Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56A2344439111F0AE0706B0DAE4EC9C.roa
File: D56A2344439111F0AE0706B0DAE4EC9C.roa (raw, json)
Hash identifier: 2bJjC5bdDpYZneU7aNZIEGwSOzlELBgQrkOzqqWB6iQ=
Subject key identifier: 3C:CA:ED:0C:E8:36:10:5A:9D:DE:A7:F3:63:45:EB:F1:CF:FA:56:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56A2344439111F0AE0706B0DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:23:28 +0000
ROA not before: Sat 07 Jun 2025 11:23:23 +0000
ROA not after: Sun 31 Aug 2025 11:23:23 +0000
asID: 399077
IP address blocks: 154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99668 (0x18554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:23:23 2025 GMT
Not After : Aug 31 11:23:23 2025 GMT
Subject: CN=68442130-a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:1f:52:c0:50:7d:f4:df:ef:35:90:44:0f:
d0:fb:dd:37:dd:c9:cc:e5:dc:eb:32:da:fe:0e:9b:
17:a2:aa:fe:97:bc:f8:fb:79:43:82:40:ca:a8:c9:
6f:d7:89:74:44:e2:90:06:a6:bc:37:83:63:d4:c0:
22:07:4e:18:1c:ae:e6:4c:b2:48:35:7d:e0:fb:f7:
f3:a1:27:41:35:f0:09:b0:eb:ed:87:1d:01:10:20:
21:65:4d:51:9f:84:06:7c:b7:3c:dc:01:80:9d:20:
02:6f:68:39:32:e3:1f:82:3c:e8:b6:79:8d:3f:cf:
89:ed:a9:2b:f3:bb:4d:06:33:87:b8:79:c5:d4:77:
42:e8:e9:c9:d3:22:5b:e1:e0:b9:91:59:05:70:57:
33:b5:72:eb:9b:24:31:ef:98:65:23:0d:e9:49:c9:
75:65:57:33:e7:0c:f1:50:20:5f:4b:74:41:1e:b2:
eb:d5:65:26:c4:12:69:06:ae:4e:11:12:ce:10:6a:
cd:c4:a1:7f:69:e9:7b:61:e5:66:2e:65:84:db:c1:
d6:4a:a8:11:50:7d:5a:fd:cf:25:f8:b6:1a:e9:e1:
40:c5:73:8e:03:5d:36:7b:67:0c:59:de:ac:bc:4e:
fc:c5:86:d1:2d:2e:d0:cd:56:2e:03:01:a3:77:be:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:ED:0C:E8:36:10:5A:9D:DE:A7:F3:63:45:EB:F1:CF:FA:56:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56A2344439111F0AE0706B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.87.0-154.91.96.255
Signature Algorithm: sha256WithRSAEncryption
c7:2a:fa:c6:f6:04:65:68:70:5b:64:77:3d:53:da:69:9b:da:
a4:1e:aa:95:fd:f0:e9:7e:db:86:77:05:c5:2c:37:49:4e:c9:
ff:34:cf:81:b3:d7:3c:bb:d2:a7:70:41:25:36:18:57:e8:2c:
11:dd:59:f8:5b:49:7e:d3:86:02:70:8a:20:2a:43:1f:48:92:
cd:77:27:44:53:77:76:79:1e:a8:30:93:96:ad:85:44:bb:0d:
ca:89:d6:1b:e7:ce:e0:f3:d3:e6:92:50:45:e7:5a:7a:35:19:
eb:1a:a6:6f:1a:87:7a:a3:a4:0b:58:6b:5f:d8:6c:95:2e:f9:
17:5c:3b:40:f9:7d:b3:40:aa:4f:75:41:42:84:73:79:e7:3b:
1c:3d:aa:d5:89:00:16:df:b1:de:cc:03:41:f8:e6:3c:7e:33:
6d:1c:07:da:dd:c7:09:5f:3e:c7:34:65:c1:45:de:93:d5:9f:
17:13:0c:ee:ac:9f:fd:97:60:55:25:67:b7:ae:a4:26:24:a5:
e4:37:7f:9b:89:96:2e:d5:d7:53:8e:76:c8:7f:d2:c6:f3:6b:
b4:23:25:ce:fb:98:bb:a9:20:64:a3:ed:4a:4d:8a:b7:51:06:
c5:7b:06:ec:07:d9:02:8e:07:b3:c4:a6:c4:19:4e:68:49:7c:
89:be:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:59 2025 by rpki-client