Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD244D8519C11F09A3AFEA4DAE4EC9C.roa
File: 3FD244D8519C11F09A3AFEA4DAE4EC9C.roa (raw, json)
Hash identifier: j7OlRpyrPeBXfJdAOK0XBv+sqLmG8ykx2bedcFH5br0=
Subject key identifier: 56:98:03:1A:D3:06:5C:B5:1F:A1:FC:47:0B:01:E7:BA:2A:59:57:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD244D8519C11F09A3AFEA4DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 08:13:18 +0000
ROA not before: Wed 25 Jun 2025 08:13:13 +0000
ROA not after: Wed 30 Jul 2025 08:13:13 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100601 (0x188f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:13:13 2025 GMT
Not After : Jul 30 08:13:13 2025 GMT
Subject: CN=685baf9e-be14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:b3:de:6e:45:45:11:4e:62:e3:b6:96:96:
92:9e:bf:b2:c8:85:65:f4:79:90:86:f6:08:bc:92:
eb:5f:95:b1:96:3a:a6:b7:b9:09:5f:3c:f1:b2:b9:
79:78:66:44:79:33:3c:37:72:45:fa:bf:59:01:34:
7c:e6:a4:75:64:ff:4a:93:af:96:ca:e9:82:1a:f3:
87:ba:7c:41:34:45:b7:fc:5d:a4:12:f9:51:fe:b7:
1c:0b:6d:65:44:0c:8f:52:90:87:ca:e3:37:52:94:
49:03:8d:6e:d8:e2:33:95:ca:d5:16:ab:f7:98:77:
87:1f:2d:d7:7b:61:18:a6:6a:1d:c4:07:62:6d:63:
6d:d0:f4:3e:00:f0:a6:1f:0d:c3:56:77:3d:b8:ed:
47:2f:24:cc:c0:74:0d:54:c3:84:c2:d5:80:32:63:
d9:8a:a2:72:5e:49:e8:d4:7c:f0:2f:28:d9:32:10:
6b:92:03:75:5e:9f:dd:b8:c5:3a:98:23:28:1d:50:
96:31:e9:87:d2:9c:92:8e:d0:96:6b:3f:5b:9f:c7:
12:69:4f:1a:3e:c1:a6:82:4c:97:88:9a:9d:4c:c6:
ca:70:b7:7a:78:63:fc:f4:b7:2e:7a:9d:1f:3b:9e:
ce:57:d8:0a:47:f2:e3:00:7d:50:4e:d1:fc:b9:de:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:03:1A:D3:06:5C:B5:1F:A1:FC:47:0B:01:E7:BA:2A:59:57:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD244D8519C11F09A3AFEA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1e:3c:8d:11:27:46:5c:25:1d:26:ed:50:c2:cc:bb:99:d0:
22:b3:2b:b3:2f:db:9f:6d:19:65:d4:f0:b2:84:42:50:b8:ac:
da:b4:02:9f:ac:04:82:ff:74:be:c1:44:84:1d:1b:92:65:2f:
67:3e:17:22:46:0d:9a:18:56:ec:86:7f:0a:24:d7:6c:ca:33:
7c:65:cd:18:b3:c5:62:fd:dc:f1:7e:70:44:77:7c:1f:26:bb:
8f:95:c2:11:56:44:96:f7:58:b4:5c:84:55:26:af:74:48:8a:
97:4e:e8:65:35:45:d6:90:d0:ca:60:24:1f:5d:de:1e:cc:45:
03:4e:ed:a7:c2:e2:bb:d1:d3:11:1c:9e:b7:6f:ac:4b:d4:36:
97:17:b3:cc:9f:70:ad:91:50:3b:2e:56:10:57:9b:c6:e6:e9:
69:a2:a0:fb:81:55:82:10:a1:d2:24:8e:78:cf:8b:1c:a0:60:
c4:37:79:6a:70:7d:a6:8c:09:d3:93:6f:b0:dc:48:c9:cb:d0:
b3:22:69:ee:30:e3:19:b8:3b:1a:62:72:95:e3:c2:15:89:1d:
54:1e:a1:a8:f4:7e:a3:52:f5:d6:71:8e:52:50:13:b8:0c:ec:
49:82:ed:45:65:7f:3c:6d:10:fe:41:44:f1:b0:91:55:48:e5:
d5:02:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:29 2025 by rpki-client