Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C13EDA12525B11F08D52BD87DAE4EC9C.roa
File: C13EDA12525B11F08D52BD87DAE4EC9C.roa (raw, json)
Hash identifier: 4mq7ejzeC9hengoulJQgzTgAP9v+hIJ7QEmBm55T2mo=
Subject key identifier: 0E:9F:F2:DF:67:9C:F8:CA:84:AD:FC:44:23:31:1A:C0:F4:1B:80:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018919
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C13EDA12525B11F08D52BD87DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:04:09 +0000
ROA not before: Thu 26 Jun 2025 07:04:04 +0000
ROA not after: Fri 01 Aug 2025 07:04:04 +0000
asID: 395793
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.100.0/24 maxlen: 24
154.193.101.0/24 maxlen: 24
154.193.102.0/24 maxlen: 24
154.193.103.0/24 maxlen: 24
154.193.104.0/24 maxlen: 24
154.193.105.0/24 maxlen: 24
154.193.106.0/24 maxlen: 24
154.193.107.0/24 maxlen: 24
154.193.108.0/24 maxlen: 24
154.193.109.0/24 maxlen: 24
154.193.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100633 (0x18919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:04:04 2025 GMT
Not After : Aug 1 07:04:04 2025 GMT
Subject: CN=685cf0e9-7447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:6b:ef:00:61:fc:22:bd:90:ee:b8:84:ba:
fe:38:73:62:38:15:6d:23:e3:34:94:33:14:ce:3a:
db:b8:5d:4f:e2:4e:a2:06:80:db:7e:cc:76:6c:c5:
f7:9b:9f:1c:66:d9:c8:d8:1e:ca:6f:62:80:0e:e4:
ee:bd:26:9e:e3:81:c6:7a:18:48:52:d3:f0:da:c9:
45:c7:fd:71:8e:17:33:ee:c8:ac:c5:b0:b5:0f:61:
0d:54:0a:38:c9:c5:4d:2c:85:21:19:62:b0:49:7a:
e5:d2:1c:34:7d:9f:99:e2:c1:bd:27:ef:dd:c9:91:
61:e4:2c:82:27:90:6b:39:43:9c:65:ff:94:18:42:
a1:0b:0e:ff:89:f7:80:46:58:82:65:92:de:4c:81:
47:55:07:82:2b:c0:b5:da:b2:e4:4d:7d:e4:de:fa:
db:15:46:c3:1f:57:e1:36:e7:21:ec:19:8f:8c:68:
a9:a3:de:b7:e5:36:31:14:d2:38:b8:92:18:a8:c4:
08:77:be:3f:8c:3a:af:c9:8a:2f:70:cc:24:f1:1b:
9f:ec:8f:58:17:4f:af:0d:57:7a:95:87:57:9c:2e:
e7:f0:5d:aa:3b:31:83:b7:6f:e4:73:de:b2:67:bd:
a0:81:a5:f1:40:b5:27:2b:ac:92:2d:bd:90:e9:36:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:F2:DF:67:9C:F8:CA:84:AD:FC:44:23:31:1A:C0:F4:1B:80:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C13EDA12525B11F08D52BD87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0-154.193.110.255
Signature Algorithm: sha256WithRSAEncryption
9d:9e:d7:e6:25:10:43:61:ad:2f:a4:22:db:a5:72:83:08:85:
af:1c:e7:45:ef:d1:a4:98:d4:50:e0:cd:de:29:42:78:94:93:
04:93:0e:ce:95:0a:25:d8:6b:c9:c2:54:4a:1c:a8:60:51:91:
27:2e:11:af:c7:09:4b:58:8a:f7:97:30:4f:63:7a:b6:0e:d3:
83:f6:c5:6b:62:f5:51:bc:2d:44:f6:b1:96:1f:1a:90:db:23:
b4:e7:96:e2:55:7a:47:41:be:c3:02:e1:89:5b:89:d2:39:61:
40:9d:b3:87:47:12:2e:0f:b9:6c:c4:c2:c2:87:b7:7c:0f:fa:
72:10:6b:b8:5a:85:92:74:c1:69:e1:21:93:bd:04:5a:14:12:
d1:4f:43:74:70:27:be:13:9a:17:37:b9:9b:2d:08:2f:f9:06:
98:0c:c6:a6:9f:6c:24:c4:ba:58:1a:02:f2:c1:fb:1b:49:fc:
50:67:9f:a2:05:d6:45:76:6e:6a:00:f7:8f:14:59:2d:b5:c9:
28:2c:e2:39:91:d4:ea:98:6e:7f:aa:f2:3d:23:a7:2e:a9:94:
c0:51:2c:0f:df:95:c3:cb:f8:22:71:c9:83:39:ae:72:35:d2:
c1:0b:b2:03:d1:f9:5c:ae:aa:40:e4:2e:c2:b7:b1:70:db:2e:
33:d0:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:45:47 2025 by rpki-client