Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3520F74460811F0A36897B1DAE4EC9C.roa
File: A3520F74460811F0A36897B1DAE4EC9C.roa (raw, json)
Hash identifier: bP1bM+sJ0OdHc3Fl6NDQef89zKgwBJVIMQh6i5C3f/M=
Subject key identifier: E0:5E:2E:9F:EE:A5:07:99:05:13:45:78:22:44:98:94:AB:98:92:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3520F74460811F0A36897B1DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:38:57 +0000
ROA not before: Tue 10 Jun 2025 14:38:52 +0000
ROA not after: Sat 21 Jun 2025 14:38:52 +0000
asID: 141883
IP address blocks: 154.214.32.0/19 maxlen: 24
154.216.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99796 (0x185d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 14:38:52 2025 GMT
Not After : Jun 21 14:38:52 2025 GMT
Subject: CN=68484380-3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:1d:df:54:d6:3f:d7:66:ad:f4:1c:d4:46:
8b:68:fa:2a:ac:e4:56:68:8a:e0:aa:1e:d2:1f:82:
98:af:d2:13:67:aa:e2:5d:41:f9:17:80:dc:8f:37:
24:32:fc:28:f7:6c:f7:52:a8:9b:fd:80:52:bf:89:
a8:a6:6f:01:42:b5:77:04:57:3e:bc:79:0c:a2:b7:
7b:8b:43:45:8b:a4:67:75:3d:39:96:32:01:1e:dc:
26:c7:f5:f8:aa:f5:2c:1d:74:5e:1c:6d:01:97:d4:
a6:a9:20:cb:01:b2:5d:39:26:ba:9e:8e:f8:4e:31:
4c:14:74:29:ca:e7:29:04:fd:37:95:72:40:df:81:
3d:c1:12:ea:19:c2:95:13:61:42:48:9d:0d:90:d9:
15:84:13:ef:95:99:4f:76:68:44:e6:00:37:b5:ce:
d6:bb:85:f4:45:56:82:e9:7b:ee:a8:14:0f:cc:bd:
9e:10:5d:f8:e9:b5:66:d4:2f:78:93:6f:7b:2c:24:
fe:76:cd:4d:9e:c3:e4:d2:e8:34:74:5d:ff:2c:22:
3f:9b:bc:41:f1:21:35:aa:88:5d:ae:54:b5:ed:89:
d7:9d:9b:7d:0e:b8:f2:7a:68:f3:ec:52:f9:22:bf:
af:9c:70:92:0d:da:e9:47:78:93:b1:45:d8:c5:a0:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:2E:9F:EE:A5:07:99:05:13:45:78:22:44:98:94:AB:98:92:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3520F74460811F0A36897B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
47:8f:d6:67:b3:1e:a1:e3:09:39:ab:a5:1d:66:4d:a7:18:17:
07:61:38:ff:b2:c9:2a:3d:97:b0:40:d8:b8:8a:79:be:ff:ae:
c6:a9:90:18:8d:89:dd:c6:33:fd:b9:b5:c5:0a:d9:3e:b7:ec:
9f:73:ae:9e:d2:f3:e4:39:59:b8:ff:05:b2:75:7a:cb:1d:f1:
96:a9:36:f5:3c:ab:f8:dc:b4:27:d3:80:27:2d:1e:c7:35:66:
e1:c8:63:f3:ed:af:29:6e:f6:dd:51:65:ef:49:0f:5e:50:72:
4c:59:0b:8c:21:85:c6:eb:89:f2:00:da:3d:f9:95:1d:b5:bd:
75:90:63:98:ca:b2:3b:e2:85:ec:93:da:e7:40:1b:1d:f8:0c:
ee:13:28:0b:dc:9e:e8:77:ff:0c:ba:0b:39:56:cc:3c:23:07:
0f:72:f9:15:1a:de:6a:52:bc:5c:0c:0a:fd:f2:10:12:64:87:
b2:3f:6b:3a:35:ca:f3:52:ec:f3:91:6d:5c:77:3e:0b:1a:1e:
97:6a:20:4c:30:38:76:30:ae:8e:f0:e0:ac:0b:95:0b:c4:c5:
3e:a4:11:ac:2d:38:5b:ed:a9:de:1c:84:ea:c0:0b:38:b1:b2:
ae:7d:19:99:96:38:4f:96:aa:c5:fd:43:fa:7c:ed:b5:15:c6:
8d:a3:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:04 2025 by rpki-client