Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87221508242D11F093060D7DDAE4EC9C.roa
File: 87221508242D11F093060D7DDAE4EC9C.roa (raw, json)
Hash identifier: tN2dFZW3Fq/pSKtSG74prNqGaqtAbISJ8FQWeA82pZA=
Subject key identifier: CA:30:BE:1B:57:4B:1C:7C:AF:91:6F:5A:78:40:CE:43:51:87:6F:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87221508242D11F093060D7DDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:37:21 +0000
ROA not before: Mon 28 Apr 2025 12:37:16 +0000
ROA not after: Mon 23 Mar 2026 12:37:16 +0000
asID: 984
IP address blocks: 154.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97200 (0x17bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:37:16 2025 GMT
Not After : Mar 23 12:37:16 2026 GMT
Subject: CN=680f7681-b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:04:a3:06:4e:b0:43:9d:f3:5a:06:7f:6b:
23:74:19:1a:98:46:02:f4:42:eb:03:75:41:77:d2:
63:86:5e:c3:26:01:5e:f6:e2:25:28:f8:ef:8f:2f:
67:dc:f0:91:b4:99:a3:7d:2f:e3:c9:b4:d2:35:a1:
49:c3:8e:e3:cc:07:d0:51:0e:73:61:c5:cb:09:63:
88:51:11:5c:86:8f:03:27:f1:ee:c4:3a:e3:6a:96:
e3:1b:a8:84:4f:e6:97:17:93:fc:94:06:41:95:73:
eb:ce:64:96:d1:bb:9f:4c:2b:b6:55:db:ab:31:4d:
7c:d7:0e:89:c5:6d:bf:be:eb:9a:41:b7:9a:d4:1d:
e4:a2:74:a9:41:66:fc:2f:fd:0f:dd:74:8a:6f:af:
c5:05:34:30:16:8b:fd:8a:07:20:d0:73:65:b9:a0:
4d:92:6c:f7:8f:0a:c2:4f:6b:74:4e:8d:a1:6d:66:
bd:29:0a:70:22:7b:73:1c:57:63:26:bd:94:f6:7a:
80:b9:d7:cb:3b:b0:55:b5:da:d4:a4:5f:dd:66:f2:
a3:7b:1f:0d:35:92:e0:bf:83:7e:f8:0a:be:ee:34:
71:61:ff:63:9f:98:5e:ee:f5:92:49:70:2c:72:12:
13:46:e3:8b:a0:70:9c:8c:14:60:79:ec:78:a0:46:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:BE:1B:57:4B:1C:7C:AF:91:6F:5A:78:40:CE:43:51:87:6F:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87221508242D11F093060D7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1a:5a:1f:bb:b8:fc:48:48:ef:d7:f2:f6:2f:2f:ae:16:56:
8b:4a:13:b5:30:a8:e3:6b:40:05:ab:3b:4a:32:46:02:26:69:
98:b8:ee:c3:1a:de:03:79:d0:d9:0f:f7:82:2d:d4:b0:92:a6:
68:ab:48:cd:12:e9:e2:65:ec:8a:7a:93:59:ab:bd:35:fd:41:
78:e8:ea:c6:32:8a:c3:4f:9b:b5:27:2a:94:c9:76:cd:92:b8:
e2:91:9e:6f:7b:cc:32:3d:08:d8:1f:fd:54:27:b6:0e:08:3d:
c4:03:20:30:77:2c:3a:57:53:b9:93:f0:7a:12:58:28:cc:23:
93:1d:89:ec:6c:64:9d:07:eb:8d:d8:18:ac:19:ee:57:42:27:
ee:a2:00:74:b1:5e:5a:81:05:01:59:ad:51:e7:28:9f:99:aa:
6d:67:7c:33:5b:eb:ea:dd:f4:a4:e4:d0:64:8a:f8:a3:b8:57:
0a:5c:e1:6c:2c:18:3a:b4:fd:c6:2f:92:ca:fd:ff:a3:66:38:
28:a9:49:6a:d7:fd:ff:92:28:b3:15:cb:bd:77:7a:b4:93:f5:
2c:c4:b0:98:c5:b5:02:58:1f:f1:5b:14:a2:d3:c0:8a:7a:1a:
77:1a:b0:5b:3d:14:36:79:6b:15:ae:11:e0:98:55:c3:aa:1a:
97:fa:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:03:58 2025 by rpki-client