Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A03660E425C711F0B358EDB8DAE4EC9C.roa
File: A03660E425C711F0B358EDB8DAE4EC9C.roa (raw, json)
Hash identifier: hJ367YEn7AoT7Vj0v3Pnb0W251sZqP7NWsSZJNn3w9w=
Subject key identifier: C9:5B:52:01:70:56:67:57:7E:9A:B6:5A:7D:06:47:8D:E6:9F:87:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A03660E425C711F0B358EDB8DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 13:32:57 +0000
ROA not before: Wed 30 Apr 2025 13:32:52 +0000
ROA not after: Thu 30 Apr 2026 13:32:52 +0000
asID: 212238
IP address blocks: 154.198.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97661 (0x17d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:32:52 2025 GMT
Not After : Apr 30 13:32:52 2026 GMT
Subject: CN=68122689-326f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:2a:dd:88:cf:30:70:fa:02:47:18:85:e8:
ad:9d:66:0a:80:58:11:9e:6b:1a:6d:13:0c:8d:ff:
ec:5b:bd:0c:92:47:82:45:d9:d6:ac:db:9f:00:17:
4b:97:20:60:77:98:eb:8f:36:53:2b:8c:4e:70:e7:
10:76:05:01:d8:e4:b2:b9:33:7c:e6:32:7e:1a:b1:
1e:2d:02:a7:6f:61:36:7d:3b:9b:67:c1:c2:df:6d:
f5:ba:bc:e9:66:0a:37:69:c9:89:80:8f:be:7e:ef:
95:96:f1:d9:41:42:dd:37:0e:70:52:31:3a:ae:b8:
f8:4b:f3:2b:53:b1:88:13:ea:74:74:91:cc:4f:7d:
fd:47:0e:1e:1b:35:3f:47:c4:29:6f:43:4f:a1:27:
46:25:07:13:f2:88:66:0f:9e:cb:b1:29:2f:bd:2d:
c0:56:1c:e7:72:38:57:16:11:08:66:50:af:34:ee:
1b:04:ff:d4:79:a1:3e:0b:4e:64:39:2c:f1:fa:97:
2a:84:f3:a9:c2:29:c8:fd:63:40:6d:8d:1f:c5:3e:
a1:06:e6:df:59:d6:4f:4b:e5:f7:03:17:e7:f5:85:
4a:00:27:ae:d6:5f:1e:3c:a8:6f:08:2b:05:34:c0:
56:37:25:f0:88:43:d6:2f:c1:12:1f:35:66:92:bd:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:52:01:70:56:67:57:7E:9A:B6:5A:7D:06:47:8D:E6:9F:87:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A03660E425C711F0B358EDB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4f:e4:64:c2:d1:1e:02:4e:a7:fb:6c:74:c9:2c:2d:14:51:
a1:c9:3e:84:a4:59:b1:a2:0f:b3:1c:ab:ea:0b:fb:cc:0c:4e:
1e:0c:ea:88:bf:e4:e0:f1:ca:06:44:da:c0:c2:cd:dc:4f:51:
84:e4:8f:bf:81:f8:8a:5e:5b:25:d3:fa:df:9a:3f:14:06:0d:
1e:21:3f:c4:35:fa:6d:92:8d:25:ed:c8:7a:fe:ea:40:a2:f8:
01:7b:08:ff:c2:8b:c3:d6:eb:c0:98:66:3e:54:e0:73:49:51:
36:1e:7d:69:3d:e8:4e:c1:40:9b:42:47:f1:f4:a2:6f:47:b2:
e9:b1:f6:5f:31:f8:2d:52:5a:a3:9b:6c:aa:b5:f0:40:77:3e:
4f:16:e0:ba:53:a2:92:5e:a9:3a:6a:9a:76:c5:26:fe:d2:f2:
1d:a6:39:c5:05:49:78:02:db:27:98:c7:04:75:61:22:4a:91:
16:9f:db:34:db:2e:fd:0c:c4:9f:07:2e:6f:77:97:31:87:33:
1c:1a:5e:69:e9:2c:f4:8e:f4:76:ba:98:55:8a:52:1d:e7:eb:
83:9f:d9:74:48:90:21:da:9f:a0:47:f4:ea:0e:0d:ea:52:8a:
1b:1a:32:2c:41:0e:03:43:73:b1:d3:08:f1:fc:76:80:80:83:
ed:70:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:18:27 2025 by rpki-client