Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/443DC0A0519811F0A8844A8EDAE4EC9C.roa
File: 443DC0A0519811F0A8844A8EDAE4EC9C.roa (raw, json)
Hash identifier: B0Z5ybpI5O5M/pM7PK4jMoPEFRNyoA0n6uWT3fuY4YE=
Subject key identifier: 2C:28:D9:88:F3:25:BD:6A:ED:BE:97:C9:3C:2F:39:0E:C4:92:57:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/443DC0A0519811F0A8844A8EDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:44:47 +0000
ROA not before: Wed 25 Jun 2025 07:44:42 +0000
ROA not after: Mon 13 Oct 2025 07:44:42 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100591 (0x188ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:44:42 2025 GMT
Not After : Oct 13 07:44:42 2025 GMT
Subject: CN=685ba8ef-93f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:41:05:9b:13:f6:0b:67:d2:cc:1f:a2:2b:
17:61:c4:66:4f:d3:4b:aa:93:4e:80:2a:27:5b:98:
7b:d6:4e:bf:e4:0e:dc:22:56:2c:22:da:d8:22:f0:
dd:59:eb:b7:dc:73:c0:7c:4e:6b:22:41:5b:9b:0f:
5b:0b:04:5c:61:56:21:a3:fc:33:7c:37:1a:db:7d:
b9:74:63:ae:27:d8:1b:ae:b3:1a:cf:99:2b:aa:ff:
6f:52:53:6d:5e:b4:88:d5:76:7f:71:d7:14:dc:7d:
b0:c5:90:ea:51:a6:4a:a0:45:77:96:93:fc:6a:af:
b3:1a:ef:60:88:53:b6:fa:3f:7e:dd:e8:c2:2c:13:
c1:ee:3a:3e:1d:7e:a3:01:5c:9e:33:9b:1a:32:91:
7c:36:ab:3e:fd:f5:a3:ca:8d:67:23:01:44:45:c1:
ce:0c:fe:f3:28:25:71:84:f7:f5:07:ae:09:b0:c1:
6a:ac:79:24:f5:a8:38:82:70:03:46:b8:ae:41:3a:
63:36:b9:c6:ac:6e:25:e9:fa:2c:69:c3:5d:36:59:
69:73:d3:ac:89:c2:2d:70:0b:a2:44:8c:65:30:93:
49:ce:a2:ac:d1:d2:67:43:78:7d:7f:b7:2a:09:c8:
4c:5b:ed:2d:77:4f:c4:20:4b:9d:37:b5:66:fe:ea:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:D9:88:F3:25:BD:6A:ED:BE:97:C9:3C:2F:39:0E:C4:92:57:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/443DC0A0519811F0A8844A8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
8e:65:bd:89:4b:55:70:72:12:d5:d1:5e:f2:a6:28:83:6f:a4:
ff:1f:b8:68:ad:b9:87:94:d4:93:e0:da:e2:2e:bf:3b:f3:2f:
ac:eb:c4:a5:da:a1:88:c9:ef:59:0e:eb:f6:20:a4:8f:ff:ab:
a4:cf:ae:22:46:87:24:6d:ed:cf:6f:ef:5d:44:82:15:ec:31:
e5:06:4c:f3:25:ea:cf:fc:be:99:8c:68:8e:dd:3f:2d:d0:f9:
55:9e:99:f4:42:b4:ed:78:a8:19:8f:b4:78:e9:8f:7c:18:e5:
2d:51:76:8a:21:26:55:e2:9d:79:2c:36:24:74:0f:02:3c:f1:
d8:a2:0d:5b:31:08:08:f6:90:d1:bf:c8:c3:f7:29:cf:b7:4d:
35:cd:ba:3f:8f:89:26:c8:0f:da:af:4a:a3:49:58:7d:22:ff:
96:fd:4b:e1:39:b8:c4:87:90:c4:5b:f4:e3:c7:e3:fc:0b:b6:
b0:84:7e:82:ae:31:b1:ba:8b:e3:e9:a2:c7:9c:bd:4e:f3:c9:
da:62:12:18:d1:48:cd:d2:97:41:83:15:e2:53:4e:91:3c:65:
c1:a2:ea:cf:5e:c5:f9:b9:8f:d4:72:71:b2:14:36:5b:20:c1:
22:d6:5f:52:d1:f5:d4:f0:9c:3d:e7:74:7a:21:30:eb:c4:d5:
a5:36:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:42:26 2025 by rpki-client