Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6E2AD044CF411F094E9E8DEDAE4EC9C.roa
File: A6E2AD044CF411F094E9E8DEDAE4EC9C.roa (raw, json)
Hash identifier: nJS7a/UNvQkrD71/5gZcaT8DDGXx3GW+CF2gzJ2OxD4=
Subject key identifier: FC:D3:22:25:4B:EA:A8:CC:AB:74:9F:BA:2C:6C:2B:3D:F1:43:6D:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018772
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6E2AD044CF411F094E9E8DEDAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:03:31 +0000
ROA not before: Thu 19 Jun 2025 10:03:26 +0000
ROA not after: Wed 24 Sep 2025 10:03:26 +0000
asID: 16437
IP address blocks: 154.81.208.0/21 maxlen: 24
154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100210 (0x18772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 10:03:26 2025 GMT
Not After : Sep 24 10:03:26 2025 GMT
Subject: CN=6853e073-81d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:ea:43:37:a1:ac:c1:e0:a7:5b:3d:9e:e8:
cc:71:21:03:fd:35:1d:7e:1a:6e:47:a6:d1:96:7d:
0f:fb:fa:d2:b0:7b:26:4e:14:77:e5:36:ae:d7:03:
cb:8c:11:51:68:e4:e9:41:30:d2:ed:8d:7b:9c:df:
c2:8d:f4:15:ed:5c:b3:76:65:74:c5:e5:0e:a8:7d:
17:60:35:98:57:76:68:b3:3c:c3:4c:fd:8d:e4:54:
84:71:fa:83:6f:af:f9:06:24:4c:21:7f:06:a6:b9:
36:ba:dc:a2:20:5a:64:c7:f7:77:15:ad:77:56:3d:
4a:ef:60:cb:3e:87:4e:f5:61:81:13:ec:7e:01:71:
3d:42:89:68:97:7e:9a:4c:57:f7:58:8b:f3:de:7a:
5e:7e:65:ca:23:df:ab:f8:9f:4d:36:89:e1:21:2a:
3b:e1:ef:b3:9c:d7:5d:13:51:11:23:d5:62:fa:ad:
12:f3:96:57:df:ea:40:26:a7:81:82:d3:cd:1a:d1:
56:3f:7d:64:3d:65:4e:79:39:f2:53:4d:0e:4a:39:
b6:0d:94:5a:ab:33:dc:47:27:70:09:ac:0d:a7:0a:
84:be:f1:7b:d1:03:c3:19:8c:b1:8f:7f:ad:d9:06:
77:ab:16:46:d8:49:67:f5:ad:1e:c3:fd:17:99:18:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:22:25:4B:EA:A8:CC:AB:74:9F:BA:2C:6C:2B:3D:F1:43:6D:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6E2AD044CF411F094E9E8DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.208.0-154.81.219.255
Signature Algorithm: sha256WithRSAEncryption
d8:50:89:2e:53:e8:69:15:2d:e3:e8:56:a8:12:0d:8c:5a:93:
97:62:d8:59:58:51:a7:19:89:4e:7f:79:68:1c:c4:1e:01:0f:
9d:96:a3:0a:49:79:cf:90:53:ce:8c:78:3a:7b:d5:37:25:36:
22:8e:dd:3c:4e:47:16:66:ae:5e:c7:5f:58:4a:0b:20:7d:18:
81:b4:0b:67:a6:9e:06:68:49:81:44:c7:46:86:fd:51:60:f3:
e3:32:49:cd:6e:4a:3c:24:bd:04:f8:76:ed:cb:d2:17:9c:15:
f4:2d:74:14:ed:a3:73:ac:ee:38:03:d4:2a:95:80:01:62:31:
fb:33:67:c6:40:99:c6:dc:74:3a:79:65:1f:0c:97:f5:5b:28:
32:93:8f:60:58:88:7e:55:93:71:db:91:ca:6e:55:78:3d:cb:
e6:a8:cd:df:48:6c:4a:25:85:43:11:e9:d6:c0:4b:9a:15:49:
b8:70:a1:5e:93:b3:6b:a5:13:13:8a:66:3d:37:c4:e5:2b:bf:
27:89:76:cf:cc:63:34:44:aa:42:bb:a7:c2:17:ac:38:5f:94:
de:c5:ff:25:d4:b3:65:fc:25:f2:87:76:da:91:89:97:11:af:
07:ce:e4:50:58:44:d3:2c:3f:d9:8a:fd:cf:32:88:9e:e6:ac:
0b:1b:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:13:55 2025 by rpki-client