Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB6115C439211F095DD85B6DAE4EC9C.roa
File: CDB6115C439211F095DD85B6DAE4EC9C.roa (raw, json)
Hash identifier: osXqkBONKFxRv2qHf+43YrLrjrGxZENymA+bM09MsFg=
Subject key identifier: D2:75:7F:A5:EC:F7:C6:B6:6D:D0:06:BF:82:74:DE:5F:70:E2:90:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB6115C439211F095DD85B6DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:30:25 +0000
ROA not before: Sat 07 Jun 2025 11:30:20 +0000
ROA not after: Sun 31 Aug 2025 11:30:20 +0000
asID: 399077
IP address blocks: 154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99670 (0x18556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:30:20 2025 GMT
Not After : Aug 31 11:30:20 2025 GMT
Subject: CN=684422d1-fe63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:65:66:9a:5c:db:36:8c:ce:16:ae:35:63:4f:
6e:63:9a:62:64:99:17:2c:81:b5:4b:77:43:2b:eb:
56:ec:4f:a5:03:30:6e:7b:74:af:dd:08:22:31:6d:
a1:48:3e:bf:a6:e7:5a:69:d3:d9:4f:48:0d:06:df:
94:a4:f8:ce:cf:90:dc:44:00:5a:7e:d3:c0:a0:f5:
c9:c3:37:5e:69:9a:7e:3e:1f:82:a4:87:01:52:7d:
d4:12:37:3c:50:bc:c9:20:07:c5:d9:44:0d:2c:f6:
f6:cb:37:11:01:fc:4f:26:a1:b8:61:a1:d0:e9:fa:
69:b6:47:be:04:4d:6e:fa:42:96:26:b0:c4:68:5a:
3a:6f:fd:8f:1b:96:52:1e:79:ff:fd:57:7e:4c:ec:
71:6f:fd:81:a3:3e:64:2f:05:42:c8:aa:3d:dc:91:
16:a0:39:15:cb:e9:ec:ea:b2:6b:74:02:35:98:af:
37:97:6a:74:d5:f3:5a:a3:61:b5:74:ab:81:1c:52:
30:6b:ae:60:9a:1d:3d:a1:58:10:3f:be:dc:7a:1e:
f9:da:e7:50:e8:00:f1:5a:82:0a:a6:2f:c8:7e:94:
94:27:a9:d2:58:f3:98:fe:1d:53:59:ed:5c:af:b2:
e0:9c:d0:55:88:78:87:bc:57:e5:2c:88:f2:64:f8:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:7F:A5:EC:F7:C6:B6:6D:D0:06:BF:82:74:DE:5F:70:E2:90:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB6115C439211F095DD85B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.77.0-154.91.86.255
Signature Algorithm: sha256WithRSAEncryption
6e:39:aa:34:aa:9c:ce:18:b7:b4:c8:1a:c3:e2:e7:56:ac:b4:
37:3c:c8:27:24:5c:76:16:13:2a:db:b9:11:29:fb:d8:9e:f8:
7e:71:44:cd:60:9a:1a:c0:0f:a9:87:6c:4f:6a:45:fe:70:29:
92:ce:1a:5d:84:f7:d9:e7:f0:a1:38:32:3d:0d:28:64:4b:24:
62:a6:4a:9c:fc:c0:8d:f9:1d:ef:f3:25:73:bd:3a:56:14:6a:
e6:29:b8:40:c1:a2:3c:88:f2:d0:67:5e:e8:47:d5:20:de:f6:
10:27:b8:3f:06:29:73:ec:2e:38:b5:49:52:77:a5:da:30:d6:
e4:00:f1:07:70:91:88:98:ae:65:b7:6e:c8:fc:8a:66:95:c4:
18:e4:d8:0e:ab:53:54:da:7a:75:e2:92:fb:3a:b8:5d:0e:36:
9a:e1:67:b7:14:20:ec:1d:91:53:3d:37:0d:ff:e4:14:a6:95:
8c:b6:4a:e6:8b:0a:c2:b6:4e:f0:fa:f8:5d:e5:77:a6:77:f4:
0c:10:7a:fc:36:5d:78:9c:08:1e:35:d0:21:85:36:78:e0:a2:
a7:0e:12:92:fe:50:5d:77:38:1f:a9:7d:95:25:7b:ee:98:26:
94:37:5a:62:74:43:32:14:9e:fb:0b:a2:ca:99:fe:c1:26:e0:
fd:4c:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:57:59 2025 by rpki-client