Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5653F6CE4C6111F0B698099ADAE4EC9C.roa
File: 5653F6CE4C6111F0B698099ADAE4EC9C.roa (raw, json)
Hash identifier: +F/hxFOOCeNzJvf6KDLbqHTCrn0Hm87970FFP57CyHE=
Subject key identifier: 1D:59:C6:D9:49:A8:28:11:8D:9B:61:0D:C0:31:AF:A9:8C:EB:8C:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01875F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5653F6CE4C6111F0B698099ADAE4EC9C.roa
Signing time: Wed 18 Jun 2025 16:29:00 +0000
ROA not before: Wed 18 Jun 2025 16:28:55 +0000
ROA not after: Fri 12 Sep 2025 16:28:55 +0000
asID: 54600
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100191 (0x1875f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 16:28:55 2025 GMT
Not After : Sep 12 16:28:55 2025 GMT
Subject: CN=6852e94c-46cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:4d:02:38:a1:67:e3:d9:24:27:10:3a:44:
b1:48:6e:88:b3:7e:0e:93:93:45:1b:a9:b5:eb:fd:
61:21:c2:af:8d:3d:68:3f:ec:51:5a:17:3f:3e:5a:
c2:f0:14:a3:74:34:c7:a3:38:d7:82:c4:6c:f7:77:
0f:31:4f:93:7f:84:0b:b1:48:b4:10:db:8b:19:31:
94:04:88:4a:79:b9:1b:37:33:87:f3:d9:9c:44:50:
a5:e9:df:f1:60:1e:50:db:2d:15:4a:3f:cf:fc:75:
6a:1b:84:aa:20:f2:54:c8:14:05:cc:f1:1f:2b:36:
a7:e6:89:b5:5f:cf:88:f0:34:7d:58:5f:cc:e1:96:
59:34:16:a6:49:07:a7:8f:93:88:5f:1d:f7:c2:0c:
49:8f:e0:0b:7b:53:19:c1:8f:7f:46:0a:d2:32:27:
2e:c7:ac:f1:5d:cd:97:c0:88:32:a5:44:4f:92:1a:
86:13:ce:35:76:c7:3a:11:8e:66:72:f3:9d:b6:ad:
24:f7:63:5e:83:2d:0e:f9:88:2b:0d:21:fd:09:dc:
26:f4:ae:46:3f:7f:89:ff:1b:68:d4:af:3c:d2:8b:
75:04:63:a3:83:f7:4b:53:ea:8b:c7:9c:87:5a:53:
c9:32:8c:6b:cc:53:ea:cb:d2:f2:96:33:aa:4a:c0:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:C6:D9:49:A8:28:11:8D:9B:61:0D:C0:31:AF:A9:8C:EB:8C:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5653F6CE4C6111F0B698099ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:56:1c:a9:f7:21:76:6b:55:13:f2:80:d2:c7:38:80:d6:1f:
2f:bc:e5:85:48:04:b0:18:15:d2:8f:05:0b:29:9a:9a:ef:5c:
b0:56:74:29:5b:6d:9d:4e:85:62:66:aa:04:c3:29:52:f1:53:
88:4a:5b:2a:18:02:79:79:cb:ed:6d:39:e9:c2:9b:7c:11:24:
bd:f1:ca:df:6a:b6:cf:34:26:78:74:f5:c4:58:ae:7f:0e:e7:
01:8d:84:c8:d8:be:98:32:fb:62:c7:19:10:f0:e2:85:dc:43:
03:f2:1a:d0:03:0e:49:b6:64:f7:86:9c:58:af:8e:aa:14:24:
97:bc:cd:a9:c0:3f:f2:b2:78:15:21:6b:6c:d1:5e:9a:7e:26:
15:a9:4e:47:79:92:ac:fa:8f:40:5d:e2:b6:f4:62:0a:2e:bb:
97:36:b5:a9:ff:b0:ce:45:1a:94:11:40:74:ac:a0:9e:a0:e0:
8d:ad:e1:50:8a:48:b5:10:84:78:61:ef:a1:9b:83:31:4c:fe:
a9:10:28:7c:c4:09:d9:50:7e:54:4d:b0:4e:64:b5:ee:51:be:
cc:70:7a:36:38:7f:69:e5:ca:da:7f:96:27:6e:87:18:48:2a:
eb:73:ca:cb:66:ba:e5:02:cd:a1:5d:e2:ee:85:09:80:6f:d8:
c7:ef:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:30:37 2025 by rpki-client