Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0596D866381E11F0AFF47EA8DAE4EC9C.roa
File: 0596D866381E11F0AFF47EA8DAE4EC9C.roa (raw, json)
Hash identifier: plFTvIFLdEZXduh5crETGybBIs46GfwoHyu2Qjj8MKQ=
Subject key identifier: 06:BF:B1:B7:07:17:FF:5F:28:72:79:92:55:A4:20:D1:76:98:32:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01826B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0596D866381E11F0AFF47EA8DAE4EC9C.roa
Signing time: Fri 23 May 2025 21:36:45 +0000
ROA not before: Fri 23 May 2025 21:36:39 +0000
ROA not after: Wed 17 Jun 2026 21:36:39 +0000
asID: 18013
IP address blocks: 154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98923 (0x1826b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 21:36:39 2025 GMT
Not After : Jun 17 21:36:39 2026 GMT
Subject: CN=6830ea6c-2486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:b0:2c:0b:45:19:52:34:a7:9d:8a:3b:9f:
e6:eb:35:d0:fd:c8:2e:48:61:cd:3e:2a:1a:b7:5d:
b2:66:09:9d:d7:cd:5f:9c:9a:3b:c1:68:53:7b:64:
61:52:9a:65:ba:28:7a:56:8f:54:ee:d5:4a:26:73:
7d:d7:72:7f:43:2c:41:cd:ef:db:ad:97:43:ce:f2:
44:ce:f6:10:c0:9c:03:40:ac:14:7e:28:cc:93:2d:
0d:85:62:f6:30:57:18:1a:29:5d:37:05:16:4f:58:
20:ea:8c:76:37:5b:78:43:d4:1c:dd:c3:e6:0a:db:
d3:20:12:ad:a9:c0:e9:6a:9e:c7:77:81:db:dc:04:
f4:7f:a8:61:9f:5b:7f:a5:dd:f4:ec:28:8a:3f:af:
9e:30:db:b9:bc:98:bb:07:6b:aa:b3:dd:a5:9c:e3:
48:d6:26:fc:7e:24:f0:e4:31:e9:bd:70:be:3d:dc:
e1:4e:50:bc:50:b9:67:83:41:d0:23:9e:c9:b9:90:
aa:61:b5:65:4d:f0:56:9f:fb:84:6b:ec:a3:dc:82:
c7:ed:45:1d:41:8b:98:13:3f:c5:a5:e9:72:9a:11:
69:e8:fa:e4:7c:a4:f5:be:35:1e:ca:f4:72:ae:35:
0f:6d:51:9d:74:1b:70:79:18:6d:81:c4:ae:bf:f3:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:B1:B7:07:17:FF:5F:28:72:79:92:55:A4:20:D1:76:98:32:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0596D866381E11F0AFF47EA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
53:b4:f6:29:ab:9c:11:37:f5:df:68:c8:1d:55:05:b5:d4:42:
70:ea:c1:84:db:6a:02:45:ba:22:9d:6a:68:8e:4d:7b:bd:61:
cc:cd:75:90:69:d1:81:9d:31:e5:0c:81:ac:79:f9:e7:39:16:
af:43:c8:ae:fe:3a:53:7c:0a:3f:87:c4:72:8a:fd:35:4c:12:
68:de:50:c9:61:5f:2b:ce:a8:3c:ae:71:c0:ac:6c:c4:a9:9c:
98:f5:5f:98:37:ee:5d:e1:78:5a:d2:b2:65:e5:30:0a:7a:44:
d5:19:a4:4d:1a:e4:82:35:a7:b8:1b:69:d8:81:4d:90:b7:37:
57:4d:53:7f:72:55:cb:22:a0:8a:df:be:d5:d5:9c:a4:48:de:
2b:db:82:c3:a3:2c:e9:8b:e5:92:46:a4:27:a4:1e:88:02:83:
d7:b9:68:8f:16:9e:10:5e:1d:eb:14:53:91:99:f1:ed:d1:47:
0f:a3:18:f7:b3:23:fd:2d:a3:f8:75:d4:cd:dd:1b:ad:9f:2b:
5a:82:c9:e9:69:fa:50:50:31:9d:1e:54:b4:f2:e1:30:5f:71:
e8:90:9d:d1:1f:f6:34:f9:40:d0:09:47:8e:7f:ba:8b:f1:68:
58:50:ca:1d:dd:e8:54:22:5e:aa:3a:3e:bd:9e:d0:c8:78:1e:
d2:b0:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:28 2025 by rpki-client