Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49412444CF711F08C41D9F2DAE4EC9C.roa
File: D49412444CF711F08C41D9F2DAE4EC9C.roa (raw, json)
Hash identifier: fbxyfqfDltxKy97740FC03l1awyZUc2YQnqbBcdAcvg=
Subject key identifier: 28:AA:CC:D7:51:B7:02:6B:CB:2A:67:58:2B:B7:19:12:08:12:F9:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018776
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49412444CF711F08C41D9F2DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:26:16 +0000
ROA not before: Thu 19 Jun 2025 10:26:11 +0000
ROA not after: Sat 27 Dec 2025 10:26:11 +0000
asID: 201411
IP address blocks: 154.84.156.0/24 maxlen: 24
154.84.157.0/24 maxlen: 24
154.84.158.0/24 maxlen: 24
154.84.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100214 (0x18776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 10:26:11 2025 GMT
Not After : Dec 27 10:26:11 2025 GMT
Subject: CN=6853e5c8-daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:1b:9a:d0:41:df:7a:c1:00:74:70:fe:45:
eb:65:59:5b:8c:43:6d:f8:3d:fd:0f:9b:32:6b:56:
24:f0:eb:ef:b6:9a:9e:ae:2f:a4:67:44:38:b6:2b:
1a:49:a2:cf:27:a4:50:3b:4e:0d:67:85:06:84:1a:
c0:a9:08:f0:fc:b0:f8:ea:88:7b:40:fc:bc:91:81:
ad:81:ec:04:fc:27:ed:45:67:26:32:6e:e0:37:d2:
ee:35:15:2e:33:26:61:00:29:83:57:84:63:4f:6d:
16:fc:b4:7f:9c:45:e3:52:fb:fb:54:c1:1d:d4:5f:
56:fd:4e:3a:14:33:84:fd:6e:51:f6:35:3a:a7:b7:
f0:84:c7:4e:ba:2d:5e:44:bf:98:6d:b6:21:18:2a:
f6:14:3c:70:56:53:56:e3:97:3b:8a:be:3c:9e:18:
36:33:56:e0:e9:a0:29:ac:c2:a4:ea:1c:1c:02:19:
1d:5a:8a:e3:46:b1:80:4d:b5:f3:1b:b7:b7:d0:e8:
a9:3f:d4:29:d0:0e:1f:cb:da:a7:7c:6c:ec:d9:22:
c0:3e:f5:ad:dc:9e:9b:1f:9a:25:d8:fa:b9:67:80:
ca:19:4f:96:e4:f2:fb:af:2f:8c:71:5c:b1:5a:51:
a9:23:d1:0e:a8:8b:12:c3:49:f8:36:7d:43:2a:10:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:CC:D7:51:B7:02:6B:CB:2A:67:58:2B:B7:19:12:08:12:F9:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49412444CF711F08C41D9F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.156.0/22
Signature Algorithm: sha256WithRSAEncryption
25:14:9e:41:02:4b:38:7d:ca:4d:95:6d:cf:ec:b3:43:57:47:
9f:7d:d3:f6:a4:32:69:3a:ea:c7:1d:e5:77:81:56:5c:49:d3:
2e:52:69:66:4d:97:33:11:da:14:54:df:f3:f4:8c:18:4e:ea:
e1:e4:2b:ee:57:7a:fe:8a:d7:75:2d:e4:33:a6:13:03:d3:56:
16:30:76:1b:31:79:3d:43:44:86:5b:70:db:d6:d1:8a:62:a9:
2e:44:d1:a9:c6:e1:54:d1:eb:47:09:40:f6:ed:42:72:18:53:
23:88:1f:78:6f:be:01:46:1c:7c:8f:49:a3:d1:66:4e:03:19:
42:7c:f3:dc:74:9d:b0:e2:3c:24:54:c3:64:a0:ca:b5:48:bf:
31:63:cc:ad:89:06:4b:b9:c3:10:c9:7f:27:63:0e:f3:a2:52:
2e:5f:15:3f:f2:a0:ea:18:27:43:1b:45:87:1e:fe:dc:f5:79:
07:94:ed:f4:fe:c2:22:1d:f7:46:65:e9:a4:f8:91:fa:3f:b8:
e0:8b:95:93:27:78:15:78:de:aa:ec:58:2c:4e:cf:eb:3b:3a:
ee:f0:18:c5:06:df:62:c9:44:ca:0f:78:50:ba:4a:f4:da:f6:
c5:9a:eb:31:e8:90:65:81:a6:f1:bf:69:c2:eb:8d:c7:69:ba:
cd:44:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:24:53 2025 by rpki-client