Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35AFB396513311F0AC9F15EDDAE4EC9C.roa
File: 35AFB396513311F0AC9F15EDDAE4EC9C.roa (raw, json)
Hash identifier: AsPlyUpgVExOliqdjHQ08h8vMI2sQE4R7ZG1SjS6reY=
Subject key identifier: C8:BF:43:56:4D:35:2A:5B:48:81:A4:CE:B8:BD:C2:8A:80:5F:43:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35AFB396513311F0AC9F15EDDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 19:41:24 +0000
ROA not before: Tue 24 Jun 2025 19:41:19 +0000
ROA not after: Sat 09 Aug 2025 19:41:19 +0000
asID: 138915
IP address blocks: 154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.58.0/24 maxlen: 24
154.93.59.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.62.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100518 (0x188a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:41:19 2025 GMT
Not After : Aug 9 19:41:19 2025 GMT
Subject: CN=685aff64-2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:2b:99:3c:e7:ca:24:0b:9b:53:2c:c0:be:
38:76:28:f0:01:77:47:e3:42:79:23:05:e2:8b:b9:
8e:ec:3b:7e:55:a8:a1:59:20:43:4f:ca:94:d0:76:
fa:cd:b8:70:89:ec:67:aa:5d:df:91:3c:ab:12:80:
ae:46:d1:35:6c:75:fe:e3:ff:c1:f6:8a:6d:fc:80:
e1:35:71:e4:d7:c3:36:a7:ff:6a:81:fe:b4:40:5f:
98:68:07:f6:5d:74:20:74:3b:69:da:3a:96:84:3a:
e7:d2:95:51:58:4e:3b:d8:d9:5f:ff:b7:0c:d9:a9:
5f:00:fc:4a:0e:ad:07:0a:bb:f5:de:8d:a2:05:59:
dd:68:ef:db:02:8e:71:02:f8:cd:4a:f3:41:5d:0e:
0b:00:59:10:9b:d8:f6:79:72:41:4a:b2:05:b9:84:
b4:78:30:a5:47:35:b2:96:39:0d:55:ee:25:56:c4:
95:38:6f:6e:86:14:5f:2f:2f:72:ad:0d:31:e5:7e:
69:6c:52:a8:55:5b:56:6a:66:bf:53:88:1f:07:39:
3f:62:df:94:22:26:b6:28:2d:a1:39:f7:90:d1:9b:
66:61:71:ca:f3:bd:80:76:15:06:27:f0:2c:8f:d7:
e0:7c:61:9a:b8:0b:81:49:07:a7:e4:fd:19:bd:1e:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:43:56:4D:35:2A:5B:48:81:A4:CE:B8:BD:C2:8A:80:5F:43:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35AFB396513311F0AC9F15EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.32.0/23
154.93.50.0/23
154.93.58.0-154.93.63.255
Signature Algorithm: sha256WithRSAEncryption
5f:2e:12:7c:a7:61:24:51:40:c6:ee:01:47:3c:e3:2f:8d:11:
50:91:54:b6:6f:9e:83:0c:a5:8c:6a:dc:a9:bf:5d:5b:9c:67:
d5:69:f0:5e:71:e1:5a:8e:d7:36:15:b1:6d:e7:2d:63:61:69:
7b:d7:72:d3:d6:39:71:7a:70:dd:d7:73:5b:5e:46:6a:dd:38:
01:41:05:a9:c4:1b:47:57:99:2a:c0:22:82:59:e8:7f:a0:8b:
36:3c:d5:8b:fb:b4:cd:7c:15:88:ab:5b:69:cb:15:71:68:ed:
44:8a:20:b3:c4:9d:1f:c4:a9:d1:e3:e8:69:77:93:c4:f2:6c:
11:7f:fe:aa:53:a4:a0:4b:60:cf:a4:d3:19:20:96:79:4c:da:
e7:89:c9:97:68:c5:19:48:60:e4:ae:b9:04:79:cc:20:1d:a6:
bf:ee:7b:59:23:2a:10:6f:b1:1b:1e:62:cf:78:c0:80:d8:52:
41:57:1b:0c:e1:6d:fb:e2:2e:91:7d:bb:1e:c3:76:87:c8:ca:
55:9a:d4:9a:37:bf:06:62:d8:5b:a3:e2:54:4a:42:e9:bf:6e:
fc:29:8a:71:4f:27:17:92:be:93:75:44:0a:44:e7:68:a6:c0:
86:3f:ff:45:67:53:a5:2b:ec:6a:28:6d:14:d2:84:89:c4:2e:
5c:92:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:32:34 2025 by rpki-client