Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B89D3D857CA11F0AB0D07D4DAE4EC9C.roa
File: 0B89D3D857CA11F0AB0D07D4DAE4EC9C.roa (raw, json)
Hash identifier: PDCwbheK48VeEMLSmKtUDFspHtLGkbDKK4R7uMTuwRo=
Subject key identifier: 94:30:E2:0B:51:BC:4A:D5:F2:0D:A7:FB:77:D9:83:E0:B8:7C:22:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B89D3D857CA11F0AB0D07D4DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 04:56:14 +0000
ROA not before: Thu 03 Jul 2025 04:56:09 +0000
ROA not after: Thu 17 Jul 2025 04:56:09 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
154.216.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100847 (0x189ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 04:56:09 2025 GMT
Not After : Jul 17 04:56:09 2025 GMT
Subject: CN=68660d6e-5855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:a2:ac:09:0b:c2:de:5f:17:be:ad:09:4f:
ef:32:6b:45:86:ab:69:0f:42:af:16:d4:5d:60:60:
bb:3b:3e:41:16:0c:ea:4f:61:62:f5:13:5e:b7:f2:
f9:d4:a9:ac:82:48:4a:62:36:29:be:29:13:d1:13:
e2:08:16:f1:de:db:98:14:19:75:1b:47:2f:09:0f:
b0:7c:83:9c:97:45:38:77:04:3d:8e:6d:15:64:92:
2d:41:30:c8:82:bc:45:9e:0d:14:d8:84:f3:bc:15:
6b:01:fc:57:fb:cd:c5:ea:39:ef:9e:c4:fa:ea:37:
6f:f2:23:e6:75:11:32:dd:57:b9:4f:da:6b:62:21:
00:39:0c:d5:f3:83:a2:42:a2:80:70:96:dc:66:69:
34:f0:e6:e9:f6:c2:8b:fa:3e:84:cd:32:c7:28:e3:
9e:53:5f:ac:2f:84:fd:de:04:ca:48:76:3c:f5:b3:
4f:8e:75:a5:43:a0:6b:08:ed:1f:f3:cd:8a:a2:cd:
2b:c1:ef:4b:48:7f:f7:3f:d5:78:9a:a0:bc:b8:74:
e2:eb:33:33:f6:93:cd:42:f8:4b:a1:a8:22:9d:a9:
64:19:77:b8:11:9d:f4:89:1e:2a:f7:e9:d8:67:17:
c0:d0:03:1d:bd:18:b1:71:d7:d1:1b:74:c8:2c:2f:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:E2:0B:51:BC:4A:D5:F2:0D:A7:FB:77:D9:83:E0:B8:7C:22:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B89D3D857CA11F0AB0D07D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:ac:52:7b:b5:71:33:7e:63:83:c5:10:a8:eb:3d:3d:5c:76:
e0:c7:4a:2a:8f:9b:21:e2:13:30:b5:41:95:2a:fc:e5:e3:18:
e8:78:10:75:df:fc:f7:30:9f:7a:23:19:71:9c:1a:79:c6:9a:
fc:bf:d0:28:b5:a8:ff:c8:84:6d:0b:30:7e:0e:85:13:7b:7e:
5b:c5:50:53:bd:49:83:dc:f5:c0:a7:40:a6:e4:01:07:26:4e:
e2:61:0e:2e:2c:db:a1:17:40:4a:34:01:d3:8f:c4:dc:d0:30:
4e:17:14:74:ab:9d:89:6c:95:21:c0:fb:75:79:dc:9b:ab:08:
f3:58:45:4b:22:cb:08:cd:5c:0a:c0:60:a0:c6:34:47:59:ca:
d7:3d:bd:c4:8f:11:72:fb:86:9c:ce:d5:8c:b2:5b:8a:99:9b:
90:3d:00:d5:ec:49:9c:0b:5d:68:de:1a:32:b3:ed:ea:61:2d:
5a:8b:ee:49:76:be:f2:97:01:c8:76:57:be:87:80:ba:79:66:
08:73:b0:a0:92:68:31:37:41:87:8f:16:44:10:00:3c:93:27:
12:4e:e6:9b:83:dd:7d:7c:9a:76:38:a1:f6:41:a8:d7:15:8e:
9e:91:c9:e9:ff:2c:37:6a:e7:71:e5:6a:c8:65:c7:02:70:05:
0f:c7:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:23:18 2025 by rpki-client