Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E680C144DD211F0B9C39480DAE4EC9C.roa
File: 7E680C144DD211F0B9C39480DAE4EC9C.roa (raw, json)
Hash identifier: VhMvGMRkr+sbOQHK1/0zTauS8KaYRFQCt2jT6sT45K4=
Subject key identifier: 74:6A:46:82:70:F0:6B:8E:8A:C1:E1:77:78:00:DE:1C:71:53:4A:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018787
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E680C144DD211F0B9C39480DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 12:31:31 +0000
ROA not before: Fri 20 Jun 2025 12:31:26 +0000
ROA not after: Sun 27 Jul 2025 12:31:26 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100231 (0x18787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 12:31:26 2025 GMT
Not After : Jul 27 12:31:26 2025 GMT
Subject: CN=685554a3-4405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:52:3c:01:b8:30:6e:1d:1a:73:9f:57:99:
a4:cd:8a:dd:b6:e3:cf:c7:00:34:78:69:7e:e1:87:
b3:ab:f0:66:a9:54:6c:65:fa:49:45:e4:18:9e:c9:
6e:42:83:47:a0:a7:9a:07:a0:78:49:07:d1:ca:8c:
37:a1:46:a7:04:7d:a2:ff:77:ec:b4:b0:dc:fc:71:
3a:fa:95:9e:a5:a6:41:ca:88:81:90:01:cd:73:37:
07:1a:59:82:e5:38:cc:d6:a3:8e:65:82:5f:cf:ff:
18:6f:5e:1d:f5:7d:22:ef:ba:09:82:5b:78:09:3d:
cf:5b:b8:b5:db:42:5b:9b:1e:40:ac:a5:d1:58:8a:
c3:85:ba:f6:83:09:41:38:13:07:0d:35:7f:4f:91:
8e:29:60:d1:73:4d:08:bc:70:13:00:00:09:a4:f6:
a0:ab:2f:55:ee:43:6c:aa:c4:11:f4:07:5c:ab:63:
01:02:2f:d1:b5:d8:97:02:8c:17:2d:4b:e3:ab:3d:
bd:fb:5f:9c:b6:3d:17:1a:85:d3:3b:ea:24:c2:4d:
e8:e8:69:45:62:4d:11:05:78:13:16:a6:de:6f:75:
dd:83:64:5f:c1:72:7e:df:e7:f5:4b:8f:92:72:01:
7b:30:cb:25:3b:94:94:cd:9d:65:a9:0e:e4:9b:c7:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:46:82:70:F0:6B:8E:8A:C1:E1:77:78:00:DE:1C:71:53:4A:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E680C144DD211F0B9C39480DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1f:4e:56:1e:fc:18:95:b9:cd:5b:48:4d:7c:f1:5f:0b:d7:
16:a5:0f:53:c2:62:ea:87:bc:fb:c3:e5:97:c0:01:ea:95:f4:
ea:70:b3:04:c6:df:f9:a6:a7:61:47:02:8f:68:0e:5c:04:4e:
09:7c:3e:58:e1:0d:b6:8d:0f:a1:ce:f7:17:d6:eb:f1:25:f2:
08:86:72:f0:25:f1:8f:82:ec:41:d8:b9:3c:d2:eb:8d:69:5d:
c9:f3:87:77:3f:91:a5:4f:71:32:22:d2:22:05:43:72:4e:d4:
fc:a0:8c:91:e9:67:91:4f:5b:d6:3e:86:fb:0f:5f:48:ef:ca:
ac:52:61:1d:02:a9:85:87:af:a9:28:3b:24:c7:88:22:e2:35:
e7:91:56:47:86:c5:84:cf:b1:c6:d9:20:c7:4d:ff:b8:bc:5a:
f3:d3:b6:eb:5c:f2:9f:dc:0a:5c:dd:da:9b:ae:98:82:31:7d:
1f:9d:a8:02:db:f7:7a:e1:f7:ef:02:0d:3d:0c:8b:a3:79:0c:
c0:bb:7f:5f:44:9a:31:47:6b:43:76:3a:ed:e0:ff:1c:68:54:
24:ea:67:b3:84:e7:b1:f1:08:a8:1c:12:e1:bc:10:d4:0f:ea:
ed:7d:d0:13:d0:89:f4:22:4f:bc:6d:e1:e4:d9:e7:36:c9:31:
be:af:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:59 2025 by rpki-client