Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57496D5A519F11F0BEF752BADAE4EC9C.roa
File: 57496D5A519F11F0BEF752BADAE4EC9C.roa (raw, json)
Hash identifier: S7HVD7wwg1eNH2DLah8SaWRM4yKDWuIcLaCVO7rKjU8=
Subject key identifier: 12:DD:15:0F:A2:0D:9E:68:A9:3B:6F:42:48:B0:FF:58:A2:30:FA:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57496D5A519F11F0BEF752BADAE4EC9C.roa
Signing time: Wed 25 Jun 2025 08:35:26 +0000
ROA not before: Wed 25 Jun 2025 08:35:21 +0000
ROA not after: Thu 25 Sep 2025 08:35:21 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100607 (0x188ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:35:21 2025 GMT
Not After : Sep 25 08:35:21 2025 GMT
Subject: CN=685bb4ce-2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:2e:07:0f:60:e2:1d:79:2d:e1:f6:95:93:
fb:e9:04:82:a9:c6:77:5a:ff:c6:f6:fb:9c:62:ad:
e0:6f:29:44:fa:a1:f7:59:7e:68:4d:58:af:d9:85:
71:0e:b6:13:c9:7c:ea:5b:d4:4d:43:be:cf:30:8e:
f9:f7:ec:a2:a0:52:26:b6:cb:dc:7a:d2:28:be:a5:
35:d3:e2:ff:54:54:af:5a:d0:f9:00:7e:bf:c4:37:
4e:df:e0:cc:3b:3d:a6:55:e2:b7:f1:3f:1e:c9:bd:
a8:6b:62:5b:07:69:6b:28:f9:84:f8:65:82:80:0a:
a3:c2:ae:a5:99:8c:a5:1b:ba:fd:80:9a:18:ac:f6:
d2:ae:89:a3:a5:f6:90:60:ad:6b:ec:27:47:a1:61:
f8:b3:f2:ad:9d:79:9d:87:13:e1:ca:0d:43:d4:6d:
3d:0b:53:b5:1c:d1:c6:b2:2e:4d:2d:47:7d:77:d6:
ce:73:2c:8a:b1:3b:09:c6:73:f0:7a:8d:29:16:8a:
14:a4:98:b3:fd:0d:17:c9:b3:25:4f:07:ed:b8:1f:
f6:9b:94:08:2d:72:ec:c7:ef:98:05:27:d0:25:8a:
10:82:07:bd:f6:fc:fe:eb:21:90:a4:a3:d6:00:c6:
29:8b:73:e5:3a:68:9a:9b:ee:e7:29:f8:4b:a6:ed:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DD:15:0F:A2:0D:9E:68:A9:3B:6F:42:48:B0:FF:58:A2:30:FA:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57496D5A519F11F0BEF752BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d5:dd:a5:2e:3f:81:15:7f:30:ee:13:86:58:a9:d4:a9:8d:19:
0d:35:a4:2c:c0:61:cf:3e:06:b4:03:7e:76:85:69:2c:55:d4:
9c:67:e2:07:92:54:11:5f:99:8f:a3:4a:13:2d:bc:97:9f:3f:
0d:a5:8c:b1:27:46:07:bd:7d:f5:0e:0d:35:2f:4a:99:8f:17:
84:08:fc:db:5a:c6:fa:bc:39:f0:0b:8c:d4:ff:78:c4:69:bd:
88:f9:72:4c:1a:94:a5:cb:4d:c5:2a:44:86:61:e9:b4:80:a6:
09:bb:e6:dc:9f:54:02:0b:08:16:f3:1a:05:be:fc:19:bb:65:
b7:f7:cf:6d:90:d3:b7:83:95:d9:26:77:fd:7c:c0:7f:f1:13:
37:17:86:7b:44:26:0c:3c:ee:82:5f:7a:f3:e1:42:bb:93:04:
49:60:6f:7d:dd:3b:c0:ad:bd:db:f0:8d:30:b2:54:ce:b5:ba:
da:f7:73:c8:a7:e9:49:71:88:61:e0:84:d3:31:ab:0f:93:d5:
ff:ef:73:44:1b:5f:90:ae:e4:9c:0c:6d:c8:4b:2a:9b:02:90:
51:a1:23:16:bf:f5:33:8e:fe:68:54:87:3a:75:c3:a5:1b:e2:
15:58:1d:01:a9:a8:55:b2:30:ce:da:bb:cc:19:8c:c7:b7:69:
b4:b2:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:46:35 2025 by rpki-client