Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C23A3DC483111F0BA4B7DD1DAE4EC9C.roa
File: 3C23A3DC483111F0BA4B7DD1DAE4EC9C.roa (raw, json)
Hash identifier: tAuaRY9KCTjoWkC/X84O9m7Jz3A7u/jzyXDWejWXW6s=
Subject key identifier: 7F:6F:5E:88:C0:D8:17:06:8F:6D:4B:BF:7C:86:23:0B:28:E2:A7:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01864D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C23A3DC483111F0BA4B7DD1DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:34:35 +0000
ROA not before: Fri 13 Jun 2025 08:34:30 +0000
ROA not after: Sat 20 Dec 2025 08:34:30 +0000
asID: 134687
IP address blocks: 154.93.4.0/24 maxlen: 24
154.93.5.0/24 maxlen: 24
154.93.6.0/24 maxlen: 24
154.93.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99917 (0x1864d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 08:34:30 2025 GMT
Not After : Dec 20 08:34:30 2025 GMT
Subject: CN=684be29b-fd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:36:b7:c8:f3:93:d7:77:20:94:ec:ce:ac:
ae:3b:d1:74:6a:d4:9b:de:c5:15:6b:c7:e5:29:87:
24:3c:ee:2a:17:24:35:4f:00:ed:31:54:da:49:c0:
9e:72:50:41:ba:de:6c:09:1b:1d:69:90:23:b3:1c:
df:d7:1f:8f:2e:8b:cd:89:b9:60:e3:2a:d6:90:32:
a2:83:36:29:4d:b5:0b:73:ba:0b:a9:54:40:7e:1a:
e8:52:37:ff:d7:b9:bc:ff:2c:da:ae:10:ce:8e:af:
c8:0d:43:d3:f6:7e:cf:ea:a5:1e:eb:0d:67:9a:44:
e7:84:73:32:ea:78:a4:13:74:3f:d3:e5:e9:0f:54:
3b:b2:a2:23:af:8d:ce:8d:39:f7:3c:61:dd:87:9c:
e7:2b:14:e2:45:4e:49:69:ca:b0:f5:ea:39:58:7a:
3c:2f:45:f5:25:2e:1a:ad:49:1b:47:cc:82:bf:78:
a6:f1:51:89:b5:5b:36:9c:35:4e:1f:1d:03:2a:15:
14:ea:88:a0:bf:37:bb:6a:bf:c1:a8:f3:b8:e8:be:
8b:16:4b:e9:1c:d5:a3:8b:3c:0f:62:74:44:d0:73:
30:11:f2:d9:0c:b7:50:cf:fb:a1:6c:ac:67:3c:0b:
9c:74:5c:a9:eb:4d:ed:08:01:d4:13:ca:b4:ab:88:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:5E:88:C0:D8:17:06:8F:6D:4B:BF:7C:86:23:0B:28:E2:A7:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C23A3DC483111F0BA4B7DD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2c:c4:a9:fe:e2:b1:b2:1a:df:79:ca:d5:8c:15:19:ff:a8:
d9:89:e6:93:f2:bf:a6:47:27:a7:03:57:ad:89:d1:24:da:e9:
a3:8c:02:23:ea:b4:d2:43:38:17:11:c8:4c:79:da:81:b2:88:
06:9e:5a:73:34:9b:d9:d9:e0:7e:33:47:35:d9:c1:a4:2a:26:
d8:27:66:c2:aa:8b:e0:f3:3b:33:2c:6b:2f:8e:08:16:45:dc:
2f:85:28:6b:74:43:7c:82:9c:14:88:6d:3f:34:8f:b6:03:49:
c5:ca:62:dd:b7:7c:35:bd:49:83:25:3e:d2:00:c1:d4:77:ac:
d4:49:92:d1:cc:5d:2f:1d:be:00:58:55:26:1b:75:e6:1d:be:
92:9d:06:76:0e:f3:e5:07:8d:b7:88:78:f9:2d:81:e5:f6:62:
42:d7:c7:49:6e:c1:0c:c9:53:35:7f:bf:42:10:20:5c:4a:f8:
60:63:e5:29:ba:e0:03:47:6e:64:f7:b0:63:d2:f8:08:70:99:
0b:8e:c4:d8:b2:30:f5:9a:3f:16:04:41:49:f3:da:1d:e7:90:
4e:b0:50:45:ce:c9:80:74:49:6c:1d:a1:13:50:a1:81:b4:d7:
8c:7a:92:45:e5:51:07:60:09:e2:9a:54:79:e2:11:c3:96:b5:
03:47:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:00 2025 by rpki-client