Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C503DCC0565611F09F4EC0E3DAE4EC9C.roa
File: C503DCC0565611F09F4EC0E3DAE4EC9C.roa (raw, json)
Hash identifier: qYmtTnk4FGgx2G6Ef0BpygxgJhKROujDOo7gEhwAGws=
Subject key identifier: BD:6F:F5:55:A0:42:AF:29:81:49:42:B8:CF:25:56:D8:34:AE:C1:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018998
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C503DCC0565611F09F4EC0E3DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:38:32 +0000
ROA not before: Tue 01 Jul 2025 08:38:28 +0000
ROA not after: Mon 04 Aug 2025 08:38:28 +0000
asID: 61112
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100760 (0x18998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 08:38:28 2025 GMT
Not After : Aug 4 08:38:28 2025 GMT
Subject: CN=68639e88-9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:f8:81:20:d7:c0:ab:8b:d1:dd:25:3f:01:
99:2a:49:c2:1c:22:07:0c:0a:8d:ec:6e:1f:08:55:
b5:a5:c0:23:89:da:51:0c:bb:c5:27:26:2c:7f:f0:
4f:91:58:5c:79:93:44:42:39:64:8d:5f:18:a5:a4:
9a:21:1e:8a:9a:f6:28:5a:fb:30:6f:df:b9:80:4c:
d4:e7:ed:86:f2:8e:e8:7a:d2:3b:47:b6:7a:2f:fb:
b5:a2:58:5b:10:13:ef:09:0d:0a:93:28:fb:1a:3a:
5b:09:be:8a:44:df:4b:d2:92:5c:0f:52:14:c4:e0:
44:6a:6d:26:f6:8d:9b:21:c7:3d:b4:36:a0:0e:87:
88:3a:4c:1a:dd:a0:4a:d7:51:56:10:2a:c8:f3:c5:
40:31:36:f4:c0:c8:36:50:a8:53:d8:b6:b4:f5:eb:
44:e4:48:44:c1:02:dc:3b:be:4e:2d:07:8b:2c:55:
9b:44:81:8a:4b:0b:ff:31:d9:e3:a1:39:0e:d0:8f:
43:2e:70:dc:2e:e3:8a:93:49:d5:a2:32:df:e1:c4:
15:f2:91:06:41:dd:04:ee:d5:78:46:ac:e8:64:d0:
d6:4d:10:ec:33:4d:c8:61:37:0a:c2:45:e3:00:1a:
29:63:a0:68:41:c6:f5:a3:ad:71:60:6c:e9:4e:18:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:F5:55:A0:42:AF:29:81:49:42:B8:CF:25:56:D8:34:AE:C1:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C503DCC0565611F09F4EC0E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
38:42:e0:52:c4:65:94:10:a3:9d:29:b4:8e:39:a4:e0:ba:e3:
77:51:67:17:ca:24:5d:d3:39:b8:fa:15:5f:45:a2:24:52:30:
83:9d:32:d3:f6:32:8e:4a:39:99:a1:73:0d:b2:33:8b:5b:fe:
4c:26:f7:22:39:92:dd:9f:f3:da:aa:c6:ac:c0:5f:e1:e0:8e:
56:e7:05:fe:ae:41:2c:e8:34:36:f3:a0:a6:93:fd:fc:6e:de:
57:9d:9c:7b:45:de:ec:14:3a:cd:66:7a:89:8c:d5:01:bc:0e:
24:3e:ee:9a:f5:8f:b8:d9:5a:a7:ec:ba:47:79:6b:57:a3:5d:
24:17:e2:2d:7c:23:fd:c3:94:b9:3a:dc:73:d5:41:d7:0a:2f:
6b:10:06:86:a1:cf:cd:46:c6:24:a0:e2:16:ec:bc:c6:4f:b6:
9b:e1:5a:90:e3:d6:84:d9:fa:fc:76:eb:df:25:9a:e2:fc:79:
2c:05:ca:17:c8:aa:0f:fc:e4:16:aa:a4:1a:5b:7f:6c:83:ee:
64:56:d6:81:81:6f:38:ae:e3:c7:72:b3:77:5f:20:45:90:06:
d0:ad:19:22:f7:54:bd:25:ef:17:c1:b5:e8:23:0b:40:0b:f6:
48:c6:af:6a:30:02:9c:1f:c3:9b:06:ca:44:67:20:1f:2c:3e:
8a:c0:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:01:52 2025 by rpki-client