Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99574EF4575511F086655FD5DAE4EC9C.roa
File: 99574EF4575511F086655FD5DAE4EC9C.roa (raw, json)
Hash identifier: kSCFHKwqk3vb4ITcK5yVNtPXTKXIYkAfPlg3aKIRhPk=
Subject key identifier: B7:F2:DD:65:AF:1B:AE:B6:1F:24:E4:91:ED:F7:63:70:F4:C7:EC:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99574EF4575511F086655FD5DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:02:41 +0000
ROA not before: Wed 02 Jul 2025 15:02:36 +0000
ROA not after: Thu 04 Sep 2025 15:02:36 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100828 (0x189dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 15:02:36 2025 GMT
Not After : Sep 4 15:02:36 2025 GMT
Subject: CN=68654a11-fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:ca:44:b5:45:47:dd:05:2b:8c:3f:4b:68:
10:92:8f:6b:5e:cd:75:d9:31:9f:89:47:f0:5b:b3:
a7:98:c5:bb:c1:a4:67:3c:28:15:34:35:3d:96:8f:
92:47:93:f0:91:0d:d2:66:0d:52:d7:7f:00:52:c9:
51:a4:d4:d0:29:59:a2:c1:b4:6f:23:c5:b8:d6:a3:
e0:0f:44:cf:94:65:04:32:49:b2:9c:34:fa:31:bb:
7a:7e:78:c0:18:e5:33:e8:c4:4f:39:9e:6e:59:fb:
d7:4f:aa:81:c9:bb:3b:e2:df:e9:5c:3b:92:55:dc:
73:01:29:11:e9:6d:fd:58:af:15:55:d0:70:6f:ae:
ac:51:ba:eb:07:21:c9:af:e0:21:c9:41:6e:95:0e:
25:53:66:d8:36:45:71:e1:0f:a3:76:ee:c8:b7:ba:
72:54:cb:e1:bd:c8:2b:cb:12:a6:67:2d:fc:a0:5a:
0a:7d:c5:c6:f3:b7:6a:12:58:5a:fd:0d:43:5d:35:
5e:13:8a:8a:63:36:ce:51:3a:59:3e:3a:3b:76:f1:
a3:91:7d:46:57:85:91:a2:dd:a8:13:26:ac:07:6e:
45:c1:ba:28:cb:f1:30:b5:21:71:8a:43:c2:d1:4c:
a0:20:5c:bd:9b:a7:76:29:97:1d:37:1e:39:4e:2d:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:DD:65:AF:1B:AE:B6:1F:24:E4:91:ED:F7:63:70:F4:C7:EC:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99574EF4575511F086655FD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:1b:58:3b:26:10:c6:e4:d9:46:e7:92:86:68:26:bd:fc:ed:
a6:c0:08:8c:d7:8e:df:66:c9:cc:b7:fa:6b:b7:97:96:95:6c:
11:07:94:54:e3:45:d1:dc:8f:66:00:f1:31:b9:dc:16:f9:7f:
91:dd:e3:c0:dc:46:be:a9:30:c2:e3:6b:62:ca:c1:30:a6:76:
ec:ca:ec:9f:30:dd:32:ec:bf:b4:f5:28:2e:37:30:63:9a:8b:
72:51:ff:60:11:3d:d8:04:05:e3:22:f4:6e:da:d3:65:80:47:
0a:3b:15:ff:d7:83:bf:6c:21:a4:cc:90:ae:29:6a:9e:fc:9f:
39:82:7c:f4:5a:9a:25:1d:cc:d4:e0:bf:59:83:c6:ad:06:07:
03:f0:eb:aa:87:b2:b8:57:7f:8f:a7:ef:05:16:af:da:1d:76:
70:0e:b5:fa:07:88:bc:e6:87:4c:b7:f3:ad:0a:98:d5:11:fd:
92:ed:58:87:c4:75:c4:34:ed:47:b5:2f:0a:80:92:05:2c:78:
74:60:03:78:a8:5f:56:5d:2e:f2:f2:96:ea:47:5e:44:57:5e:
b8:77:31:f7:a7:8b:ca:41:79:58:47:a1:b5:4d:83:57:72:50:
3b:f4:96:fa:ad:d1:97:23:30:fc:d3:22:18:66:e4:ec:79:25:
e2:2d:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:14:35 2025 by rpki-client