Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41BBF4FC513211F0BBF938E8DAE4EC9C.roa
File: 41BBF4FC513211F0BBF938E8DAE4EC9C.roa (raw, json)
Hash identifier: by0gYZGWwEoGd+DNLyG7xNu/6bU04WdsdGSAvVGY9e0=
Subject key identifier: 9C:66:EF:3E:5D:31:B2:51:A4:07:F1:C7:57:70:B6:50:30:92:28:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41BBF4FC513211F0BBF938E8DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 19:34:35 +0000
ROA not before: Tue 24 Jun 2025 19:34:30 +0000
ROA not after: Sat 09 Aug 2025 19:34:30 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100516 (0x188a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:34:30 2025 GMT
Not After : Aug 9 19:34:30 2025 GMT
Subject: CN=685afdca-a92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:09:2b:a1:6a:e1:36:bf:81:c3:d3:9b:0f:
18:96:3d:0a:0c:b9:32:c4:91:21:2e:9b:32:7e:7c:
be:11:d0:d4:89:12:6f:f5:5b:92:50:19:fd:5d:83:
38:ec:64:32:b3:ef:2f:68:96:8e:36:df:d3:f7:08:
f1:6a:08:59:5b:c5:47:a6:f9:78:2b:2a:44:99:8d:
ad:1d:d6:56:79:5b:1c:90:7d:d8:0f:08:5f:b1:89:
ab:36:f6:fb:dd:08:b4:01:62:08:f2:71:9a:80:eb:
f5:df:9a:2f:da:22:93:2c:7d:e9:6b:14:22:59:38:
3d:73:1c:fb:8f:ca:0f:12:8f:34:55:da:00:1b:dc:
9a:c8:0c:76:d0:bd:01:72:2d:51:aa:b4:18:7c:76:
1a:27:77:64:fb:c3:10:9b:03:d6:91:a5:21:f4:a9:
26:4d:de:bd:63:5d:a7:dc:a4:50:d9:af:69:c6:ee:
fc:f7:86:f1:94:f6:5b:00:1f:c1:70:b5:f1:5b:4f:
6b:eb:7e:ac:4d:2f:76:57:40:49:a1:59:ed:c9:60:
9f:7b:3b:99:01:8b:23:86:cc:2b:d1:b9:1b:cd:63:
be:29:b7:72:4f:9c:f7:54:39:a0:56:60:ec:60:7d:
ef:f4:21:f8:f3:03:9a:ce:c3:d1:7f:61:46:cf:d9:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:EF:3E:5D:31:B2:51:A4:07:F1:C7:57:70:B6:50:30:92:28:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41BBF4FC513211F0BBF938E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0-154.93.49.255
154.93.52.0-154.93.57.255
Signature Algorithm: sha256WithRSAEncryption
99:be:60:fa:61:08:c8:b6:e1:ca:24:24:71:ea:bf:e6:d7:4b:
6e:05:0c:5c:5a:19:db:7f:c7:d4:51:bc:1b:51:45:b7:f6:7e:
42:2b:b0:43:7e:e0:78:e4:f1:2d:36:73:ce:1e:5c:6b:83:7f:
8c:ff:d4:f2:8a:33:e2:19:97:cb:27:84:e0:cb:9c:b5:e2:6a:
60:24:3c:b4:22:72:41:84:28:79:9b:fe:96:73:ab:6e:42:7d:
99:0d:61:88:e1:00:64:d2:22:30:ed:a9:bd:4f:ca:2e:be:63:
7e:a8:0e:03:c3:40:bc:b7:44:c3:29:d9:42:1f:fb:2b:b9:8e:
2f:d8:4b:b9:15:0a:a3:2f:62:54:b3:df:2b:7c:c8:30:fb:a8:
64:21:a0:97:d0:16:26:32:ad:ba:a4:42:94:07:d0:63:50:3b:
ee:38:ce:c5:d4:1a:c0:09:cb:5e:d9:3e:82:72:e9:a0:b6:c0:
2d:24:9e:29:d9:74:ef:f5:16:a7:ce:89:6b:c1:16:fb:07:b7:
0c:86:46:3f:ae:83:11:19:64:2b:75:1f:a9:1f:dc:d0:e5:84:
50:29:f8:7f:a3:ff:c0:43:5a:59:b9:30:0d:5a:b5:9c:40:58:
62:6d:39:59:10:0e:30:cf:0c:b8:63:44:13:e5:0e:31:9b:ae:
33:80:6a:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:43:49 2025 by rpki-client