Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA933744E5C11F099B7218CDAE4EC9C.roa
File: BCA933744E5C11F099B7218CDAE4EC9C.roa (raw, json)
Hash identifier: 0XDQTK+0HQ86ntgEieAHPUE2CDpr/lrhFVYhEQ+YEnY=
Subject key identifier: A8:96:CE:0C:6D:D7:EA:8A:FA:82:6A:18:EE:F4:5F:B2:64:98:46:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA933744E5C11F099B7218CDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 05:01:06 +0000
ROA not before: Sat 21 Jun 2025 05:01:01 +0000
ROA not after: Thu 24 Jul 2025 05:01:01 +0000
asID: 214238
IP address blocks: 154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100258 (0x187a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 05:01:01 2025 GMT
Not After : Jul 24 05:01:01 2025 GMT
Subject: CN=68563c92-b1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:3d:e3:f3:fd:dc:7e:1a:b7:e7:83:df:d3:
22:14:17:b3:ea:91:2b:ce:90:e8:80:18:df:59:ca:
1e:f7:8d:ec:f3:6a:de:d4:a8:d3:f8:2a:14:f3:6b:
23:d5:ff:d2:55:e8:1f:87:e1:45:7a:7d:0e:a5:e0:
f0:7d:df:c5:3f:db:38:c3:99:60:17:e7:32:a9:37:
7a:3b:29:db:7c:4a:26:fa:03:3b:96:af:98:7d:b9:
9c:97:bf:ea:e8:cc:ad:83:52:15:c7:9a:3e:79:c8:
a9:c8:ae:a5:7b:3e:a6:b4:a6:6b:60:d9:80:f8:e0:
54:ad:fc:1d:52:cd:78:5c:06:2d:01:70:0a:68:a8:
b4:b0:d9:88:48:fb:6f:bb:70:cc:0f:6e:5c:6a:c1:
bd:7e:92:ab:5b:6d:8e:e2:51:64:9b:59:33:ce:85:
cf:03:60:ea:0b:d1:dc:41:1a:05:0f:a2:6b:a8:4b:
56:8b:92:9f:dc:a0:f8:ba:72:45:61:aa:ad:77:06:
a7:a2:27:5f:37:17:df:c8:ca:c4:dd:e4:bb:1d:e7:
8c:21:5d:7c:86:91:28:81:d5:a0:ad:41:98:57:9a:
9f:17:08:00:b6:3d:35:ba:0f:8d:08:8b:e8:d0:8c:
04:7d:66:8b:60:d6:13:af:f7:92:11:80:57:a4:ea:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:CE:0C:6D:D7:EA:8A:FA:82:6A:18:EE:F4:5F:B2:64:98:46:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA933744E5C11F099B7218CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d7:b9:bc:42:d1:a0:39:fa:45:16:f5:eb:3b:05:8d:fb:77:
68:fb:d6:47:27:c3:b9:4e:3b:46:09:73:74:6b:05:d6:fa:e5:
52:13:83:f6:3d:cb:92:4c:f5:1c:c6:2f:08:62:02:57:14:79:
ef:1a:96:42:14:34:e5:98:34:6b:5f:9c:03:58:37:06:3f:12:
f8:2d:36:de:8f:f2:1d:79:52:22:e9:14:d9:6f:77:ed:74:eb:
68:3f:53:67:a5:e6:dd:16:3e:8c:c3:b0:3f:46:45:4d:e2:cd:
0b:bf:29:cd:4a:b1:e0:5d:f8:a3:05:80:cd:2c:ea:74:1f:91:
84:70:16:49:63:f1:99:ca:0c:64:0b:7a:cd:b4:ab:88:e2:d3:
80:91:ed:08:23:95:1d:40:f9:fd:84:fc:85:87:9f:e9:2c:07:
12:ce:dc:6a:e9:98:24:51:b5:f3:ed:21:b6:2d:4e:69:94:6e:
fa:88:60:55:8c:6d:52:f6:ed:5c:71:bc:86:fe:54:c9:e5:27:
86:31:a3:b3:3e:df:c2:da:01:de:92:9c:06:24:a9:8b:44:67:
fc:7f:6d:79:da:d6:a7:34:8f:88:ba:b9:da:05:4a:50:c8:3b:
0c:9c:e1:e3:86:ba:59:f2:f8:d3:2a:b8:1b:84:a6:bf:3b:62:
3b:04:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:23:39 2025 by rpki-client