Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA3D1BC4C6211F085C191A4DAE4EC9C.roa
File: DCA3D1BC4C6211F085C191A4DAE4EC9C.roa (raw, json)
Hash identifier: wIPRPOt2VdzXscZMeWF8i38wTSVh4YZFKYQePnozZ8g=
Subject key identifier: FE:E3:24:C2:73:D7:DC:31:DE:A1:15:31:C6:B8:B3:07:0C:BC:AC:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA3D1BC4C6211F085C191A4DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 16:39:55 +0000
ROA not before: Wed 18 Jun 2025 16:39:50 +0000
ROA not after: Fri 12 Sep 2025 16:39:50 +0000
asID: 398823
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100195 (0x18763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 16:39:50 2025 GMT
Not After : Sep 12 16:39:50 2025 GMT
Subject: CN=6852ebda-3eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:b6:fc:91:3a:68:4e:38:b7:8b:74:31:42:
18:67:50:ad:54:1a:ac:09:7a:b2:d6:03:85:6b:84:
a4:52:1f:78:97:2b:0f:bb:cc:5a:93:fb:56:14:9e:
72:76:4f:ba:9a:a3:83:55:73:51:bd:19:1a:e0:78:
96:13:3f:02:38:61:1d:f2:8b:aa:30:44:c8:7a:9b:
61:e1:dd:85:58:15:36:91:2f:e5:6d:21:c2:db:8d:
2c:f1:60:17:e2:9f:2d:6d:e8:e1:da:a4:ee:1f:e6:
05:b6:a9:5f:0d:cc:9a:40:52:c3:d2:35:d7:6f:6a:
55:bb:e3:ad:29:fb:cd:21:f8:0f:ad:56:42:df:40:
4b:2a:60:f1:d3:18:ec:1e:cf:ce:93:b9:27:bc:ff:
57:cf:35:9b:42:03:8d:f7:fd:64:e0:d1:bd:70:dc:
b9:b6:c3:a4:10:aa:1d:5a:3a:6b:2c:0a:3d:bb:e7:
a0:fe:0e:71:fe:e2:3b:ff:7f:f6:64:44:0a:69:5d:
48:48:d4:94:48:71:67:a8:c8:6f:8f:93:f3:6b:c0:
14:1e:05:a7:f6:9b:d0:12:cd:f1:17:ff:f6:58:ca:
00:a9:94:82:78:de:6c:07:41:e1:82:92:42:d9:87:
19:29:05:1b:56:40:25:a2:a4:c8:e0:5e:d4:c1:9a:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:24:C2:73:D7:DC:31:DE:A1:15:31:C6:B8:B3:07:0C:BC:AC:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA3D1BC4C6211F085C191A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:3f:48:14:25:54:00:9a:1c:ee:41:10:38:b3:8d:84:4b:b5:
90:9b:9e:39:c2:bd:db:cf:d5:be:00:92:6d:96:3e:a7:f2:0e:
9f:12:0e:91:6c:ce:06:4b:56:7b:9e:ba:38:5d:09:4e:c0:e7:
11:4d:cc:ed:b9:18:85:eb:30:9c:cb:74:40:8c:a4:ec:4e:0f:
63:16:86:88:17:f3:27:09:8e:d0:d4:7a:c8:67:b4:ee:47:ce:
0a:5a:d6:4c:66:b3:47:1c:ea:fa:36:f2:2e:64:67:c9:65:d2:
4e:6e:c6:39:d2:01:f5:57:8c:52:28:19:ac:25:fe:ce:d0:95:
c3:76:61:2e:29:4e:86:f6:57:e6:bc:6e:12:b9:aa:5b:2c:a1:
e1:1d:0f:86:fa:fb:b9:31:3e:6f:6a:30:5d:8e:23:b6:fc:cf:
b0:2a:87:75:91:b7:af:6f:2b:9e:42:71:37:3d:d0:0b:70:69:
01:2a:50:56:d9:fa:90:fe:9a:0b:ea:6d:49:b3:59:ca:84:23:
3c:3c:a1:9e:ae:d8:8a:b7:f8:e1:a1:5f:4a:68:cb:36:8b:50:
c7:33:0c:ea:a4:47:48:73:c6:b9:32:64:ac:c7:73:a5:09:c2:
e6:c7:9c:f3:8c:a9:d4:91:6f:e3:82:07:82:2b:e9:b0:e5:0a:
f6:db:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:50:52 2025 by rpki-client