Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362857E0519911F0B8AF4993DAE4EC9C.roa
File: 362857E0519911F0B8AF4993DAE4EC9C.roa (raw, json)
Hash identifier: BuxkB45i7UfMeEn6Z6vwaFa2uj9ssjPuY0rqTxFtKoA=
Subject key identifier: F0:61:CD:6E:67:F7:4D:02:BA:19:74:8C:13:9F:23:60:A4:A0:6A:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362857E0519911F0B8AF4993DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:51:33 +0000
ROA not before: Wed 25 Jun 2025 07:51:28 +0000
ROA not after: Thu 31 Jul 2025 07:51:28 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100595 (0x188f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:51:28 2025 GMT
Not After : Jul 31 07:51:28 2025 GMT
Subject: CN=685baa85-0db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:91:3c:c1:7e:d3:80:82:7c:2a:44:dc:e8:
65:cc:c6:94:99:17:a8:43:fb:c6:97:3c:51:5f:9e:
59:6a:7e:d6:64:2c:58:e9:bc:0f:58:07:89:d2:ae:
e4:96:0b:dd:23:c6:87:92:4a:f8:ec:b8:8c:01:d1:
34:a4:2e:bf:c3:6e:e9:a8:84:36:3d:6a:e7:a3:7d:
2c:0c:48:ff:80:15:6c:a8:36:0c:69:b8:18:54:7e:
fd:65:80:93:3f:ba:02:26:49:db:89:77:22:d9:8e:
3a:cb:23:34:25:91:db:82:e3:25:eb:f0:f2:d0:40:
4f:2e:6c:6f:bf:e9:bd:16:77:ea:37:f7:d7:24:e6:
f7:5b:ef:07:76:fb:0e:66:1b:ad:7f:bc:4b:0e:69:
3c:5e:f0:26:3d:69:88:8e:c5:ce:09:2c:be:18:cb:
e1:2f:55:d7:5d:03:06:df:95:32:f4:9e:a9:3a:4d:
2e:a9:dc:c9:d3:19:13:81:f4:86:5d:13:89:3a:c0:
f5:28:7e:df:a7:95:dc:82:d5:1a:4c:03:54:e0:ca:
e8:30:a6:50:8c:94:9c:0c:52:62:c2:5a:1d:33:3e:
03:ba:ac:b4:92:72:f0:2f:3a:cd:96:15:90:54:00:
50:c7:d5:92:53:f4:0e:bd:80:36:6b:9b:6f:28:04:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:CD:6E:67:F7:4D:02:BA:19:74:8C:13:9F:23:60:A4:A0:6A:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362857E0519911F0B8AF4993DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d8:d9:9d:97:be:28:93:7c:90:d3:33:bd:b8:b1:b6:91:13:
93:d5:64:22:b6:de:dc:35:a2:95:1e:f2:99:da:fa:20:f3:7e:
20:27:b1:c4:7e:72:42:96:39:3a:14:6a:08:4f:bc:9c:dd:79:
f6:10:80:25:4b:0f:ec:3a:10:b6:b1:7f:9c:3a:c8:d7:39:84:
a2:f5:c0:70:3c:24:02:57:60:05:a5:4a:b1:df:48:88:97:9a:
19:1c:95:bc:c2:b5:a2:9f:f1:9f:a5:9e:f3:92:b3:cf:66:71:
80:26:79:0c:d4:ec:f6:c1:6a:13:c2:db:4d:74:4f:87:38:0b:
e1:9f:49:fb:66:05:a9:54:7f:57:96:d6:33:b6:27:54:31:1c:
4e:45:84:5d:f7:46:5d:da:7a:b4:59:a5:7c:73:e3:5e:68:5d:
ff:a2:93:f4:53:29:bb:da:34:50:af:eb:e9:bf:60:a9:52:fd:
ce:ca:dc:e2:00:4c:b4:ad:63:91:0d:93:a2:93:3a:27:ea:31:
ed:64:ca:a2:5c:a7:51:1d:f6:dc:10:a2:a1:8c:f4:4a:1e:57:
84:1f:e0:70:f2:2e:64:64:dc:61:a3:37:2d:61:a7:44:24:d1:
97:00:09:0e:ca:ed:3d:62:c0:e7:57:7b:76:57:bf:8b:63:cb:
54:84:25:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:46 2025 by rpki-client