Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134460446A211F09B5484A2DAE4EC9C.roa
File: F134460446A211F09B5484A2DAE4EC9C.roa (raw, json)
Hash identifier: AJvp4Ee48aIaImgfdaJFORnZsvqclrgqeSwYbKa0iJY=
Subject key identifier: E7:49:8E:E7:19:CA:FB:39:CC:6A:F0:73:DE:34:91:56:5A:C5:73:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018602
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134460446A211F09B5484A2DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 09:03:30 +0000
ROA not before: Wed 11 Jun 2025 09:03:25 +0000
ROA not after: Mon 16 Jun 2025 09:03:25 +0000
asID: 152849
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 09:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99842 (0x18602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 09:03:25 2025 GMT
Not After : Jun 16 09:03:25 2025 GMT
Subject: CN=68494662-6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:81:b2:90:29:60:a6:c7:d6:b4:26:4f:ee:
0c:ef:8c:e2:e9:5e:56:cc:63:5c:77:28:c4:8f:f4:
45:72:a9:a6:ca:4f:5e:9d:04:e7:3f:0a:d6:bc:f4:
5e:00:d5:2b:44:a2:78:a7:cd:60:7d:57:7c:03:7b:
6b:33:3d:92:ca:0f:ee:55:03:60:80:8a:95:ba:18:
d6:3a:27:18:55:91:34:87:10:04:35:34:69:b9:2a:
a8:e2:2c:e3:57:de:23:5d:9b:2b:98:83:ca:90:50:
14:d5:5f:38:73:ca:b8:54:bc:70:13:7c:23:4c:4d:
c5:1c:cb:69:69:45:93:ba:2b:36:53:e8:be:12:95:
fe:41:fd:b0:43:a1:ef:0a:16:cf:7d:ef:76:b0:78:
31:37:cd:5e:69:f1:90:b4:82:21:04:2f:17:c2:19:
60:e3:00:07:9a:4e:6d:91:2e:04:66:c6:98:f8:c9:
c1:07:11:47:18:be:7e:80:f6:a6:0b:b1:02:30:6b:
0a:af:9e:24:02:82:47:69:2e:32:9b:01:72:7a:ad:
4c:c2:c0:a0:aa:10:a6:bb:d4:b0:55:9a:a0:6e:7d:
c9:e0:65:54:2a:7b:19:4e:e6:2a:e1:b7:9e:34:18:
36:00:86:48:15:dd:12:1a:5e:71:91:82:e7:54:86:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:8E:E7:19:CA:FB:39:CC:6A:F0:73:DE:34:91:56:5A:C5:73:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134460446A211F09B5484A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:d1:6d:f0:85:1b:94:26:81:4a:ef:ee:bd:ec:46:3a:0d:38:
09:b2:01:0f:3a:df:1b:c1:94:43:cb:66:c9:dd:0d:5b:43:e7:
ff:96:90:12:31:68:17:09:c6:30:65:7b:3d:4d:5b:37:ae:37:
63:ef:1d:60:d7:dd:64:af:8b:4b:dd:5f:42:bf:81:bf:98:e0:
d4:44:6b:fc:e7:d7:7e:b3:2d:91:b6:08:4d:22:f5:19:ca:eb:
0f:c7:aa:b4:5d:ff:20:7b:5e:2d:39:7d:0e:cc:76:1a:06:6b:
67:bb:d7:9d:4e:50:2c:36:90:78:0d:e8:87:61:3f:8b:b9:ad:
0e:ba:e1:4f:72:fe:8d:86:0b:66:04:ee:6e:a1:63:77:43:c0:
f5:40:6b:03:8e:ab:32:5f:5b:46:34:a3:e4:97:5d:57:55:ea:
5f:08:61:2f:bb:3f:4c:26:96:00:d3:93:65:41:f2:a7:91:5d:
30:b7:60:c3:2d:a3:14:4e:71:20:8c:ff:3a:ac:37:a3:dc:63:
5a:2d:78:5d:d7:c1:d9:f7:66:8b:3f:20:2a:7f:9d:a3:33:44:
df:e5:5c:2c:26:9b:31:88:d5:c5:e9:d3:17:66:88:c9:5d:8f:
dd:b1:95:0b:8d:52:2e:25:1a:9a:98:25:aa:da:c4:4c:6f:8b:
2b:5f:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:01:31 2025 by rpki-client