Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8803AFB8469C11F0A28AB37ADAE4EC9C.roa
File: 8803AFB8469C11F0A28AB37ADAE4EC9C.roa (raw, json)
Hash identifier: zZgF0vV4PmXlw58jD2/31BRJ2zWiiu3D99XtomGNiJ4=
Subject key identifier: 84:AA:FE:62:99:4C:54:90:FE:79:06:D1:04:78:57:9B:A3:6E:94:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8803AFB8469C11F0A28AB37ADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:17:36 +0000
ROA not before: Wed 11 Jun 2025 08:17:31 +0000
ROA not after: Mon 16 Jun 2025 08:17:31 +0000
asID: 152849
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 08:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99826 (0x185f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:17:31 2025 GMT
Not After : Jun 16 08:17:31 2025 GMT
Subject: CN=68493ba0-665b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:45:9c:74:5d:3d:36:3f:af:8e:60:02:33:
d9:d8:57:e8:ef:1b:bf:ca:8d:88:87:6f:e5:d9:d3:
67:41:34:e4:31:a4:09:23:e7:27:4c:af:d4:65:d7:
ff:5a:a1:1f:fb:dc:8d:17:be:8c:90:eb:dc:92:e9:
8e:11:18:19:f6:ca:4a:9a:0d:6f:01:e0:98:87:69:
c5:a7:7c:b0:39:5c:34:c1:52:cb:d5:bf:a9:af:12:
0a:db:70:a4:11:5e:20:54:a9:63:10:b5:b3:8d:ab:
7a:9d:20:dd:ed:a2:fc:a9:35:19:b9:21:1c:5d:6f:
71:15:fc:16:bb:cd:ef:50:05:20:2a:da:3d:74:db:
a6:7c:45:c9:0e:1a:e7:76:95:ea:f4:f4:48:a2:9b:
f5:e4:0e:15:ec:e0:11:47:02:99:14:2e:a3:22:06:
ae:fe:f6:93:42:df:6e:fd:3d:aa:6f:f0:c7:92:61:
ba:ae:7f:b9:36:b8:40:ff:0c:e6:2c:fd:4e:53:c8:
70:97:75:f7:10:98:e8:25:a9:2e:ab:42:16:76:fa:
91:46:6d:8a:68:96:5a:ef:8c:f2:e2:b2:9d:6a:2c:
f2:35:d4:0b:b4:2a:d6:bd:2b:34:70:f2:ec:3a:a6:
dd:66:eb:14:de:e8:1a:34:47:f9:67:87:4a:71:8a:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:FE:62:99:4C:54:90:FE:79:06:D1:04:78:57:9B:A3:6E:94:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8803AFB8469C11F0A28AB37ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
af:91:53:09:75:95:f0:51:f0:c4:49:52:3d:4b:67:22:f0:37:
87:40:39:08:f3:2a:78:f6:cb:29:6c:e6:9e:b7:ec:4e:2a:58:
7c:01:42:93:81:df:74:f5:f1:ec:9a:81:d1:78:b4:06:c3:be:
c5:83:ed:72:93:8a:af:3d:d1:0c:0c:89:1c:ef:4b:83:d0:52:
64:b4:73:21:36:86:b4:a3:34:d3:ba:04:33:63:a8:70:96:fb:
51:ab:ff:e7:3c:51:2e:64:58:41:3d:c2:8a:0c:eb:16:09:55:
39:71:44:11:8e:01:63:1c:f3:ae:09:57:a7:de:bd:b7:46:fa:
5c:9a:0f:45:9d:73:8c:82:88:53:ae:2b:3b:1c:d7:82:db:b9:
c5:c6:60:68:24:d8:02:30:2b:dc:13:33:b6:78:97:df:84:61:
7a:b1:b1:32:f0:3e:8d:59:76:49:db:3e:d6:56:ca:a3:d6:68:
9c:1e:d0:53:5e:93:e7:83:5a:c6:f1:fc:eb:5e:56:df:b5:7e:
38:c9:04:2c:9e:7f:e7:12:c3:74:34:3f:3f:0a:96:20:ad:f3:
11:eb:e4:bd:a8:41:7f:88:15:c0:dc:d9:76:3e:25:70:81:99:
1d:3a:3a:c8:80:97:d7:be:75:86:7a:3e:61:74:35:52:a5:b8:
48:51:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:45 2025 by rpki-client