Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61312D32453111F093A400BCDAE4EC9C.roa
File: 61312D32453111F093A400BCDAE4EC9C.roa (raw, json)
Hash identifier: 36fp/gINdHpDP0pN4NbzHZfi4YjsRurIc5JGN0nYPfQ=
Subject key identifier: F8:47:1E:83:6C:30:77:20:4F:A7:89:93:AB:0F:80:0E:E9:C4:57:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61312D32453111F093A400BCDAE4EC9C.roa
Signing time: Mon 09 Jun 2025 12:58:04 +0000
ROA not before: Mon 09 Jun 2025 12:57:59 +0000
ROA not after: Tue 11 Nov 2025 12:57:59 +0000
asID: 54600
IP address blocks: 154.91.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99750 (0x185a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 12:57:59 2025 GMT
Not After : Nov 11 12:57:59 2025 GMT
Subject: CN=6846da5c-c62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:9f:8f:2b:2e:3e:1a:18:9c:b6:3f:9e:84:
74:2a:78:10:0b:ed:d7:f5:c1:a3:a9:29:81:7a:71:
45:fc:90:7c:57:21:5c:92:92:6e:23:76:f1:d3:c6:
d6:59:1a:46:e5:b4:21:a5:d3:a1:8a:a8:0d:58:dd:
1e:e3:35:12:ac:8b:ab:99:07:6f:f5:b2:40:24:30:
f7:5b:38:e9:1a:e5:e5:21:80:40:60:84:9d:2b:01:
ff:a0:03:74:c2:15:b4:0d:d8:63:36:48:28:5a:d0:
a0:0d:41:84:d4:d1:40:ad:8a:ba:de:b3:ba:df:fa:
79:b6:11:ba:2d:62:62:6f:31:1c:7c:9e:01:32:78:
ca:36:3b:b6:e5:c9:59:d0:c9:90:2f:5a:7c:06:c0:
c0:0e:20:70:8f:e4:69:06:74:62:2f:a8:10:b5:7c:
03:7d:2a:77:d4:d0:5c:72:a8:24:5b:da:20:23:5b:
89:e9:07:cc:4f:3b:e0:c4:06:06:84:43:d6:dc:c7:
c2:20:f5:be:a6:83:95:67:29:ac:68:14:d1:c7:8b:
5c:84:c5:0d:48:e5:ff:0d:8b:b8:0e:26:2f:b9:93:
62:16:4a:ee:ee:c6:eb:96:50:2f:ce:6b:05:53:05:
2e:ce:72:b0:1b:e4:55:5e:5d:91:06:d3:95:19:42:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:1E:83:6C:30:77:20:4F:A7:89:93:AB:0F:80:0E:E9:C4:57:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61312D32453111F093A400BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
53:21:c9:0b:bd:94:0c:fb:f0:7c:eb:a6:9e:2c:e3:2c:62:75:
da:e8:4f:b2:5d:f0:5a:eb:1e:9f:90:07:d8:c1:20:fb:c8:ac:
16:94:7e:2d:85:9d:dc:b9:94:98:87:50:65:cf:4f:bb:ae:6d:
de:49:46:a3:e6:f5:0f:82:7f:16:e6:58:ec:f8:af:d5:33:9d:
a6:d8:9e:7a:03:a2:5c:4e:10:4a:62:d7:19:1d:bd:78:4c:8e:
d3:d7:ff:c9:4c:80:53:07:66:97:78:97:e0:d2:7e:2b:64:8a:
06:11:41:50:f8:e2:f0:f6:15:32:1c:84:be:8a:49:72:8c:e2:
57:97:b5:7b:b3:2a:26:c3:a8:33:dd:a1:8d:b3:14:1b:ee:19:
66:ba:fd:62:7c:d2:da:10:6e:51:ad:83:f7:ad:e8:45:32:77:
8b:80:73:e8:58:f6:1b:87:2f:ae:5b:6f:12:83:c6:f8:0a:2f:
7e:cd:57:41:09:9f:9e:fe:57:45:ea:62:27:d6:1a:c0:bd:5b:
65:f0:71:01:eb:57:a0:ab:e7:1b:19:18:94:d9:fd:28:f9:68:
d7:b8:e7:0e:2f:dc:ca:59:ad:77:d4:a1:66:71:58:36:93:b1:
a3:69:eb:d5:94:2f:29:cf:ad:c3:c4:a0:c7:39:bd:26:76:65:
a4:f0:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:38:27 2025 by rpki-client