Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A78ECB045EB11F0BA3720F6DAE4EC9C.roa
File: 8A78ECB045EB11F0BA3720F6DAE4EC9C.roa (raw, json)
Hash identifier: C4mACf9AWSRSjbO0qAfknmTGivFjjGMYHQ05B6W7gXU=
Subject key identifier: 99:DD:21:E3:2A:36:22:DD:38:72:DF:A3:C0:7D:BF:25:65:12:75:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A78ECB045EB11F0BA3720F6DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:10:40 +0000
ROA not before: Tue 10 Jun 2025 11:10:32 +0000
ROA not after: Tue 07 Jul 2026 11:10:32 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99757 (0x185ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 11:10:32 2025 GMT
Not After : Jul 7 11:10:32 2026 GMT
Subject: CN=684812af-9283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:d1:c7:32:38:b4:22:d1:97:ca:f7:3f:3b:
83:2c:ce:00:5b:f7:5e:4f:fa:43:0c:2c:1e:3f:82:
0e:1a:66:0c:a0:64:78:ad:d6:1d:04:68:66:62:df:
40:95:4f:d6:86:2e:ec:c2:e3:6c:9a:41:b7:b8:ac:
ef:aa:b4:2d:47:01:de:0b:30:b2:44:c0:97:8c:27:
cc:d1:0e:a6:35:22:7d:e9:93:55:f2:09:bd:95:f7:
73:83:e7:74:20:1f:23:60:21:30:fa:67:9d:f8:bb:
f9:7b:43:0c:70:49:ab:4f:6a:cd:78:95:2f:8f:58:
9a:2c:cd:a7:0c:d1:8e:8a:74:7e:70:42:ad:8a:ab:
39:e5:12:62:8a:1b:a6:47:68:c7:16:97:ef:2b:d2:
75:ff:28:cd:40:1b:14:35:59:ea:66:80:8b:ac:7c:
7d:bf:71:80:c1:76:c5:52:8b:ef:eb:cd:c2:aa:44:
10:34:a0:00:0d:c9:91:9f:08:c3:0c:65:bf:cc:49:
7b:04:9c:2d:ff:94:15:22:45:e6:96:f1:1d:80:eb:
d2:03:ed:e9:b9:0e:47:a1:2d:9f:d3:28:3e:6c:85:
31:12:24:c3:d4:9b:78:20:7b:b2:a6:4f:90:5b:81:
5c:4c:40:50:5d:96:bb:68:37:73:90:a8:c5:aa:74:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:21:E3:2A:36:22:DD:38:72:DF:A3:C0:7D:BF:25:65:12:75:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A78ECB045EB11F0BA3720F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4c:fe:c3:2a:f7:cf:9a:ae:93:01:1d:a2:a1:c5:b4:94:7c:
5d:12:c3:a8:cc:60:8d:d9:92:45:4e:e9:22:b5:2a:39:f7:da:
1f:8c:64:7e:11:eb:10:3a:e6:42:fe:1a:9d:95:66:bc:c7:c6:
f2:8c:12:ce:28:7f:d4:d6:7c:1d:e9:67:9c:7e:ce:3e:f0:49:
17:83:8b:25:97:9d:2c:7a:26:de:38:fb:c6:80:ce:65:e4:d7:
02:df:8f:17:e3:33:15:c2:91:01:c8:31:a7:9b:57:a7:7e:77:
72:45:3c:6c:cc:40:b4:0d:f5:91:71:6f:c7:9b:94:bc:81:45:
ac:c3:29:d2:5b:1c:3a:89:bd:52:c2:65:fb:d8:1a:39:3f:94:
d0:5e:5d:96:27:45:46:a0:cc:8d:f6:c9:3e:18:af:49:d9:78:
ea:99:79:11:a6:03:f4:89:c7:6c:e2:8d:00:cf:ee:f1:0f:38:
db:c1:ae:6f:77:3a:2e:eb:76:7b:aa:20:b2:89:0b:d7:29:24:
2d:7c:1a:37:d4:f3:03:96:23:df:92:f7:fd:26:88:b5:6b:d8:
7b:08:32:ac:2f:16:d5:7c:88:8a:30:2d:68:f7:4c:fe:e5:02:
18:40:60:cb:bc:0f:5d:5a:60:44:18:c7:76:cf:1b:6c:5e:04:
50:4f:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:32:12 2025 by rpki-client