Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8C2D80242E11F082275984DAE4EC9C.roa
File: AE8C2D80242E11F082275984DAE4EC9C.roa (raw, json)
Hash identifier: yLR3BFEJ9ZCvU8JqzmLdYkX3HYIXVFR3UjdPcPUVYVs=
Subject key identifier: 15:DA:15:C5:AD:0B:F8:FB:03:8D:DC:88:21:4D:5C:7C:1C:00:74:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8C2D80242E11F082275984DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:45:37 +0000
ROA not before: Mon 28 Apr 2025 12:45:32 +0000
ROA not after: Mon 23 Mar 2026 12:45:32 +0000
asID: 984
IP address blocks: 154.90.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97208 (0x17bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:45:32 2025 GMT
Not After : Mar 23 12:45:32 2026 GMT
Subject: CN=680f7871-805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:2d:7c:6c:77:d0:ee:82:ef:17:e8:11:74:
49:15:04:e4:a4:30:31:4a:27:27:ae:6c:b2:66:9a:
68:17:ac:5c:8d:37:d1:bf:23:fb:93:8a:48:50:5f:
96:7b:bc:1e:b1:1f:3f:2c:36:80:87:95:31:30:04:
a9:ca:d2:6d:d9:9c:ba:33:4b:88:0d:dc:91:5f:f8:
ed:bb:2a:68:ad:eb:58:e7:f3:89:82:a5:94:8a:51:
56:50:74:92:d3:ff:b4:d8:6c:a1:aa:d3:55:96:ac:
eb:e5:5d:93:f7:4e:ba:41:d8:08:62:f9:eb:3c:d4:
59:03:b2:2a:4b:2a:e1:bb:9f:03:f0:9c:5a:9d:a8:
76:6e:5d:b4:22:ea:b6:45:d7:07:70:7f:98:7f:15:
bc:18:61:3c:ce:56:02:bf:a2:25:86:10:5e:7e:9e:
23:f6:85:28:e5:2e:fc:89:29:e8:c5:f4:e2:40:27:
99:bd:44:88:1e:fd:c8:eb:12:b6:a7:e9:fb:18:db:
2f:fc:32:49:20:e3:3a:f2:31:a0:af:1f:bb:7e:7a:
be:b4:e8:87:db:b6:b1:fb:ea:d8:c9:7c:2d:03:53:
ce:6d:a6:15:e2:7f:d8:f3:7e:a9:07:c7:e9:dd:19:
05:43:e6:2a:0d:0a:19:ab:a6:36:7f:54:72:74:86:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:15:C5:AD:0B:F8:FB:03:8D:DC:88:21:4D:5C:7C:1C:00:74:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8C2D80242E11F082275984DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c0:93:46:76:48:37:53:42:6d:26:86:50:a9:55:79:ec:c4:
e5:83:0e:64:25:ec:b4:bf:e5:db:55:3c:24:a1:87:84:6c:79:
32:c5:3a:eb:a3:0f:f2:9f:ec:41:03:82:a5:e6:c3:a8:66:fd:
96:0a:b3:60:0a:fc:a2:f5:5a:80:e7:28:80:81:c3:91:69:0a:
36:07:07:fd:cc:11:30:4e:df:e0:e4:d6:c4:6f:d0:e7:00:e1:
42:8c:d3:ec:48:ab:25:ea:6a:f0:74:d5:b3:43:9f:50:5e:8a:
30:b4:eb:38:92:aa:b2:9a:8f:2b:f6:d2:73:3f:ed:20:ef:bf:
f3:60:32:71:40:af:fb:29:0a:07:f2:e7:3f:91:22:d3:33:fe:
2f:b9:c6:2c:29:bc:5d:5a:1b:4c:8b:cd:fc:95:8c:7f:de:ad:
80:d8:d0:44:3c:f4:4a:80:38:5b:f5:3f:89:eb:9e:93:3d:29:
06:17:eb:4a:95:f5:e3:b4:68:09:f6:d5:56:14:df:37:77:09:
5f:a6:04:74:d6:17:7c:aa:8e:2c:a9:58:13:84:68:e4:ba:f8:
12:9e:66:30:c7:33:e6:c6:5b:2a:e5:3d:8a:d8:03:3f:3e:cd:
96:1b:25:90:1b:bc:fb:14:ff:07:43:10:61:de:50:b2:2b:29:
0b:a7:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:01:30 2025 by rpki-client