Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B10F31C3EE411F0A857D8C8DAE4EC9C.roa
File: 6B10F31C3EE411F0A857D8C8DAE4EC9C.roa (raw, json)
Hash identifier: QYjtHUX1385LRlMO2mfEg567zKufuLFrCvqemAG9Q/0=
Subject key identifier: 0D:13:CF:7F:AF:6C:24:27:78:0D:CA:46:4B:4C:EA:07:F8:DD:11:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01843F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B10F31C3EE411F0A857D8C8DAE4EC9C.roa
Signing time: Sun 01 Jun 2025 12:32:02 +0000
ROA not before: Sun 01 Jun 2025 12:31:57 +0000
ROA not after: Fri 27 Jun 2025 12:31:57 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99391 (0x1843f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 12:31:57 2025 GMT
Not After : Jun 27 12:31:57 2025 GMT
Subject: CN=683c4842-5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:af:e9:35:62:fe:22:28:fb:fd:8a:77:91:
5e:63:07:6d:ae:e3:00:3f:98:4d:b3:37:e0:7c:19:
aa:2d:95:46:51:ad:0a:55:29:80:79:a9:bb:b7:2e:
90:2b:9e:69:aa:ea:d5:db:06:ca:74:97:38:dd:6d:
90:e1:77:e8:67:58:bb:2d:fe:32:55:79:1b:d1:87:
d1:61:d7:e4:a2:c9:ab:bf:55:48:d8:6e:a9:5c:d2:
6c:8d:3a:ec:db:d0:07:de:8b:c4:eb:46:e0:8b:aa:
7a:99:23:a6:bc:1b:ad:34:bb:f4:5d:bf:0c:26:3b:
7c:e2:e5:66:ee:a2:b8:42:b6:1d:85:bf:79:81:72:
68:0c:31:b4:a7:89:97:de:5a:c9:a4:51:d2:fe:e6:
d7:62:94:bb:1d:c2:cb:a1:73:45:e6:2d:70:11:a5:
d2:00:69:d2:e0:93:b6:4d:d8:f2:89:2c:05:81:7a:
c6:f2:8d:e4:cd:cf:fa:c7:d0:3c:66:df:b7:59:34:
ae:b6:38:c0:60:95:84:83:21:ac:48:d2:8b:bb:53:
67:df:e8:3d:63:76:93:4f:89:b0:c1:4d:d1:ff:b4:
76:4d:dd:29:49:a0:a2:f3:c8:b8:7a:e7:86:2f:48:
4b:57:c3:f9:73:c1:f2:c4:16:78:51:1c:02:f0:86:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:CF:7F:AF:6C:24:27:78:0D:CA:46:4B:4C:EA:07:F8:DD:11:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B10F31C3EE411F0A857D8C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:91:08:04:56:26:27:e5:a7:0e:74:5a:4c:a6:a7:16:7e:c8:
dc:8d:39:0f:dc:c0:c5:be:a2:9d:b5:4c:c1:0f:a0:d9:c1:11:
53:92:53:f7:d4:f0:f6:e7:f5:1f:60:1a:ee:9e:59:fc:70:75:
15:4e:57:61:83:0f:f1:09:5c:fd:5b:56:6d:ef:a4:32:c6:6d:
ac:7b:0d:6a:a7:ad:ad:aa:bd:14:58:b9:fe:e0:73:48:3b:fd:
70:db:e3:44:b4:2b:33:8b:66:63:c8:d1:07:c6:30:f2:c7:76:
9d:8c:63:cf:ee:05:a7:42:6c:43:88:fd:5c:88:59:a3:a8:f0:
72:1f:ee:b0:69:87:48:86:79:51:7b:e1:c5:87:8d:5c:bf:cf:
44:54:7b:17:ba:4f:4e:42:dc:a6:34:43:c0:40:8c:6d:44:09:
2a:97:26:d2:b3:dd:29:34:3e:55:c5:07:d3:7f:80:0e:1c:ce:
4a:a6:f2:a5:18:d9:03:c8:98:08:80:f8:44:67:70:56:02:d9:
7c:6b:3a:c4:6a:44:4e:2e:78:0e:ed:d1:ae:5d:67:4e:c5:64:
a7:e3:d2:f8:ce:92:5c:76:8a:79:39:69:0a:42:e0:92:5d:5b:
c9:62:50:52:96:0e:ca:ef:01:d6:8b:30:98:f4:18:58:55:da:
38:94:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:11:21 2025 by rpki-client