Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8987A8E84ABC11F09ECB20D6DAE4EC9C.roa
File: 8987A8E84ABC11F09ECB20D6DAE4EC9C.roa (raw, json)
Hash identifier: hBfjBI2TaI6SAfm+Ql2DWXY9U6veLHmKuADEXOdpE1g=
Subject key identifier: F6:72:42:DD:B0:0A:5A:B3:C3:5D:BE:83:80:6C:7A:5F:40:EE:E1:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8987A8E84ABC11F09ECB20D6DAE4EC9C.roa
Signing time: Mon 16 Jun 2025 14:16:47 +0000
ROA not before: Mon 16 Jun 2025 14:16:43 +0000
ROA not after: Tue 23 Jun 2026 14:16:43 +0000
asID: 201411
IP address blocks: 154.202.8.0/24 maxlen: 24
154.202.9.0/24 maxlen: 24
154.202.10.0/24 maxlen: 24
154.202.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100063 (0x186df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 14:16:43 2025 GMT
Not After : Jun 23 14:16:43 2026 GMT
Subject: CN=6850274f-6aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:23:c9:41:34:37:3a:20:79:c6:ae:ff:4f:
36:f9:4f:a3:55:92:e0:57:eb:86:7e:33:b6:79:b7:
5f:62:4f:3b:de:f0:94:00:16:f6:77:36:43:18:ce:
27:c5:bd:61:be:7a:55:b5:48:10:43:87:15:90:54:
26:9c:6f:0a:82:63:c8:86:9e:42:4d:ea:9a:a4:8b:
6b:a8:07:57:e7:e1:72:0f:6e:ab:b3:9c:53:ea:56:
74:7a:5b:b5:94:ab:1b:50:02:c8:68:c3:5e:65:a0:
3a:cb:01:e5:97:2c:c2:f8:3b:3a:29:44:35:df:db:
ab:93:e7:0f:63:b4:29:02:df:82:fc:39:8f:75:31:
c8:65:44:50:f5:ed:1a:1c:42:b5:ca:f4:fb:2f:f6:
b6:da:d5:e5:b4:9e:a9:d1:67:6d:9c:7d:3b:16:ff:
49:74:1c:a1:8b:fb:2a:73:19:34:34:a9:f5:67:03:
cc:cd:42:88:c3:44:b0:b6:34:80:92:57:45:73:6a:
26:04:a7:55:e2:be:70:37:72:1a:f5:9a:c3:69:ad:
34:a4:6a:bb:b6:30:d6:28:49:5e:87:ff:60:ac:bc:
24:dc:5b:cc:86:12:31:38:2a:c7:ca:34:a5:09:e3:
41:ac:2e:61:7f:a5:84:ab:d7:e1:e6:18:82:0e:bd:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:42:DD:B0:0A:5A:B3:C3:5D:BE:83:80:6C:7A:5F:40:EE:E1:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8987A8E84ABC11F09ECB20D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:e3:82:35:1c:8b:d4:62:cd:b1:82:3f:09:b0:4f:ac:2f:7e:
54:2f:bf:5f:4a:70:46:c9:bf:a0:f2:3b:d1:93:60:4c:f8:81:
39:93:7b:a4:2e:00:5a:06:a7:75:f6:1a:14:eb:1e:20:31:62:
61:b5:7c:fa:a4:4a:60:ce:85:7b:27:1d:af:b6:4c:f8:1a:24:
4b:b7:72:e2:1f:0b:8a:56:00:c1:1c:38:8d:06:93:f2:9d:c7:
bb:e6:a3:19:d4:ae:4f:79:9a:32:0d:0f:74:69:06:22:f3:55:
4c:b7:e6:dd:38:57:e2:af:7b:21:f1:56:73:c5:dd:58:22:6b:
20:6e:06:e0:39:95:7f:d4:89:4c:e8:16:cf:e6:b4:66:4e:af:
13:06:fa:fc:94:e5:f1:5c:97:b4:f6:26:91:fb:95:d8:1e:70:
ab:a6:15:cb:5d:71:95:1c:93:c0:41:cb:3b:31:61:d4:2d:28:
4b:23:cd:c1:7a:e3:41:88:d3:67:13:90:95:d0:dd:8d:7b:05:
58:dc:79:ff:ff:a8:2c:15:a2:4e:e1:a8:ef:1f:7e:3b:36:b8:
d4:bb:54:0f:03:dd:aa:51:46:c2:98:94:77:fc:c3:12:74:e1:
b9:9d:74:95:66:01:52:e6:26:a2:48:e3:36:cb:5a:61:e3:5d:
66:2d:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:47:26 2025 by rpki-client