Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6706F50483A11F081B55490DAE4EC9C.roa
File: A6706F50483A11F081B55490DAE4EC9C.roa (raw, json)
Hash identifier: supaxKGTFcgY1r48NumUYx00rkX0H/xynCT83VNhQ4o=
Subject key identifier: CB:79:AD:BB:36:2F:1D:E1:F8:47:F7:7E:19:65:A3:1E:C5:3D:E5:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018662
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6706F50483A11F081B55490DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 09:41:59 +0000
ROA not before: Fri 13 Jun 2025 09:41:54 +0000
ROA not after: Sat 19 Jul 2025 09:41:54 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99938 (0x18662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 09:41:54 2025 GMT
Not After : Jul 19 09:41:54 2025 GMT
Subject: CN=684bf267-2bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:59:97:2e:cd:90:1f:21:b5:46:2a:dd:e7:
ac:53:ee:7b:93:61:1a:00:3d:d7:8b:4b:2a:c3:55:
9c:72:62:0e:70:90:83:ef:c4:95:04:57:2e:63:08:
91:12:c8:29:d3:a2:16:80:bc:79:dc:b4:ff:4f:19:
a1:77:d2:75:ae:5b:4c:60:8b:d7:10:12:b0:e7:04:
85:eb:7e:45:89:c8:e1:26:07:fc:f5:40:3d:79:12:
1a:2f:ae:ba:1c:08:90:af:be:e9:7a:a9:2f:26:52:
a5:f8:3c:fe:90:a7:ff:24:fa:52:14:44:27:4f:8e:
ad:66:05:1d:eb:c1:27:96:71:2e:55:97:5a:f4:20:
c5:7d:84:31:74:aa:b9:ee:75:db:94:45:00:6c:8b:
88:ff:2d:96:63:ae:55:8f:ab:6e:97:a7:ce:ad:e6:
40:e1:c2:71:b0:19:61:83:8d:d2:fd:7b:a9:16:1a:
bf:9c:5f:e8:12:20:b9:cd:ab:a9:14:72:83:2c:ec:
0d:fc:86:91:64:4e:d2:c0:17:91:20:a5:92:ec:f9:
ad:8a:1a:45:00:83:d1:37:66:53:9d:d1:a1:8a:63:
c6:f2:bd:1d:c4:00:19:99:cd:c4:65:85:b2:42:d1:
c7:5c:5f:a2:fd:08:95:4f:ca:c5:f8:8a:63:aa:fe:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:AD:BB:36:2F:1D:E1:F8:47:F7:7E:19:65:A3:1E:C5:3D:E5:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6706F50483A11F081B55490DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6e:29:fe:a7:7f:56:91:62:09:9d:0c:03:a6:1f:fa:13:ae:
d0:cb:8a:55:ec:d9:bd:b2:1a:f7:c3:94:dc:9d:19:fb:56:01:
cf:f4:57:32:0d:08:fd:40:e2:2b:38:25:43:da:c7:b5:05:eb:
ee:1e:96:dd:19:f4:67:1f:20:2b:c4:22:84:d0:82:58:1f:17:
b6:5c:9c:53:a6:1f:5c:40:52:47:32:13:93:79:7b:c6:2f:49:
c7:83:17:4b:34:31:98:5f:01:70:b7:aa:b4:19:3c:a0:1f:3b:
c3:25:25:a9:41:be:50:30:90:d6:f8:6f:14:ba:3e:c3:98:40:
74:62:0f:f7:52:af:63:11:2c:4a:1d:29:05:3e:e5:f0:90:d4:
57:8a:fc:f9:6e:24:e7:e1:ac:f3:81:70:e4:10:ea:ad:93:4e:
4d:dd:3a:7a:e7:b4:14:06:76:7e:4d:de:63:b2:de:f1:59:d0:
a8:4c:50:08:88:ce:93:0b:9d:ee:56:2e:81:4c:19:5e:a7:ee:
8f:ee:17:57:a5:d7:01:6b:05:71:41:f9:e3:bf:d0:52:57:fe:
ba:de:a0:4e:a8:ee:ec:1a:8e:65:3f:60:60:b4:92:d1:35:c8:
07:35:23:28:c5:62:ae:45:e4:80:6e:be:a8:3c:9b:ab:d8:2f:
6f:bc:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:08 2025 by rpki-client