Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB265CA2514B11F08B9A998ADAE4EC9C.roa
File: AB265CA2514B11F08B9A998ADAE4EC9C.roa (raw, json)
Hash identifier: oOmuTG1aNnHfRn5ellks0yF4YiuYJHwLoAxboCEu9P8=
Subject key identifier: DF:64:B5:FE:C8:FB:0F:8B:1F:F6:C4:DE:E2:C8:14:E2:D1:2C:9C:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB265CA2514B11F08B9A998ADAE4EC9C.roa
Signing time: Tue 24 Jun 2025 22:36:29 +0000
ROA not before: Tue 24 Jun 2025 22:36:24 +0000
ROA not after: Wed 03 Sep 2025 22:36:24 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100570 (0x188da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 22:36:24 2025 GMT
Not After : Sep 3 22:36:24 2025 GMT
Subject: CN=685b286d-0a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:0e:34:aa:79:f1:d3:ef:83:b7:d1:e4:70:
6e:ea:d0:3a:8f:b7:e4:08:29:1f:05:2c:37:62:c3:
b5:ba:91:94:5d:fa:02:94:b8:3a:42:8a:f2:17:d2:
d6:09:ed:fd:6b:5b:13:45:68:15:cd:ff:c5:8d:5c:
59:9d:34:79:14:30:33:d6:bb:87:3a:bb:f9:83:72:
4a:10:b4:09:b3:9d:82:f2:89:7e:bd:78:36:b1:b1:
54:ca:42:da:06:17:9c:f2:a0:c1:5a:c1:2a:a0:dc:
a6:48:6b:e8:51:4c:ff:4b:46:53:a2:19:44:bd:60:
79:83:58:eb:52:6d:d1:e8:d6:d1:cb:e5:5e:c4:4c:
95:66:0c:13:1f:15:c3:7d:96:31:50:d8:a1:5e:d2:
4b:53:8c:ee:43:13:d5:2d:9b:47:13:69:d1:41:75:
96:98:8d:ce:f8:e6:b7:23:f9:77:ba:c8:b3:73:1e:
9f:86:41:76:84:96:73:fd:9b:c9:79:17:66:92:22:
17:05:46:09:60:7d:3a:4f:c5:f3:c5:9d:78:2e:7f:
6c:22:b9:11:55:08:dc:9f:cb:0b:86:0c:47:d8:38:
76:28:e3:87:d0:7a:fc:b2:5b:74:4a:ff:f0:6e:39:
27:62:3e:f1:0c:c2:9c:24:1e:83:00:af:db:24:04:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:B5:FE:C8:FB:0F:8B:1F:F6:C4:DE:E2:C8:14:E2:D1:2C:9C:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB265CA2514B11F08B9A998ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:cc:5a:e4:69:f5:62:2c:0d:9f:dc:a8:40:89:88:71:d3:68:
6e:93:46:e4:4e:1f:95:21:93:1d:0c:cc:25:a9:02:c0:c9:12:
01:d0:65:ee:e3:e4:f9:0e:5f:8e:17:ea:ef:0c:dd:ac:81:1b:
a0:d2:41:8c:96:d0:25:17:13:79:11:ca:04:49:b7:26:9e:59:
b0:e2:db:96:41:51:8f:f5:f5:e4:95:62:31:9f:a8:42:94:11:
b3:36:3f:c4:ff:65:90:77:4d:ab:3b:2e:81:06:f2:c8:81:82:
ce:24:2e:96:49:1d:81:8a:49:4e:b5:23:c7:ea:64:74:22:18:
6d:5e:5c:7e:5a:d5:41:3b:26:e8:e1:41:cf:59:77:c1:87:3d:
4c:50:9a:f9:d4:5e:04:90:cb:7f:8e:a6:08:7e:08:b0:ae:e9:
95:11:5e:80:2a:ba:1f:b5:3e:2d:d0:c9:48:b9:e1:8f:3a:35:
cb:30:88:39:36:46:56:c6:08:00:53:cf:37:bf:97:e5:07:3a:
39:3c:90:22:89:a9:a8:79:ed:fc:ba:7b:43:56:86:e7:e3:9c:
b6:c7:c7:66:e0:f7:a6:d5:28:42:a5:ea:bf:c6:77:ec:29:ba:
15:d5:62:35:da:5e:6e:36:07:c4:c6:46:00:72:1c:c5:87:03:
33:12:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:00:10 2025 by rpki-client