Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D28CB24582411F088EBBC98DAE4EC9C.roa
File: 3D28CB24582411F088EBBC98DAE4EC9C.roa (raw, json)
Hash identifier: +4cD4Rm02ibXDflOZE/8Jl8sE6MaCrwLKs+KMdfueBc=
Subject key identifier: F1:CA:1F:5B:E3:D6:91:E1:72:D6:E4:F4:23:04:40:09:CF:ED:4B:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D28CB24582411F088EBBC98DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 15:41:52 +0000
ROA not before: Thu 03 Jul 2025 15:41:47 +0000
ROA not after: Sun 24 Aug 2025 15:41:47 +0000
asID: 40065
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100909 (0x18a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:41:47 2025 GMT
Not After : Aug 24 15:41:47 2025 GMT
Subject: CN=6866a4c0-f865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:db:32:19:84:3a:6d:c3:01:be:88:9d:f0:
64:9c:e2:0d:e3:85:d4:6a:db:4b:ad:00:4f:0a:b4:
b3:c0:23:f2:18:a3:ea:31:62:52:50:9d:7c:09:11:
ce:43:12:df:02:b0:a6:21:f9:5a:73:06:f5:3b:a8:
ef:8b:e9:81:50:a0:d6:d6:e4:1b:ca:fb:30:c6:f8:
fc:1d:c0:e2:52:37:08:73:e5:ff:45:37:da:a8:31:
f1:56:3c:88:2e:df:9b:15:ba:b1:ed:00:c2:b8:31:
5f:81:eb:31:48:a4:34:35:45:1b:55:1a:01:7c:b3:
4d:0c:a6:8e:30:30:19:2e:40:97:83:cf:28:e3:5d:
63:99:09:92:2c:05:eb:c6:3e:95:8f:51:5d:1a:79:
9d:0a:be:9a:89:92:7b:4e:6d:10:dc:c8:1e:87:4d:
11:4b:ff:3e:e9:df:f8:b2:7f:d4:13:4d:cc:36:f3:
79:23:d1:94:24:3f:3f:42:c0:07:62:eb:e4:0e:f2:
64:50:6e:26:42:34:2a:31:81:f5:98:01:83:8e:d5:
f6:12:e7:cf:25:03:8c:95:8a:c6:db:bb:f7:b4:69:
fc:b9:ee:7b:4a:37:33:14:9f:e8:85:9d:6c:83:e0:
f2:6d:cb:98:2c:45:59:e8:63:db:70:9a:09:70:4b:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:1F:5B:E3:D6:91:E1:72:D6:E4:F4:23:04:40:09:CF:ED:4B:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D28CB24582411F088EBBC98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:d6:5a:c1:a5:96:dc:de:6a:4b:ad:84:cb:2e:b5:58:9c:a0:
70:1a:e4:5b:10:fc:4a:5f:04:a1:8f:1a:53:7e:97:bf:1d:35:
75:b7:42:1c:da:fe:16:3c:f6:80:e9:77:bf:41:c9:72:be:75:
ad:ba:66:63:80:5c:b2:d2:a0:dc:59:36:6d:f8:f1:75:3b:ba:
8e:aa:98:bf:63:68:8f:d1:8e:6b:09:f6:ad:35:57:04:96:43:
92:4a:15:ec:d5:9c:9a:5b:05:e4:20:f7:62:fc:56:a9:a2:54:
ec:2b:12:c0:16:70:40:37:b7:23:3c:31:77:e2:18:46:7b:e0:
33:f1:e4:d0:be:a7:af:e5:82:8c:db:a5:f0:6c:23:21:96:96:
21:16:d1:6f:8d:58:66:2b:92:0a:55:11:78:76:8b:3e:e1:04:
e5:02:a5:bd:d7:9b:af:22:81:51:3f:a3:f8:3e:0b:ef:4a:de:
c3:06:25:8b:47:a8:6e:dc:96:b6:cc:91:24:9a:4b:ce:e0:09:
39:59:ed:69:b5:59:01:37:aa:f0:db:8a:f0:b9:84:f7:c0:e9:
7a:e8:37:46:82:38:9c:04:1c:e4:ff:8a:f7:05:84:36:83:08:
74:f5:d1:53:9c:f6:63:05:49:02:28:aa:4f:c5:7f:93:07:ba:
8c:08:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:10:16 2025 by rpki-client