Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E602EB0C574911F087FF478BDAE4EC9C.roa
File: E602EB0C574911F087FF478BDAE4EC9C.roa (raw, json)
Hash identifier: IO2D4ghfn9c2uuTYxK8mVXHjJm4R5Z4BAjuiwYXfjSw=
Subject key identifier: EE:1C:F5:CB:F0:27:65:40:84:7F:02:FE:DD:CD:D7:6A:50:68:EF:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E602EB0C574911F087FF478BDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 13:38:55 +0000
ROA not before: Wed 02 Jul 2025 13:38:51 +0000
ROA not after: Sun 24 Aug 2025 13:38:51 +0000
asID: 138195
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100810 (0x189ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 13:38:51 2025 GMT
Not After : Aug 24 13:38:51 2025 GMT
Subject: CN=6865366f-f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:b6:cc:b8:21:98:94:41:44:a0:5e:fe:24:
7d:ab:74:77:e2:19:78:b9:dd:75:d3:50:bd:2c:e8:
27:79:de:1c:20:3d:93:20:ec:ac:1e:e1:2e:35:0d:
73:61:7f:0e:2f:f6:ad:4d:36:58:4f:11:a5:4f:a3:
fc:67:ce:5b:7c:96:79:d7:4b:1d:1e:4f:38:96:aa:
f1:00:90:4d:fd:8f:2f:c5:9e:01:45:91:f3:fe:d7:
a1:5f:73:89:3f:5e:1c:b3:de:77:84:6f:28:a9:67:
0f:67:d2:92:50:db:97:6e:c1:3f:3b:4f:ed:be:7b:
f0:04:d1:1d:1a:f9:e2:ce:c6:70:77:d6:c7:8b:c0:
2c:0f:10:2b:a0:88:06:8f:4d:03:b8:32:86:48:b5:
0e:46:ea:a7:2b:5a:d5:3b:9e:0c:1e:95:72:1f:ed:
5b:57:e9:dd:f3:4b:55:65:7c:93:60:c5:4c:78:c9:
08:f6:fe:af:62:c3:c2:c3:f6:fa:05:91:7e:8f:fa:
b5:a4:a8:df:6a:9e:76:1c:a1:cf:18:a0:05:a7:32:
99:e9:88:53:27:01:51:d4:46:1d:dc:0c:1d:41:65:
8c:50:d0:1e:47:84:4a:1e:2e:35:0c:81:f0:8e:9c:
67:1d:d5:78:93:2d:b1:63:3f:7b:1d:1d:49:b2:9a:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:F5:CB:F0:27:65:40:84:7F:02:FE:DD:CD:D7:6A:50:68:EF:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E602EB0C574911F087FF478BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4b:d7:8b:35:be:39:81:1a:7d:d0:85:7f:5c:cb:b7:ec:fe:
8a:79:f7:be:d4:7b:7f:de:ad:25:ce:31:37:1d:21:10:2f:ca:
f7:9d:6e:a6:c6:67:a9:35:1b:4d:8c:44:bd:f6:2e:6b:ad:58:
b8:75:95:72:76:6a:a3:f0:c2:c6:54:38:10:ca:10:23:56:78:
32:3b:82:96:be:5d:e0:a3:30:f9:ce:de:8b:c3:47:ce:7c:53:
88:be:b3:a0:8b:7e:38:83:65:dd:05:7a:8e:6d:78:7c:04:24:
18:0b:c4:33:10:62:e9:21:89:7a:ba:c7:12:8e:26:0e:45:22:
87:7c:84:3a:35:60:28:d4:8d:1f:56:12:71:89:37:8f:f6:d8:
af:64:6e:74:88:b2:b7:86:66:b6:fc:8b:c6:f5:8f:c8:ba:19:
08:d5:11:44:3f:17:71:da:ee:e2:9a:f6:b0:e1:79:75:11:d8:
ef:5c:65:51:3c:d8:87:9a:95:20:fb:74:c4:9c:bf:f1:56:25:
82:14:46:b1:37:8b:6e:56:4e:6d:76:ef:c1:52:66:88:2c:b6:
9e:40:9c:08:c1:9a:7f:62:46:c1:1c:38:d5:83:e4:1f:29:74:
04:47:92:12:bc:98:9f:cf:6a:47:14:6e:9f:29:ba:73:f9:81:
06:5b:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:04:49 2025 by rpki-client