Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22664F2453011F0A6D47EB9DAE4EC9C.roa
File: F22664F2453011F0A6D47EB9DAE4EC9C.roa (raw, json)
Hash identifier: XprjUY7FZ8bpeMAsylwuLakdRKFyS5C6z/J5zOQ19Ec=
Subject key identifier: 64:81:02:D5:0F:33:93:82:1E:DA:EE:39:13:D1:19:82:9E:BF:31:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22664F2453011F0A6D47EB9DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 12:54:58 +0000
ROA not before: Mon 09 Jun 2025 12:54:53 +0000
ROA not after: Tue 11 Nov 2025 12:54:53 +0000
asID: 400619
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99748 (0x185a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 12:54:53 2025 GMT
Not After : Nov 11 12:54:53 2025 GMT
Subject: CN=6846d9a1-b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:57:a6:30:f6:93:3f:19:c1:06:39:2e:51:
d5:8a:00:c2:e8:0e:0a:e1:02:18:ab:93:59:6f:0c:
55:61:a1:f3:a0:67:d1:49:c6:e5:c8:83:b0:75:d0:
fa:02:ca:2e:30:ed:48:5c:78:02:e3:de:c2:c0:f0:
b2:8e:86:01:1c:5c:a5:9a:24:be:44:55:6a:14:bb:
f6:01:93:c0:92:fc:71:af:5e:2b:22:d7:be:6c:3c:
cf:c7:09:11:e3:2b:a4:66:50:26:e5:ad:fe:35:83:
26:69:46:92:e4:02:6a:96:e8:54:c4:2a:c2:91:2d:
a2:1b:52:25:7c:5b:2e:47:d3:61:a3:dc:32:47:a0:
86:81:3f:46:52:fc:bc:ea:62:0e:51:2f:0c:84:a8:
02:37:5b:b1:5c:fe:d0:2c:83:5a:bd:eb:9c:50:43:
32:48:5a:37:91:8b:60:a1:d3:9a:a5:50:f4:81:bd:
97:33:c3:b1:01:10:ce:68:04:b8:e3:d0:d9:8c:d8:
ae:e6:0c:6b:58:4a:ce:c2:14:67:d4:10:53:ef:df:
7f:ce:48:77:f2:02:88:6d:30:d1:33:f5:18:a3:f5:
7a:9b:a1:35:95:eb:9d:84:94:d0:cf:c9:81:c2:a5:
1e:4d:4f:e5:ea:c3:83:e8:de:8d:19:c8:9a:86:27:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:02:D5:0F:33:93:82:1E:DA:EE:39:13:D1:19:82:9E:BF:31:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22664F2453011F0A6D47EB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:90:f6:b8:ca:4e:12:16:f2:2f:e4:8c:05:d6:d8:af:a5:6b:
69:93:01:24:75:c3:e9:aa:0b:db:05:f2:2a:9b:78:a5:42:91:
ee:09:96:98:27:a6:b4:3d:e7:12:f9:d3:7e:c4:7d:e5:75:0e:
3b:42:06:f0:d7:0f:79:43:9f:34:fe:96:16:fd:27:ee:da:ec:
10:33:b2:b2:b0:92:5c:b0:17:f2:77:4f:af:f7:39:1e:78:b4:
99:9b:64:45:13:c7:6a:57:fe:a4:4e:e5:1b:ac:bb:a4:b8:22:
70:f9:9a:2b:c1:bb:bf:86:4c:63:d4:27:1b:99:31:d1:a8:43:
23:79:65:35:13:ac:4d:f4:a6:7c:4a:f9:5d:0f:ad:05:51:b8:
13:19:27:0c:91:2c:0c:ee:a7:db:96:7b:c9:fa:a5:96:60:64:
f1:da:72:00:35:5d:39:4e:d2:f7:87:2f:dc:7a:90:7c:a0:b9:
09:a5:fe:a1:ac:80:01:2e:5c:07:12:a1:42:86:91:f6:73:1d:
d8:e2:47:75:9c:d9:e6:2b:82:44:76:36:8e:33:b3:81:3d:9d:
1c:92:77:fb:70:d8:0f:09:73:61:b0:ba:64:26:62:7d:dc:d9:
58:55:a3:20:ca:54:2a:fe:99:b3:9b:d2:72:d4:12:cf:8a:74:
65:75:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:30 2025 by rpki-client