Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604E4C62752711F0BD5D8AEEDAE4EC9C.roa
File: 604E4C62752711F0BD5D8AEEDAE4EC9C.roa (raw, json)
Hash identifier: 68mfXoYm5o70LR23tW+XeU16zcxuLplQatiVhXZx6YI=
Subject key identifier: 90:CE:96:67:D1:86:38:82:BE:AB:F3:52:9C:76:BB:AC:CA:0E:35:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604E4C62752711F0BD5D8AEEDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:47:23 +0000
ROA not before: Sat 09 Aug 2025 13:47:18 +0000
ROA not after: Tue 16 Sep 2025 13:47:18 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102681 (0x19119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 13:47:18 2025 GMT
Not After : Sep 16 13:47:18 2025 GMT
Subject: CN=6897516b-7233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:95:31:a9:ba:d6:98:82:ef:04:73:ce:83:
21:10:f9:cf:6e:31:e4:5e:49:bc:a3:ec:d2:20:da:
64:1c:28:31:16:1e:52:f6:5b:f2:d6:8e:ef:4a:34:
19:62:a9:d4:e8:09:5f:45:b3:49:3a:21:fb:40:ff:
56:d0:3f:8f:83:31:62:c7:eb:c0:1c:a7:5a:61:e4:
b4:ab:2c:1c:80:98:f4:4f:15:d9:07:c6:8d:53:cc:
44:cd:27:9c:06:e2:17:62:62:00:6d:33:d1:6b:04:
88:15:90:58:72:aa:38:b6:a4:03:5f:f4:81:45:2d:
79:6d:5f:6d:2c:05:fb:a7:64:2f:d5:aa:55:36:be:
e5:94:d5:2b:16:9a:19:65:75:c0:d6:44:c2:ef:93:
a1:d0:b6:3d:fa:a0:24:b1:27:8f:98:51:fb:04:fc:
06:17:76:55:2a:ce:66:0b:aa:e0:70:e0:0c:41:ed:
c6:95:84:2d:6f:ba:c2:0a:cd:fb:a4:1e:73:68:1a:
04:aa:22:0a:bf:eb:be:ac:87:46:c7:9c:02:1c:9e:
1e:6d:2c:16:71:1c:ca:b9:0f:59:5d:43:29:49:a9:
27:92:8e:09:6e:c9:57:6c:b3:26:7d:31:be:c9:5e:
1c:2c:75:fa:6c:99:f0:98:e3:19:38:61:e4:20:3e:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:96:67:D1:86:38:82:BE:AB:F3:52:9C:76:BB:AC:CA:0E:35:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604E4C62752711F0BD5D8AEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:38:f7:96:32:20:70:44:ef:e6:68:88:d2:da:6a:70:7e:
6c:fe:53:50:91:4d:1d:bf:7d:1e:2e:d0:f4:8d:c7:e4:d3:15:
fb:c3:83:b7:7f:7b:b8:a2:74:a8:ee:55:9c:b5:dd:47:ed:77:
dd:52:30:ff:cf:09:67:85:5a:c8:a6:4b:d9:09:5d:91:a9:b3:
1b:ff:d5:eb:b3:1b:c8:9d:11:c9:95:55:23:c4:75:5a:58:6c:
15:7c:62:7a:68:75:7c:ac:23:05:ab:a9:34:90:3c:29:b6:6e:
27:87:1a:8a:67:23:c0:ea:bb:c1:2c:c9:a5:47:52:4c:74:a9:
8a:f6:19:4a:1e:87:53:43:c7:a4:19:1b:08:00:b4:d1:1d:53:
68:30:0e:5b:a0:19:54:42:8d:10:e7:31:9a:44:74:f4:08:e3:
52:55:77:13:ca:fa:0a:28:af:9a:98:36:a8:52:ba:e8:52:e5:
06:48:b5:c0:6c:cb:c4:53:36:6d:86:66:ce:a5:c6:99:d4:18:
39:d4:ff:bb:d5:26:12:9d:ac:3c:51:bf:0a:0f:cb:30:8b:77:
db:b3:eb:0a:1d:2a:67:75:78:5d:3b:a5:f1:92:05:53:72:2d:
6b:84:7e:76:68:bd:74:21:b2:ac:7f:32:83:31:37:25:58:82:
9a:0b:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:01 2025 by rpki-client