Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81490512558111F084B5C57ADAE4EC9C.roa
File: 81490512558111F084B5C57ADAE4EC9C.roa (raw, json)
Hash identifier: +ArIf8PiUvq+QbCfiIFXA4d+MI+x2ngGxCRN20rBqek=
Subject key identifier: 2A:47:69:33:C9:63:40:46:B6:93:97:77:2D:0A:62:39:8C:96:F8:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81490512558111F084B5C57ADAE4EC9C.roa
Signing time: Mon 30 Jun 2025 07:11:56 +0000
ROA not before: Mon 30 Jun 2025 07:11:51 +0000
ROA not after: Fri 04 Jul 2025 07:11:51 +0000
asID: 22773
IP address blocks: 154.192.0.0/22 maxlen: 24
154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 07:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100725 (0x18975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 07:11:51 2025 GMT
Not After : Jul 4 07:11:51 2025 GMT
Subject: CN=686238bc-bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:25:f9:5a:06:2a:a3:64:74:40:c0:bf:56:
29:51:08:ea:5f:c6:2d:ae:25:a9:6b:eb:33:0c:35:
23:81:29:dc:e2:44:db:c2:3a:89:f8:f9:42:0a:da:
08:92:e5:53:53:b8:ad:37:34:de:72:9f:f5:76:9f:
1e:e9:0f:3e:9c:a8:5a:c7:2e:e1:7e:70:5c:5b:8a:
55:e8:25:10:07:6c:da:ca:e2:a5:53:c2:93:81:7c:
8e:db:ca:66:90:65:0a:04:f7:7e:bf:69:88:3a:cf:
01:7f:12:1a:8c:5e:b8:7a:88:4f:56:55:dd:67:cd:
54:4f:22:3d:b5:bb:db:74:a0:bf:cb:b7:29:a8:2c:
c1:28:58:29:9f:9f:c5:a3:48:5c:e4:a0:13:fc:9b:
c5:76:49:e1:87:88:b5:62:df:00:40:52:c5:b7:ab:
2f:64:a2:b7:aa:6f:04:54:ac:11:c9:e3:47:64:a0:
c8:9d:10:f2:91:c0:2e:73:16:59:f1:05:25:8c:b5:
06:af:1f:d3:a6:e5:07:95:2f:fd:09:17:a9:e2:93:
a9:f3:45:89:05:67:aa:be:1a:d4:6a:34:00:c2:2c:
03:a1:4b:e7:f1:bc:12:62:c6:ec:ac:d2:50:8e:65:
65:e7:b8:10:79:9b:23:d8:9c:86:02:9b:71:c7:f3:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:69:33:C9:63:40:46:B6:93:97:77:2D:0A:62:39:8C:96:F8:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81490512558111F084B5C57ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/22
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:67:52:75:b2:a3:25:3c:13:55:21:eb:2e:98:e6:04:4f:1c:
d0:9e:6b:2e:ff:27:88:4b:d1:2d:66:d2:6d:ed:25:ba:f4:7f:
21:3c:9a:91:61:7b:cb:e2:11:cc:ff:b8:a6:88:a2:a8:16:9b:
bf:a9:d2:1c:42:fc:18:30:35:df:33:65:49:58:92:7d:65:7a:
0b:07:06:9c:2e:e9:70:23:ea:40:60:16:56:16:5e:05:e9:75:
5d:f2:bd:07:a7:b0:56:2b:6e:0c:00:1e:81:ad:67:07:e5:f6:
83:78:e8:b9:a2:75:9c:89:78:ff:23:28:0b:70:c6:f1:e4:49:
9c:fa:84:9d:be:99:1a:ae:be:ec:ac:fc:08:c4:76:87:b9:37:
aa:c8:95:f5:dd:d7:d1:09:8e:d2:19:2a:23:0e:4a:ab:0f:02:
d6:5d:d0:c0:03:be:3e:f0:b3:22:0b:6f:f0:37:69:f1:f1:3b:
bc:84:9a:cf:8d:de:e0:85:a5:52:50:b4:84:5d:e1:d8:3f:28:
52:d5:3b:c2:b2:39:dc:15:47:cd:22:78:f9:0a:42:22:9a:1f:
37:6a:70:fc:0a:d8:df:e7:03:b3:7c:8e:86:39:6c:56:f5:e7:
20:16:7d:68:ed:8b:79:d6:88:79:d4:e4:07:23:50:1b:92:09:
25:98:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:10:20 2025 by rpki-client