Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990D631E575C11F0B269F083DAE4EC9C.roa
File: 990D631E575C11F0B269F083DAE4EC9C.roa (raw, json)
Hash identifier: n+3oKPjtMGSFWW3P77WJTzrNijdvKmdsLpD1iJ5Ipns=
Subject key identifier: 76:43:80:EE:34:B0:C9:14:2F:D5:EF:D0:84:13:2F:B9:8D:81:5E:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990D631E575C11F0B269F083DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:52:47 +0000
ROA not before: Wed 02 Jul 2025 15:52:42 +0000
ROA not after: Thu 04 Sep 2025 15:52:42 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100832 (0x189e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 15:52:42 2025 GMT
Not After : Sep 4 15:52:42 2025 GMT
Subject: CN=686555cf-0365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:84:dc:22:cf:37:5a:4c:a0:85:dc:b7:18:
ae:f5:60:85:0e:90:a7:68:22:de:fe:18:0b:be:02:
16:1b:98:21:4a:75:25:a6:ca:14:92:4a:33:93:14:
52:84:e2:8f:90:50:e4:ef:f1:5f:9d:65:ef:45:bb:
1d:9c:5c:98:db:13:a8:17:19:72:03:90:87:e3:ad:
5f:ef:96:8b:9b:a3:c5:ce:ed:67:a2:cb:df:21:ff:
05:9d:23:5f:50:92:d8:11:ae:48:0a:79:03:8d:7e:
5b:24:dc:96:ea:5a:52:88:99:2b:87:15:b0:06:b6:
f7:52:f7:1f:0b:1f:92:14:8d:de:62:27:11:1f:75:
29:de:b6:22:96:15:27:27:70:95:c5:ac:c2:45:b4:
28:5d:6e:d8:4e:4b:6b:56:84:d2:5e:85:5d:a3:57:
5d:fd:dd:2d:2b:d3:fd:1d:f3:ab:50:fb:4b:85:c1:
88:60:db:ef:00:a6:60:5f:e1:4d:3d:d0:40:19:32:
d9:b0:7b:52:57:b4:21:5a:95:87:92:71:f8:50:16:
27:c1:ce:2c:d6:e6:07:da:ab:fc:32:c8:c7:6e:b5:
a0:03:31:08:13:2c:21:31:06:4d:3d:31:fb:d1:6f:
d1:37:31:25:44:57:33:15:ae:b9:4d:06:14:73:cc:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:43:80:EE:34:B0:C9:14:2F:D5:EF:D0:84:13:2F:B9:8D:81:5E:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990D631E575C11F0B269F083DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
68:f5:22:51:47:5a:f8:e3:40:3a:5d:c7:88:a6:4f:40:79:e7:
95:35:b5:77:82:55:d2:f7:cf:2e:93:eb:c6:f8:b6:f1:2c:c6:
e5:24:20:e5:e6:3c:ef:96:45:56:c0:22:05:60:14:95:dc:50:
93:b8:f1:86:a0:0f:2d:59:73:78:df:32:1a:af:ad:cf:7b:a8:
5c:6d:af:5a:0c:8d:eb:e6:a2:b7:3c:2b:ab:2f:df:d7:bc:97:
3c:ec:1d:73:46:b4:aa:10:d2:44:04:ad:ce:ac:45:a6:17:67:
64:a5:da:60:b9:04:87:f0:1e:a1:7f:e5:72:b8:c1:85:e2:2d:
68:3f:97:b6:fa:d7:2c:cc:ba:f4:83:6f:de:f2:8e:48:0f:46:
f5:0f:74:39:ad:3e:59:3c:25:b0:66:96:51:45:0f:98:cb:c1:
05:aa:68:28:46:0e:33:00:2c:6c:bc:ab:e8:51:15:37:b4:39:
69:6c:79:9e:1c:67:b0:1e:79:40:d7:f0:59:b8:b6:82:11:be:
b3:ec:c6:94:82:19:18:58:b6:fe:4b:54:70:aa:75:57:72:08:
8e:f6:d0:74:85:0f:66:33:67:e4:5b:4c:23:5d:6c:12:cf:dd:
eb:a7:72:f6:01:5c:60:04:2d:cf:e6:a2:b2:02:64:39:1b:d6:
f6:c3:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:23:17 2025 by rpki-client