Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92B1532504011F0A7811FC8DAE4EC9C.roa
File: C92B1532504011F0A7811FC8DAE4EC9C.roa (raw, json)
Hash identifier: JDJxbtraHDyXnHYKOI2f+aswoCG2hyNnbnd/5TN/rkE=
Subject key identifier: 47:F1:69:91:82:20:FF:C8:EF:DB:D5:68:32:98:07:D5:80:16:1C:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018807
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92B1532504011F0A7811FC8DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 14:46:03 +0000
ROA not before: Mon 23 Jun 2025 14:45:59 +0000
ROA not after: Wed 30 Jul 2025 14:45:59 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100359 (0x18807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 14:45:59 2025 GMT
Not After : Jul 30 14:45:59 2025 GMT
Subject: CN=685968ab-cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:8f:26:ee:46:b3:e4:52:58:d8:86:32:c9:
f1:7f:32:1f:a7:ea:5f:a6:8b:1f:0d:ed:72:e2:10:
3c:69:86:30:da:7e:5e:9a:5e:27:81:c7:82:98:8b:
a7:23:ff:b8:b2:33:a4:ac:4e:0c:34:d6:5d:6f:c2:
45:82:fe:3b:df:77:7c:94:0f:57:84:4d:a1:35:5d:
59:18:57:ac:b7:8d:a2:54:49:ed:58:84:03:87:94:
0b:02:94:4a:d2:ac:2b:97:67:76:1c:a9:4f:5c:79:
f3:40:b4:3b:92:4a:b0:d3:cb:4f:d0:39:31:bf:52:
d7:38:6a:5b:b8:f9:45:9a:5e:6a:76:0c:37:3c:5a:
1d:e3:8b:92:72:c9:c0:49:60:8b:53:92:38:fc:53:
bd:0f:50:17:86:85:ea:b2:82:fa:40:a8:44:75:0e:
f3:25:4d:78:34:c0:c9:38:3d:d6:c3:94:da:95:51:
3b:f2:df:35:a6:1f:74:73:47:4e:4d:8b:91:c6:1a:
fe:61:73:6b:5b:5e:23:57:17:89:50:b1:39:e8:68:
8d:a0:80:bc:d2:08:8c:df:e3:de:7f:ab:dd:25:3a:
77:20:15:c2:b7:28:7f:1d:b6:cb:6c:df:7e:43:e6:
ff:93:55:09:43:48:33:80:97:af:5a:aa:24:01:ff:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:69:91:82:20:FF:C8:EF:DB:D5:68:32:98:07:D5:80:16:1C:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92B1532504011F0A7811FC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:8f:02:b2:68:f7:52:3c:63:ed:46:2c:f7:ab:2b:28:7f:99:
21:62:94:1d:6a:76:53:f6:e4:fb:1f:00:18:da:45:1b:97:e8:
54:80:c6:2f:90:2e:d7:e8:69:86:22:ee:f8:66:11:a8:12:cd:
af:00:ac:9a:27:a6:25:17:4f:4f:b5:47:4a:1a:92:24:06:be:
1c:9d:9b:a6:1c:15:1e:60:a2:23:ce:49:f6:23:16:eb:49:a9:
e0:96:78:44:d4:09:49:c7:1f:76:1c:d0:ed:76:7e:ea:56:24:
eb:99:4d:a4:f3:5b:1c:ce:20:34:41:de:37:2a:82:66:c7:69:
f9:fe:4e:53:a4:d4:69:c4:b4:70:c2:10:fb:ce:91:cc:0b:e9:
35:3c:5b:a1:79:25:e8:c1:bc:ab:9c:7e:c6:42:17:0a:b9:f6:
98:85:1d:7a:9f:30:ac:0f:09:ae:ca:25:4b:32:c8:f3:4d:c3:
34:a1:ad:bd:fb:27:0b:81:82:0a:a1:ea:48:ff:7c:17:b7:13:
c9:ae:e9:f5:a7:cd:5d:ae:da:0d:da:de:ce:ab:6b:ce:d1:f2:
33:e0:22:a1:5c:fd:ed:4f:aa:a2:9d:97:87:4e:0b:ee:ed:46:
d3:9a:d7:90:58:dd:b9:6c:3f:38:41:60:8e:39:0e:ef:30:80:
be:e0:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:48:23 2025 by rpki-client