Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1077D6513A11F0A626B79EDAE4EC9C.roa
File: BF1077D6513A11F0A626B79EDAE4EC9C.roa (raw, json)
Hash identifier: VWWnUgMh6xrSVG1E/L2I31reS+x+wU0fCbeeSlj75dU=
Subject key identifier: A3:4A:7E:5C:3F:29:42:F6:C9:8A:9C:89:3F:38:92:4C:B7:EC:42:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1077D6513A11F0A626B79EDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 20:35:21 +0000
ROA not before: Tue 24 Jun 2025 20:35:16 +0000
ROA not after: Wed 03 Sep 2025 20:35:16 +0000
asID: 138915
IP address blocks: 154.93.111.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.126.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100534 (0x188b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 20:35:16 2025 GMT
Not After : Sep 3 20:35:16 2025 GMT
Subject: CN=685b0c09-ec28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:90:81:5a:56:35:61:e9:ed:62:61:63:38:
26:d6:6e:4e:12:d7:b1:92:38:a7:61:90:a4:96:21:
50:01:1f:ae:89:9f:2e:b3:9a:04:4c:7f:31:86:c6:
b2:a3:c8:1c:cb:38:0c:f8:6d:97:88:5a:a8:f7:d5:
ee:75:a3:49:4a:7c:97:b8:e8:b8:cc:69:6a:5f:4d:
89:0d:24:bc:cb:fc:2c:6c:0f:8d:91:04:98:c0:d7:
6d:8d:ca:e4:04:34:5b:73:1b:67:99:98:71:ca:85:
c3:64:7d:89:6c:05:26:be:f5:a6:23:38:ce:5f:c1:
85:62:8b:d3:ab:11:e1:70:fd:75:f7:bd:bd:f7:b2:
0c:24:86:cb:51:21:40:bb:cd:67:91:da:95:c2:49:
4b:28:62:7e:97:c3:1f:22:e6:b2:fa:c7:df:d0:ec:
48:08:e1:41:33:17:44:12:93:17:29:24:02:80:09:
a7:53:69:1e:47:16:39:ed:41:02:15:b2:d5:33:22:
aa:c2:7f:c7:a0:57:f5:f3:e0:50:83:ac:f2:a9:12:
2c:b0:33:19:bb:fd:be:c9:5d:ee:2b:ab:62:f7:d7:
f5:fa:d9:34:2b:fc:25:fa:03:d8:ff:42:38:f4:a8:
77:d4:47:34:03:69:b8:2c:81:32:9b:04:7a:f2:8f:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:7E:5C:3F:29:42:F6:C9:8A:9C:89:3F:38:92:4C:B7:EC:42:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1077D6513A11F0A626B79EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.111.0/24
154.93.115.0/24
154.93.122.0/24
154.93.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:09:83:47:51:15:10:5c:aa:91:4c:20:46:c1:3b:79:2e:d8:
0a:d3:87:e8:0c:57:d0:c8:a8:fa:1a:6a:33:7b:10:31:da:7d:
16:3e:d0:42:cf:99:78:78:36:85:2a:64:08:28:d5:4f:fd:df:
2f:b3:d6:4a:ff:98:5b:b4:29:14:2d:fd:99:f5:a9:3a:cd:ab:
1c:e5:ff:bf:81:6b:48:1d:56:8d:6f:1b:40:2b:1f:6b:36:f6:
86:32:5a:6c:8d:27:fa:34:f5:2d:3a:95:f1:c8:fa:ab:fc:fb:
27:fc:1d:58:0a:25:0d:ad:c8:d2:09:a7:b9:eb:d5:a6:89:4a:
4e:24:b4:ea:bc:80:62:64:52:a7:12:47:f2:c2:01:08:ff:84:
c5:b4:f4:27:88:44:43:e0:65:30:0f:0d:b7:d3:82:5a:0f:22:
d0:ef:2c:8b:30:23:49:f0:83:a6:49:61:7d:2f:1c:f0:82:73:
97:f4:5f:db:c1:22:52:4a:c6:ed:20:ea:f1:f6:d5:d0:70:a2:
3a:b8:59:83:5a:da:09:c0:ef:86:18:cd:be:b2:32:e6:20:8a:
0e:8a:77:31:75:d7:6f:76:45:71:15:c8:32:6e:90:50:65:4a:
02:fd:79:dc:c9:ec:e7:a0:af:42:16:22:80:7c:d5:a1:af:f4:
49:ec:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:52:26 2025 by rpki-client