Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5D2C77E575411F082D7EBD0DAE4EC9C.roa
File: D5D2C77E575411F082D7EBD0DAE4EC9C.roa (raw, json)
Hash identifier: Ex3gL7EmSpwf1A9PLjl84EIxzMwkHAybiHI66/j4W/k=
Subject key identifier: 5F:A9:9F:5E:D8:48:BF:49:4C:37:45:79:C3:E7:02:68:46:02:DC:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5D2C77E575411F082D7EBD0DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 14:57:13 +0000
ROA not before: Wed 02 Jul 2025 14:57:08 +0000
ROA not after: Thu 04 Sep 2025 14:57:08 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100826 (0x189da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 14:57:08 2025 GMT
Not After : Sep 4 14:57:08 2025 GMT
Subject: CN=686548c9-1911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:0a:23:6c:ba:b9:de:4c:89:c4:12:07:fd:
7c:29:82:0b:a1:ac:07:46:af:26:3f:49:ce:60:72:
be:98:a6:39:ce:3d:22:f2:e2:bc:1e:5e:2d:1b:6b:
a0:ad:8b:ef:0c:e4:5e:92:d4:0c:71:ff:49:e0:67:
3d:80:23:44:b6:05:d2:22:25:a7:3f:47:b5:e7:80:
4d:12:02:7a:70:4b:57:55:ba:d6:62:50:fb:28:26:
6e:06:e1:6b:ed:52:ac:f5:2b:a9:79:8d:74:b6:87:
e8:1d:b9:2e:78:58:6a:f8:db:44:8b:59:00:53:4b:
a0:ec:6f:1d:d2:2a:3d:2b:98:74:3d:1e:5b:b3:69:
e4:f7:ed:f8:ae:cd:91:cc:66:a0:86:63:a9:a5:35:
9d:d6:d8:a6:3c:91:d5:61:60:75:2e:57:38:98:d9:
ba:de:b4:f9:95:9a:84:4b:2f:d9:6a:8d:4d:a4:44:
d5:eb:da:fc:59:15:fb:c6:11:cc:bf:59:35:74:ea:
ef:73:3c:00:77:80:a5:0b:7b:36:ed:f4:5b:d6:d7:
27:d5:7f:b9:38:86:8d:8d:88:1b:1b:33:1e:ec:bc:
d7:fb:9d:9b:b6:04:56:a2:fa:40:fa:7e:50:b5:af:
f6:65:27:7e:85:60:4d:ca:68:d5:4e:71:75:4f:ed:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:9F:5E:D8:48:BF:49:4C:37:45:79:C3:E7:02:68:46:02:DC:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5D2C77E575411F082D7EBD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
14:ff:e5:96:3d:8c:c5:08:27:9f:c9:7f:64:91:16:dd:52:aa:
05:fe:dc:21:7b:c9:2d:d4:81:63:b0:ac:82:e3:63:64:93:77:
b7:f5:81:5c:e0:a8:d9:12:fa:c6:a0:6c:e2:26:2c:f9:9c:96:
2f:9e:bd:07:4b:f0:89:5f:d8:b4:bc:18:d5:e6:da:24:91:5d:
e7:6b:97:93:40:7d:24:e3:01:25:6e:3d:f9:a7:84:42:5f:20:
a4:af:b6:8d:15:66:75:af:7f:01:d6:9c:7b:f6:57:6a:61:0d:
8b:5c:a1:54:b4:c1:0f:ca:34:f3:b6:bb:ce:84:7a:db:ee:50:
ca:a7:48:15:03:a4:71:44:01:c2:a4:af:37:a3:97:04:f5:c9:
3f:8f:55:5b:43:f0:9b:18:77:9a:da:ae:bc:a3:7d:b5:09:27:
d4:4c:30:9b:e9:32:43:21:b2:55:83:21:38:62:6f:69:32:2e:
34:7a:3e:40:45:d9:ad:45:15:2c:99:14:4f:c0:c2:12:91:30:
b1:e2:8c:01:8c:2b:14:85:24:1c:f2:5b:8e:c1:4a:a6:d0:78:
76:db:7e:06:6e:4b:14:23:4b:88:4e:36:94:6a:e1:89:fa:f9:
45:be:23:63:01:5e:26:7a:49:53:57:d5:c3:d4:d4:74:c5:95:
05:2f:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:07:38 2025 by rpki-client