Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9556CB78473C11F08A7D4B85DAE4EC9C.roa
File: 9556CB78473C11F08A7D4B85DAE4EC9C.roa (raw, json)
Hash identifier: Bv1qXkuO1MQ78OLTxrERoSsSqy1GQoDcWZtLcCQIoek=
Subject key identifier: 5A:D2:81:E3:EB:CA:1B:B6:3F:EE:54:26:E8:3E:63:83:16:A5:E9:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01860B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9556CB78473C11F08A7D4B85DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 03:23:18 +0000
ROA not before: Thu 12 Jun 2025 03:23:12 +0000
ROA not after: Wed 02 Jul 2025 03:23:12 +0000
asID: 21859
IP address blocks: 154.222.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99851 (0x1860b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 03:23:12 2025 GMT
Not After : Jul 2 03:23:12 2025 GMT
Subject: CN=684a4826-c252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:0f:3e:57:d7:34:49:56:3b:e7:52:48:8c:
d0:3b:e9:ab:bb:bf:ed:1d:1d:70:ea:73:fc:99:88:
77:f9:14:f0:d8:9b:af:b9:5a:4d:d8:32:67:e8:e9:
9a:a6:01:63:32:1d:64:4c:59:1f:5b:be:36:4a:de:
0b:2f:0e:2b:20:3c:6f:28:ac:07:8a:86:58:7c:c1:
15:6e:d8:a2:15:c8:2d:a3:fe:4a:e9:3e:0b:33:2d:
fd:20:e4:3d:8d:38:c3:04:70:cb:a6:62:d9:2d:90:
5e:ca:59:e3:96:b7:2b:6e:a1:32:ff:8f:4f:8c:50:
44:23:90:2a:f6:19:60:69:c2:f3:14:36:e0:cb:33:
8d:31:79:3c:f8:4d:1c:f9:51:ae:56:a9:44:9b:89:
2f:46:d6:d7:43:d2:e7:47:b5:b4:f1:c9:85:f4:9f:
8c:06:eb:ca:ad:01:f0:10:30:09:64:d7:13:18:b5:
fc:7f:3d:9e:5b:83:c4:4e:6f:58:7a:5d:f4:77:be:
c9:c1:19:82:dc:d7:9f:a6:ac:ec:55:80:7b:eb:c6:
61:4f:16:7f:ef:97:fc:30:10:3f:3b:35:11:69:30:
84:99:61:56:94:1f:97:6f:d9:f7:33:ce:90:dd:f0:
33:a8:f1:ab:12:61:7f:d7:da:27:57:b3:ee:d8:aa:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:81:E3:EB:CA:1B:B6:3F:EE:54:26:E8:3E:63:83:16:A5:E9:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9556CB78473C11F08A7D4B85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.87.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2f:fe:1f:0f:33:47:f9:ee:41:b6:6f:c2:91:f4:7f:51:e7:
fb:66:1b:29:d9:22:f2:b3:49:42:5d:5b:72:fb:10:d7:b1:e0:
7b:49:cc:cd:47:94:87:9f:7a:c6:8f:68:da:89:a7:52:dc:f8:
cc:69:dc:8b:a4:8d:b7:8e:e8:ae:b1:0c:79:80:95:6c:67:86:
69:ab:b8:6d:34:dc:de:c9:46:d6:9e:e6:ed:7f:27:b2:7f:c2:
25:95:4d:8e:52:3f:c7:c2:ad:dd:1d:e0:c2:4c:7d:aa:98:cb:
ca:62:ed:eb:7e:64:00:01:dd:7c:09:8d:04:26:65:52:a2:9a:
b9:ba:0b:19:7a:60:2b:ce:80:04:06:9d:ea:1f:1c:85:fe:a3:
36:77:44:51:9b:eb:38:57:18:7c:8e:dc:00:72:e3:4a:2f:a6:
8d:f5:8e:bc:e1:c0:ac:0b:14:cb:41:69:68:5a:38:6c:45:cf:
5c:00:00:69:72:cd:04:d5:c3:c2:00:7b:fe:dc:9a:d4:64:aa:
f0:d0:ce:b1:ef:07:07:26:0c:a2:cd:ea:c6:7c:35:ad:9d:81:
ee:4e:3e:e9:ff:17:4d:a1:8f:9a:a0:ae:e0:04:c2:73:07:01:
95:fc:b0:93:59:14:ac:4e:a3:9f:a7:16:74:22:d8:39:ec:8e:
d5:ed:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:34:53 2025 by rpki-client