Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72631112525911F0B735F8F4DAE4EC9C.roa
File: 72631112525911F0B735F8F4DAE4EC9C.roa (raw, json)
Hash identifier: rbLDIsZKjTkZVqkZZGflkbtcJJGUevh8ebvfcr0WrSc=
Subject key identifier: F9:0B:49:C7:3E:D1:1E:1F:18:29:28:9F:BA:3C:67:D4:D6:77:37:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018912
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72631112525911F0B735F8F4DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:47:38 +0000
ROA not before: Thu 26 Jun 2025 06:47:33 +0000
ROA not after: Wed 17 Jun 2026 06:47:33 +0000
asID: 214432
IP address blocks: 154.193.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100626 (0x18912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 06:47:33 2025 GMT
Not After : Jun 17 06:47:33 2026 GMT
Subject: CN=685ced0a-dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:39:e3:88:dc:42:91:db:86:c4:67:e1:c6:
fc:bd:6a:d0:0f:db:f2:66:80:28:18:90:a7:22:d2:
6c:96:29:8c:b1:a3:2d:d4:09:bb:d2:ca:28:b3:68:
6f:ba:ff:e5:12:3c:7d:53:19:d4:ad:e7:bf:9a:ab:
e5:7c:ed:90:4c:d0:d8:b8:04:5b:20:74:9e:69:ff:
9c:20:c6:d0:96:5f:97:30:b1:da:1c:a2:8c:10:9a:
e2:1b:07:1c:23:f4:8d:8a:17:08:ab:31:a3:46:1e:
8f:80:76:a6:2c:aa:cf:4e:03:c0:3e:49:e6:63:70:
05:7d:67:a4:12:12:7d:05:72:c9:99:d9:48:0f:5e:
27:cb:29:20:3f:5c:ae:31:1c:7e:d5:e0:14:b3:7f:
91:3f:19:5d:d6:d7:27:94:10:3b:f5:a7:3a:6b:43:
86:15:4d:10:12:f8:a7:d2:34:b4:a3:d2:b7:4b:65:
c7:fb:f6:91:4a:f8:7f:d9:3d:15:27:1f:98:5f:1d:
3a:de:57:a8:69:12:32:b5:74:c1:55:29:d6:b4:c6:
d7:f3:51:6b:71:52:e1:07:d0:cf:c0:ba:7e:69:40:
05:31:22:a7:23:87:52:65:72:49:75:09:65:40:ce:
6a:01:c5:9e:ca:7d:74:b8:6c:b4:0d:9f:32:14:be:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:49:C7:3E:D1:1E:1F:18:29:28:9F:BA:3C:67:D4:D6:77:37:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72631112525911F0B735F8F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.211.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7c:e5:e1:f0:81:2c:f4:b6:b3:18:cf:c5:c6:a9:e3:e3:8d:
54:cb:26:d4:27:80:8c:ea:98:2d:39:d3:52:bb:e9:0f:87:b0:
ef:03:9b:0d:9b:ea:11:bb:7d:f0:fd:0d:67:f6:34:73:3f:59:
50:5b:75:aa:db:75:a5:64:7a:33:58:8a:86:a9:d8:b7:cf:b6:
11:28:61:61:d3:5e:12:ec:4d:cc:2e:2e:81:9e:d6:48:de:38:
98:ae:38:40:0b:9c:f1:77:a1:82:97:d6:db:c7:be:02:13:4d:
98:80:08:51:11:3d:a6:ca:49:77:8f:20:e1:08:ca:96:cb:27:
e1:65:f3:fe:88:d5:5f:a5:71:1f:d9:c0:88:3a:05:20:d7:e7:
d0:88:d7:c0:ed:4f:3a:24:43:6b:fe:39:4b:67:a7:b4:af:c6:
91:8f:50:e6:32:03:93:1e:01:89:ae:fa:5f:51:dc:68:66:a1:
c3:99:17:80:a0:10:eb:35:d9:c1:ba:a8:63:e7:21:cd:6b:5c:
d6:e8:aa:cd:91:c4:61:d6:dc:56:41:03:34:18:e3:34:f5:76:
9e:87:19:d4:ef:bd:d1:2e:c3:b1:93:cc:64:88:6d:39:32:9b:
56:3b:2d:df:b3:65:d6:45:a1:3b:22:3b:8c:33:77:66:77:2c:
c7:63:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:27:14 2025 by rpki-client