Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0453F6924B6911F099CA86BCDAE4EC9C.roa
File: 0453F6924B6911F099CA86BCDAE4EC9C.roa (raw, json)
Hash identifier: Rg3MsNbQtaIatfIWD4VP7rK0PajOegFq4Etny33oZFE=
Subject key identifier: 7A:0B:94:3C:9A:02:FB:D8:33:AB:D1:F8:FD:E9:54:93:67:36:22:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0453F6924B6911F099CA86BCDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 10:51:27 +0000
ROA not before: Tue 17 Jun 2025 10:51:19 +0000
ROA not after: Sat 27 Dec 2025 10:51:19 +0000
asID: 18013
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100103 (0x18707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 10:51:19 2025 GMT
Not After : Dec 27 10:51:19 2025 GMT
Subject: CN=685148af-b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:b9:d2:05:9c:43:da:e0:11:39:59:2c:d1:
89:f3:26:cf:b1:8c:a4:5a:09:86:60:72:c9:d2:c7:
71:98:52:39:a2:6a:df:cd:e2:f8:a6:d0:74:e6:0e:
4d:2b:47:27:38:fa:8d:c7:a5:4f:73:a7:6b:4f:6d:
5d:93:76:82:be:a9:87:68:fc:c6:c4:a5:85:00:64:
ec:e2:56:a8:c1:e6:e8:22:11:7c:2f:fb:3d:51:03:
02:98:8b:fc:13:fe:b5:ab:35:e8:64:e8:d3:85:94:
95:2b:e2:01:93:fd:2f:3f:3d:9c:06:11:fa:3b:dd:
ad:5e:71:1b:a0:41:c0:30:15:f8:c0:c4:34:9d:c0:
b7:2f:90:b8:fb:3a:3f:bd:fd:a6:03:c0:c2:f4:42:
e6:d4:42:85:ac:94:35:50:bc:e3:b6:93:5e:86:b9:
bd:0d:b9:6e:7d:5a:c5:ee:80:f1:da:5f:88:60:e3:
8d:80:5f:d5:08:cd:2e:15:26:8b:33:08:47:79:65:
56:66:e7:b5:89:e1:d7:e4:2c:31:54:d5:17:8a:81:
04:5c:2d:dc:bf:10:17:e8:d9:4f:1b:ac:90:1a:76:
08:9c:0c:ab:5b:b0:2c:26:53:f0:4f:b2:b9:6e:33:
6a:5a:72:3c:10:b9:35:07:3a:8c:b7:fb:e4:16:84:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:94:3C:9A:02:FB:D8:33:AB:D1:F8:FD:E9:54:93:67:36:22:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0453F6924B6911F099CA86BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3f:13:8e:cf:37:ab:08:6e:70:39:3f:32:56:17:86:a8:41:
31:db:dd:96:8b:33:29:67:4a:b2:82:b0:78:99:5e:47:6c:ac:
d8:23:5b:82:9d:a8:38:fa:c5:11:0f:96:76:eb:39:b2:97:86:
48:30:21:a0:69:fb:fb:92:37:7b:44:9e:1d:54:1b:63:97:91:
a9:8b:96:b5:3b:e6:c5:f0:a2:d8:4b:1b:7b:9c:9d:74:11:e4:
29:bc:12:5b:0b:7b:03:40:54:1b:d5:73:40:02:8d:4c:5a:13:
54:b3:45:58:a8:b5:43:8d:98:b1:0e:f0:e9:f6:51:18:1f:2b:
77:85:eb:21:db:2a:ab:6d:7c:c9:57:05:a1:2f:e9:cf:ca:4b:
c2:a1:21:fb:74:76:5a:6f:53:a3:f8:eb:a0:3a:97:0b:38:d4:
0f:5c:62:a9:53:67:82:f8:59:56:f1:5f:ba:f2:2a:62:bb:a7:
1b:70:08:86:a9:a3:be:6e:4d:00:a2:bf:b7:c9:0a:11:27:5a:
e6:b4:5e:7a:66:2a:39:70:ca:3b:41:80:60:65:b8:66:44:3c:
de:c0:05:87:81:38:3c:59:df:bb:dc:23:b4:42:a1:70:0e:bf:
2d:44:b1:2f:f6:b3:32:e3:dc:d8:93:b6:67:7d:b8:1a:e6:bb:
f8:9e:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:16 2025 by rpki-client