Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A62D6A4DCF11F0AF7A1AEDDAE4EC9C.roa
File: A3A62D6A4DCF11F0AF7A1AEDDAE4EC9C.roa (raw, json)
Hash identifier: 9SyDPcjkQG0+7GM2WrK+RkOQHH2RLt7HzyuCQgUwNNI=
Subject key identifier: FF:5E:9F:45:A0:30:3A:0C:AE:B9:3C:51:BD:4D:5B:47:38:8C:37:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018783
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A62D6A4DCF11F0AF7A1AEDDAE4EC9C.roa
Signing time: Fri 20 Jun 2025 12:11:05 +0000
ROA not before: Fri 20 Jun 2025 12:11:00 +0000
ROA not after: Sun 20 Jul 2025 12:11:00 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100227 (0x18783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 12:11:00 2025 GMT
Not After : Jul 20 12:11:00 2025 GMT
Subject: CN=68554fd9-c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:c8:4b:f2:49:91:98:c9:09:e9:57:cb:60:
4e:e5:f1:b3:a1:ad:6f:82:df:bc:a8:0a:e6:79:08:
8f:f2:e9:af:93:52:cf:42:41:42:2b:0c:92:6b:ef:
55:ee:2a:2e:0e:53:7c:bc:43:f2:01:7e:ba:77:2a:
30:c8:c6:be:96:0e:1e:db:59:e0:17:d7:f2:f6:1f:
fa:9a:df:27:06:47:b7:4a:46:b5:91:03:e2:13:ff:
20:b5:48:88:7c:db:03:37:b1:94:5f:53:02:94:5f:
5e:93:7a:1f:2d:a0:80:f2:bb:67:69:c7:0f:c5:07:
4b:0f:34:a9:5f:f7:43:b5:6f:44:c0:20:cf:e6:53:
de:26:1f:e0:ac:45:49:c4:4b:aa:03:ed:f8:2e:c3:
9a:86:7b:45:94:b4:28:5a:72:7e:98:c8:02:0e:4a:
0d:a6:26:16:bf:e0:a2:91:67:18:4e:2b:f0:30:00:
f3:9f:49:12:2d:e0:55:30:9a:a7:3a:06:8b:db:f2:
38:f3:8f:ba:ad:48:86:a2:dc:04:50:c4:41:01:43:
64:5b:cd:37:36:6e:9c:40:4b:60:7d:aa:93:5e:c2:
3d:ee:47:ec:33:8a:c4:b8:47:1a:78:27:f9:00:f3:
28:b8:55:19:e0:4f:89:43:ed:74:41:05:2f:55:f3:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:9F:45:A0:30:3A:0C:AE:B9:3C:51:BD:4D:5B:47:38:8C:37:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A62D6A4DCF11F0AF7A1AEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
04:21:96:aa:fb:48:dd:86:63:48:1a:ed:37:9c:b8:12:63:f4:
19:ba:b2:f0:6f:15:bf:a3:d5:33:5a:53:1d:d1:60:af:c2:88:
bf:a8:98:c2:6b:3a:37:52:ba:1a:b5:54:9b:96:12:c7:02:d5:
48:49:c7:05:a0:5e:4d:79:a1:13:d7:07:e1:0c:25:c8:db:2e:
9f:5a:b3:bd:d1:68:c8:d5:cf:ec:96:e3:ce:e5:0c:e8:81:b5:
ea:f7:2a:7d:ad:d8:eb:b9:6b:b4:64:f7:78:6a:55:56:38:5c:
50:03:d1:c1:13:2b:fc:ca:82:d4:49:e5:b2:d6:7b:fb:39:11:
06:2c:15:f0:2c:49:2c:74:2b:63:9d:35:80:7b:3c:c1:f3:97:
cd:b8:c4:a1:2b:b5:cb:8d:43:b9:5a:e2:7c:f8:a7:9b:50:0c:
6c:c8:22:cf:b1:2d:57:e5:84:8a:ff:72:b3:10:bc:78:2d:03:
08:09:ef:2c:6e:be:dc:7b:aa:49:8d:c8:bb:7a:f4:65:9c:fd:
d9:1b:08:d8:c5:24:c0:93:9e:23:98:78:fb:92:fb:d8:95:5d:
b4:3c:5e:32:cb:a9:2f:5e:51:1b:f9:8a:ea:67:06:0d:ce:5f:
99:6c:6a:71:28:54:f4:3c:24:54:58:3c:9d:ca:5a:47:c6:da:
9a:93:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:11 2025 by rpki-client