Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F91B6384EA911F09649B9F5DAE4EC9C.roa
File: 9F91B6384EA911F09649B9F5DAE4EC9C.roa (raw, json)
Hash identifier: 4QK8k5OaAj9eokYCgL+P5Oqr5Fgw+7GFEDacWwVHwSY=
Subject key identifier: 09:9A:01:A5:F5:44:F9:C6:FC:03:2A:17:8E:7F:12:2D:F6:8A:70:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F91B6384EA911F09649B9F5DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 14:11:28 +0000
ROA not before: Sat 21 Jun 2025 14:11:24 +0000
ROA not after: Wed 30 Jul 2025 14:11:24 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100318 (0x187de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 14:11:24 2025 GMT
Not After : Jul 30 14:11:24 2025 GMT
Subject: CN=6856bd90-4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:17:b9:42:58:08:96:e4:9b:cd:80:11:af:
44:4f:46:6f:ea:19:96:7c:6a:c5:e3:83:09:30:71:
35:28:62:41:62:8a:ab:7c:0f:aa:b1:1f:11:99:2a:
45:bf:06:56:04:12:f0:d4:c3:3b:ef:7c:e6:8e:e6:
e8:43:ad:9f:87:f8:a6:3e:58:5b:8e:2d:cf:98:92:
6e:43:e1:87:3b:b8:79:6e:12:3a:b2:84:b9:77:b8:
b6:8b:fb:4f:59:1b:5d:95:9b:c5:51:e0:63:0b:46:
0b:41:b6:5a:9d:fc:ac:5f:44:31:ad:ed:35:e6:ae:
c4:80:ab:31:44:54:4c:85:18:15:55:bb:44:c9:73:
c5:47:62:df:9d:a6:7c:c7:a8:b3:77:a7:2c:e1:12:
a8:38:2b:b6:c4:62:88:2c:6d:e0:56:6f:a9:b2:e8:
eb:5e:12:b1:bc:d8:d8:d2:4b:19:b4:9e:67:07:12:
32:3c:94:8e:0e:73:b1:75:70:9d:4e:81:50:7e:96:
53:d8:7c:fb:ec:3b:c1:d3:0d:bd:5a:14:75:d2:0f:
47:c0:17:26:dc:8b:27:aa:7e:11:bc:fd:3f:d3:cf:
0a:99:a2:75:16:01:69:bd:d5:3c:95:6f:a3:d2:e5:
62:ee:53:b7:5f:94:c2:fd:4d:62:1a:e8:08:6b:97:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9A:01:A5:F5:44:F9:C6:FC:03:2A:17:8E:7F:12:2D:F6:8A:70:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F91B6384EA911F09649B9F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:22:6b:aa:c9:ae:f1:af:60:38:73:16:09:9a:64:a1:b4:87:
9e:96:d6:ac:1e:14:8a:64:92:72:ac:b3:8a:bb:c4:7c:bb:de:
01:33:4b:5f:28:ee:8a:e0:05:d5:63:1f:9d:41:35:c4:af:0a:
86:aa:5c:e6:2e:92:79:5c:bf:aa:ec:d0:b3:a6:33:71:44:ed:
b1:04:15:a4:3b:5a:2b:7e:5d:78:72:2e:32:e9:03:42:47:58:
eb:43:77:20:d3:32:ad:ac:44:76:31:06:18:0d:07:4d:73:2b:
27:25:10:41:93:b5:06:5a:5e:97:47:3f:c0:1d:a8:62:30:7f:
bd:4a:15:91:d8:dd:0c:42:6d:2d:cc:4b:4d:a2:1c:11:b9:53:
eb:01:52:0e:08:2c:ff:74:e4:e5:98:f0:16:42:3e:ed:d5:67:
b1:4f:a0:44:9e:19:ac:3a:a5:fe:32:eb:42:ec:2c:d3:44:27:
e1:43:ca:8c:3d:b5:dd:f6:d5:ae:72:7a:44:46:e5:ec:0b:66:
4d:fa:7a:8a:54:20:dd:67:09:4d:bd:39:c2:8f:04:2e:ae:a7:
9f:6f:d5:33:82:38:c1:1e:fc:7f:78:5e:e1:ec:5e:8a:50:94:
9b:a8:0d:a7:44:46:f9:e5:96:ba:20:91:c0:d0:17:74:56:23:
e5:8d:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:01:52 2025 by rpki-client