Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A1D79C49E111F0982812CDDAE4EC9C.roa
File: E5A1D79C49E111F0982812CDDAE4EC9C.roa (raw, json)
Hash identifier: I/geBBiflKXa0Qj6oVdd1tmw7XyN+w+V+XP3/Nbc4CE=
Subject key identifier: E4:9D:E1:3B:84:11:B1:96:DC:62:27:2B:BC:C3:CE:98:84:DB:F7:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A1D79C49E111F0982812CDDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 12:11:42 +0000
ROA not before: Sun 15 Jun 2025 12:11:36 +0000
ROA not after: Wed 08 Jul 2026 12:11:36 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100053 (0x186d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:11:36 2025 GMT
Not After : Jul 8 12:11:36 2026 GMT
Subject: CN=684eb87e-a788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:79:68:6e:53:ff:17:e8:f8:54:d4:95:e9:
10:a6:ea:f5:2a:41:57:bb:b8:9e:03:f8:23:f3:22:
86:7a:62:e9:b1:9e:ad:69:ed:0e:7e:43:ee:f2:fa:
3e:28:39:8c:24:76:83:eb:4b:84:69:2d:39:c5:51:
0d:3a:77:03:07:87:5e:b5:f7:81:0e:83:9a:9f:3f:
f0:98:92:b4:f2:05:8a:15:a4:6f:a5:41:51:91:92:
e2:74:3a:5c:fe:53:a5:11:fb:c3:80:7f:c1:0e:cb:
84:d6:38:bf:97:62:9e:3d:98:c2:0f:aa:1a:d9:8a:
3e:07:59:38:f4:82:0c:21:fe:6f:ed:59:47:1b:69:
36:03:03:ee:8d:f9:33:99:ec:74:50:31:94:e6:0a:
1f:fa:6f:53:37:fa:2b:6f:b0:23:a9:f9:56:cf:1d:
ba:f0:60:92:41:2e:d3:20:bc:ad:7c:2c:d6:4e:6c:
41:1f:af:79:f6:23:ab:03:85:4d:75:ac:44:9d:cb:
82:8d:d9:00:f1:63:35:6b:64:4b:89:88:72:2b:e3:
ed:9c:67:16:ae:45:08:ea:aa:93:b0:63:69:60:4e:
b4:59:ef:20:68:9b:c5:a2:77:0a:54:84:a2:66:09:
c2:ad:f7:bb:40:80:91:83:d4:92:54:f1:39:15:c3:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:E1:3B:84:11:B1:96:DC:62:27:2B:BC:C3:CE:98:84:DB:F7:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A1D79C49E111F0982812CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
21:c3:2a:84:7f:8f:fc:e1:b1:67:f1:17:e1:6b:5e:23:1b:ab:
03:75:01:68:1a:9f:44:27:2d:45:d3:77:5e:bd:b4:df:e1:b7:
78:e9:69:9e:0f:8b:74:8c:30:24:47:2b:af:c5:35:53:74:6b:
ca:54:32:41:1e:da:c4:57:91:2b:fc:d6:4c:a2:aa:50:9a:0e:
f2:00:47:e0:80:4f:fd:5e:69:3f:e8:a3:85:fe:d1:bb:88:8a:
6c:5e:54:ab:e7:48:41:a7:1a:dc:96:d5:71:4a:ba:cb:84:5b:
a4:7b:be:e7:43:42:c6:f0:ab:57:da:f3:6b:8c:4a:1d:8d:ca:
70:13:09:a1:ac:89:7b:b9:84:64:07:1f:2e:df:33:62:47:7a:
47:f2:00:05:64:9e:4f:c3:50:1b:d8:82:42:51:66:0c:f9:ed:
78:96:71:75:53:53:80:bb:95:ef:b3:c3:66:ca:11:08:71:6b:
99:34:ff:de:1b:19:93:49:fb:e6:11:36:2f:86:f0:eb:dc:c2:
37:13:37:b0:ec:b8:70:f2:33:5d:7a:19:3a:0b:f2:5c:e9:80:
65:7a:05:4b:f8:1f:8f:b1:bd:83:38:11:01:ab:d1:ff:46:6d:
ed:7f:9e:be:92:d5:ca:12:9c:a8:34:65:24:17:76:0a:fe:74:
89:99:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:01:59 2025 by rpki-client