Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31AF603A543E11F0BFBDD5B9DAE4EC9C.roa
File: 31AF603A543E11F0BFBDD5B9DAE4EC9C.roa (raw, json)
Hash identifier: zD6XjFoK9sCp4A1FbtrxJQ0QI7wtfCDS3fF2Dnfrh4o=
Subject key identifier: 27:43:AC:20:AC:98:FB:89:16:C0:CE:4F:EE:17:72:82:89:FB:8A:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018965
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31AF603A543E11F0BFBDD5B9DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 16:37:35 +0000
ROA not before: Sat 28 Jun 2025 16:37:30 +0000
ROA not after: Tue 05 Aug 2025 16:37:30 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100709 (0x18965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 16:37:30 2025 GMT
Not After : Aug 5 16:37:30 2025 GMT
Subject: CN=68601a4f-eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:5c:7b:ee:d1:06:43:ba:0b:04:0b:b0:41:
04:a5:55:ba:8c:2c:a4:3b:47:5b:ce:0b:c8:12:4c:
d6:41:84:bb:c8:ce:56:15:4c:93:0f:f2:42:23:8c:
47:22:da:fe:13:4b:6a:d6:7c:13:8c:b2:d8:26:ed:
25:12:5b:45:0c:4a:ce:26:70:cf:55:33:80:9b:da:
ac:8d:ad:ab:09:62:8d:93:56:1a:9f:39:c9:d6:79:
cf:d0:4b:9f:e8:f5:96:87:69:d5:50:68:e9:26:54:
d0:2a:d4:84:f3:3e:65:8a:30:c5:74:0d:e2:58:e7:
90:66:1f:0e:39:ae:1b:7b:e5:01:9c:d8:f6:71:6b:
f7:4f:db:43:6e:f7:2f:9c:b8:85:69:be:f8:a3:b8:
46:ad:67:e8:28:34:4f:98:3f:20:73:33:e6:8e:15:
64:7d:ad:f2:d9:33:8e:b6:fd:57:93:ee:ef:6d:0f:
b1:13:e5:a1:47:d4:0b:5d:70:84:1e:e7:b8:90:88:
4e:9c:85:56:90:47:36:a4:c6:c5:30:63:46:03:e1:
ab:6d:c1:76:88:1a:7c:b3:91:80:d0:8f:98:45:83:
9c:2f:4a:b4:56:c8:5b:b7:ba:89:e8:70:13:0e:6a:
8e:53:83:c3:d5:16:2f:ce:32:09:31:45:f8:a5:9d:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:AC:20:AC:98:FB:89:16:C0:CE:4F:EE:17:72:82:89:FB:8A:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31AF603A543E11F0BFBDD5B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:91:d2:43:d8:91:a8:64:4a:02:f3:c8:d3:ee:13:ec:98:ee:
89:c1:5e:12:bf:c6:57:8b:f2:9c:27:1e:5d:10:68:87:a1:37:
3e:ad:e9:47:dc:20:4a:5e:81:c5:d1:13:a2:ee:b1:c3:b9:c8:
22:9a:c0:04:22:8d:65:18:6c:32:97:fe:e9:18:a4:bc:ea:21:
de:43:83:ee:48:ce:f8:ef:1f:7a:67:6e:a6:f7:3b:f8:81:36:
83:10:90:49:a6:1b:ed:46:bd:52:3d:a6:27:c0:9e:a0:a5:a6:
2c:04:8f:6b:95:f5:27:a6:1f:9e:2d:d0:84:ec:00:94:0b:9c:
fd:ef:b1:ef:b1:a7:b1:1a:4f:fd:9e:ae:ee:bb:bf:12:b0:c2:
4a:14:6a:0c:29:0c:dd:43:60:e0:10:93:b1:0c:00:73:e6:bb:
07:a2:ed:93:d9:64:d3:70:7d:db:cc:15:63:4c:55:a0:2f:a3:
eb:06:c2:a0:6d:29:59:00:45:2b:57:11:0c:88:ce:43:4e:38:
81:e5:b5:e5:66:51:fc:75:1a:a8:f0:0f:6d:2c:10:25:8a:5a:
15:a1:2f:98:bf:31:cb:8b:e4:80:97:7f:36:6d:5c:65:a8:64:
13:cf:b5:83:23:38:44:7c:c4:32:5c:93:e8:e4:89:68:d3:5e:
56:e2:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:00:36 2025 by rpki-client