Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E178944FE011F09EC980E3DAE4EC9C.roa
File: 49E178944FE011F09EC980E3DAE4EC9C.roa (raw, json)
Hash identifier: qvoYpmQEQy/K8rXbBoshq1tyR9pAGjZI5Evpu+WKK24=
Subject key identifier: 90:E9:5D:61:DE:66:D2:D2:86:A3:23:75:04:50:A3:E6:09:40:16:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E178944FE011F09EC980E3DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 03:15:18 +0000
ROA not before: Mon 23 Jun 2025 03:15:14 +0000
ROA not after: Sun 13 Jul 2025 03:15:14 +0000
asID: 139923
IP address blocks: 154.193.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100337 (0x187f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 03:15:14 2025 GMT
Not After : Jul 13 03:15:14 2025 GMT
Subject: CN=6858c6c6-35fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:c5:9e:c7:8a:65:be:04:c7:c6:65:9a:61:
02:e3:b5:74:2e:af:00:b2:ad:14:39:3e:ae:9d:b1:
ad:dc:8f:22:bb:15:7f:c7:b4:8b:4e:00:c7:64:9b:
84:be:96:de:f5:7c:66:bc:f7:1e:cf:13:ae:60:67:
b9:9f:bb:aa:86:d9:3d:a5:ee:8d:ee:62:f4:0d:54:
87:2f:a6:b6:8f:21:bf:18:30:5f:cb:5d:86:05:df:
2a:fa:c9:87:70:5a:96:6b:f8:09:58:c8:ab:51:46:
fa:25:38:2f:de:82:39:90:ef:3e:75:1d:63:80:a5:
ab:9a:46:50:53:8a:91:11:52:1f:e9:e7:4f:19:4c:
f2:f2:8e:55:69:19:36:85:77:4e:64:9d:c8:15:16:
88:17:83:51:86:13:fd:3d:88:49:05:c7:bc:5f:86:
ce:cd:51:11:23:45:73:0e:47:0c:f8:fe:1a:e7:30:
0c:78:ee:ec:1b:17:28:38:39:04:0b:33:45:f2:ff:
bc:1d:a2:2d:4c:01:75:4c:09:b5:7e:5d:d1:8a:91:
2c:98:aa:f0:ee:5c:90:da:fc:e5:fe:cc:5d:22:e5:
4a:a0:ac:a2:63:0b:77:40:37:e6:75:ee:65:6a:41:
ad:4f:e4:7b:32:9a:59:91:a1:58:b0:c3:76:78:45:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:5D:61:DE:66:D2:D2:86:A3:23:75:04:50:A3:E6:09:40:16:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E178944FE011F09EC980E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:39:c3:1a:dc:f8:28:bf:96:ff:f4:52:11:62:b6:17:4e:89:
95:24:d7:b2:03:66:7a:61:99:a5:00:4d:98:d6:61:fa:b3:2c:
9c:1e:03:3e:3c:8d:18:58:1e:55:54:a9:e3:2e:8e:d6:7f:aa:
07:61:5c:8c:42:15:6a:30:a6:32:48:31:6b:2a:bb:83:65:20:
f0:06:8b:cd:eb:2b:41:a5:3d:45:15:8f:fb:a2:74:70:99:53:
0f:17:c5:02:d5:1c:70:2e:ca:91:eb:57:ea:8b:19:3f:53:ab:
1c:c3:b2:cc:2d:e2:0e:59:89:fc:61:c2:7c:15:5f:22:c7:6c:
6f:03:62:fc:93:dd:49:47:01:1b:d3:cd:86:ed:9a:67:74:f1:
dd:de:a5:78:5f:e4:19:3d:7a:d5:48:54:14:94:4f:94:e2:f8:
fc:7e:fa:5f:b5:3b:95:cb:97:31:a0:78:60:a3:00:31:95:b3:
1d:41:f0:a3:2e:c6:82:7c:26:e8:b7:78:1e:02:ab:cc:91:72:
e2:49:ba:4c:1c:59:ee:b2:a6:50:9a:2c:fa:ec:89:0a:7a:9b:
cf:6e:c3:83:e2:6a:28:f5:c3:92:b6:40:60:4c:84:a9:64:18:
43:13:ec:40:4d:2b:14:79:86:39:23:0c:85:c3:64:d0:d7:07:
1d:39:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:59:36 2025 by rpki-client