Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CF620256F411F0AD8397DBDAE4EC9C.roa
File: 48CF620256F411F0AD8397DBDAE4EC9C.roa (raw, json)
Hash identifier: n26vQEEfjl0KyFbc7cJsYlOdTZyxoXuV+sQl/6IiKxc=
Subject key identifier: B5:B5:83:29:DB:59:D6:51:A3:BF:AF:0C:7B:91:23:E6:3A:61:FA:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CF620256F411F0AD8397DBDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 03:26:05 +0000
ROA not before: Wed 02 Jul 2025 03:25:59 +0000
ROA not after: Fri 18 Jul 2025 03:25:59 +0000
asID: 203020
IP address blocks: 154.82.24.0/21 maxlen: 24
154.90.160.0/21 maxlen: 24
154.90.176.0/21 maxlen: 24
154.94.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100777 (0x189a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 03:25:59 2025 GMT
Not After : Jul 18 03:25:59 2025 GMT
Subject: CN=6864a6cc-14e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:40:b6:24:14:5d:77:d4:e5:17:ed:fd:99:
6d:cb:67:de:a7:b1:fa:51:79:eb:6f:06:cd:ac:d3:
78:d4:61:ce:9c:5f:fa:01:d1:2b:f1:5e:94:fe:3b:
59:02:ed:13:01:5a:e4:41:28:dd:f3:d1:d2:b0:c3:
6d:55:a3:1a:39:d8:71:8e:1c:17:f3:60:ad:3a:bd:
5a:d1:19:2b:8c:0d:17:16:79:f2:e4:5f:21:48:b7:
44:fd:b7:47:61:03:06:31:1c:72:82:6a:c2:9f:5c:
9d:d0:cd:bf:d4:1f:6f:81:f8:e0:e4:76:06:1c:64:
ec:b4:48:6e:83:5c:25:12:07:d3:6c:25:de:48:f9:
61:c8:e5:ef:3f:af:3d:6e:ba:f3:aa:a9:ac:68:a6:
02:c4:1e:a8:a3:cb:c8:de:06:6e:96:6a:d4:05:85:
e0:97:b7:12:52:69:97:24:3b:66:0a:e5:e4:6a:56:
bb:51:20:30:81:b6:06:c9:f8:a3:81:03:2a:64:cb:
3c:61:ba:90:8f:a5:bd:82:54:47:04:c9:36:74:72:
99:2c:cf:71:42:34:d6:13:9f:80:31:c5:1c:b3:9e:
9a:ea:f3:c8:f9:b4:ef:08:57:9c:36:4b:0c:c8:e1:
f1:55:e2:0a:2a:85:69:56:07:f8:8e:5d:9e:e3:c4:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:83:29:DB:59:D6:51:A3:BF:AF:0C:7B:91:23:E6:3A:61:FA:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CF620256F411F0AD8397DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/21
154.90.160.0/21
154.90.176.0/21
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
42:2b:e0:4b:52:7b:4b:cb:0a:d7:98:bc:ed:9e:71:e6:fc:26:
2a:79:e2:ce:58:f6:98:fc:89:78:c7:3b:02:5e:fa:82:74:bd:
24:2a:34:87:ba:4b:16:25:15:a9:2f:7e:9b:dc:d5:08:a5:b3:
ae:25:fc:ec:c1:6b:87:58:c2:b0:12:96:68:2c:e0:7a:e5:39:
26:b4:6d:fd:3f:71:28:b7:da:4b:b9:bb:f3:2e:98:33:43:20:
d6:f2:c2:9a:47:df:c5:9a:86:ae:86:67:f1:d5:4e:89:53:bf:
c1:49:ad:4e:11:d1:24:92:e1:c7:9d:88:b8:ad:c1:97:a7:e6:
06:00:f1:64:c3:11:e7:e0:ec:b4:05:1b:d9:6f:8b:2c:36:57:
7c:05:64:8a:b5:0c:0d:ca:a1:63:95:7f:42:86:90:a2:14:f0:
14:f9:a2:5b:05:5e:ae:1d:f5:02:f9:cd:07:71:00:45:b6:5b:
02:ef:ba:36:a2:55:9b:f9:94:02:6b:b3:fa:7f:4b:43:1a:e6:
c1:8f:f1:c0:68:e2:31:d6:aa:3b:9a:06:18:13:c7:e1:5f:c5:
ca:0a:13:d8:5b:ee:d3:29:88:6b:13:9a:3b:48:c9:58:e0:32:
27:bb:34:0b:7b:88:c2:48:d1:81:e9:cb:54:b7:16:63:63:58:
6c:77:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:15 2025 by rpki-client