:aa:8e:e4:
89:84:a3:aa:fb:6b:45:11:47:ae:bf:55:94:81:e6:86:6e:ae:
9a:91:08:be:f4:91:fa:a3:c5:34:9e:57:d4:ef:88:79:d7:5c:
6f:37:4a:22:98:b5:92:31:6a:4c:0e:c6:a5:f4:b1:7a:f4:6b:
7c:dd:b5:19:df:25:71:c0:c8:69:71:08:ad:19:4e:5e:bb:27:
53:20:dd:37:af:4d:15:46:0f:33:fd:3c:2e:64:6b:9f:50:36:
9e:53:33:ca:7a:51:1f:6d:b4:a2:8b:38:a9:ef:d1:03:bb:91:
c5:55:f2:4a:b5:bc:42:5b:43:e0:d7:91:85:f7:04:9d:18:c4:
07:a4:8e:0d:bf:65:62:f5:08:24:0a:44:ac:4e:1f:94:39:8a:
bc:52:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:21:25 2025 by rpki-client