Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B01BF3E565411F08FE7D4D4DAE4EC9C.roa
File: 9B01BF3E565411F08FE7D4D4DAE4EC9C.roa (raw, json)
Hash identifier: 0g8EovsOIqzvCZkdFQ9taroN0t8NlGoDebwIE9gLY54=
Subject key identifier: 25:94:24:B0:E3:25:12:95:59:FF:E0:BB:81:60:19:A6:52:DA:C3:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018992
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B01BF3E565411F08FE7D4D4DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:23:03 +0000
ROA not before: Tue 01 Jul 2025 08:22:58 +0000
ROA not after: Mon 04 Aug 2025 08:22:58 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100754 (0x18992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 08:22:58 2025 GMT
Not After : Aug 4 08:22:58 2025 GMT
Subject: CN=68639ae7-0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:20:62:3f:f1:52:ee:25:5f:56:e2:3b:19:
07:63:5b:2f:0f:05:92:99:a8:a6:41:3e:da:af:d8:
b0:cf:0c:0b:57:b7:af:76:30:3f:ee:0e:61:9b:dc:
c9:82:f8:4d:f0:c9:3e:d9:23:39:a0:0d:cb:64:74:
cb:6e:31:c1:4d:61:77:55:ea:25:82:1e:56:93:12:
bd:7b:69:61:bd:ae:6f:d8:1f:48:98:5d:2e:2b:98:
7d:16:d7:a5:01:d7:30:5f:5b:8e:43:50:10:61:bd:
15:f2:c2:c4:c9:4b:16:0a:a5:ba:1d:6a:6f:88:85:
78:85:5b:4f:00:e6:3f:ba:7b:57:dc:95:9b:67:36:
63:84:e6:64:76:0c:60:45:c9:82:b6:ac:57:a8:0f:
55:5d:4f:49:a0:03:22:6d:71:5e:a2:68:1d:75:b7:
1c:8f:4f:b9:b9:c2:dc:a5:91:06:22:bd:62:1f:cf:
76:1e:e4:ac:1a:69:d8:56:85:bc:28:90:56:4a:57:
e8:89:55:e0:91:de:36:28:51:45:3f:e2:04:0f:63:
8a:30:cb:c1:b6:2a:b3:2e:4e:2e:04:63:46:6a:5a:
52:95:76:d9:5c:28:18:b6:79:ef:54:3e:c8:b8:90:
1e:b4:fe:04:ff:d7:7f:fe:ee:0a:8e:6a:14:07:b9:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:24:B0:E3:25:12:95:59:FF:E0:BB:81:60:19:A6:52:DA:C3:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B01BF3E565411F08FE7D4D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
40:7a:a3:4c:04:e5:15:e3:e8:f6:35:db:bc:5c:12:5c:a3:82:
06:6a:94:ff:ef:56:2a:b6:a8:24:53:bb:24:0d:ed:d8:d2:59:
6f:83:f0:80:aa:5c:3d:e8:31:f0:bb:40:1a:fc:34:3d:c8:d4:
01:88:bf:c5:8c:b0:9d:fa:6d:67:84:3f:86:6e:6d:56:20:e5:
8f:29:c5:46:39:09:fb:83:68:d1:7b:25:88:88:b7:5a:ee:8e:
6d:48:c4:10:10:7e:d9:b0:81:a2:b9:bc:f3:46:cd:07:6a:78:
4d:8f:b5:24:af:9a:8a:a0:3d:70:3f:43:f3:cd:76:78:0a:11:
41:1c:45:d0:75:78:81:8a:8e:44:55:34:28:a0:81:93:7f:69:
e8:7f:be:d6:c6:af:47:23:cd:d7:8f:a5:e0:3b:ce:c4:b4:70:
4e:8a:a4:d8:a4:a2:5c:c8:95:97:db:4a:89:50:7d:33:17:f3:
07:7a:fc:7e:b9:6f:a7:50:7a:8f:cd:07:fe:10:9d:fa:cb:02:
a6:ca:fd:b3:70:70:52:eb:00:da:c4:3c:0c:82:b1:c8:93:28:
13:5c:93:1c:65:5d:02:3c:38:ba:72:21:ba:1d:5c:2c:9e:e1:
b9:7a:63:dc:32:87:bd:d7:7a:c1:7c:d9:f6:da:63:8f:4a:14:
d7:8c:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:01:54 2025 by rpki-client