Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADB5404501C11F0B85968E8DAE4EC9C.roa
File: EADB5404501C11F0B85968E8DAE4EC9C.roa (raw, json)
Hash identifier: nQCcwSb3L+ron1AHDZ7Fqnui7NetGU4BNDTCJbvjLm4=
Subject key identifier: 61:BC:96:AD:AE:6C:5D:E3:E5:C1:35:AF:A8:A8:7A:46:61:0A:8F:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADB5404501C11F0B85968E8DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 10:29:18 +0000
ROA not before: Mon 23 Jun 2025 10:29:14 +0000
ROA not after: Tue 30 Jun 2026 10:29:14 +0000
asID: 38638
IP address blocks: 154.83.20.0/23 maxlen: 24
154.91.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100345 (0x187f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:29:14 2025 GMT
Not After : Jun 30 10:29:14 2026 GMT
Subject: CN=68592c7e-44c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:d2:b5:92:70:e7:e9:39:ca:2e:98:62:aa:
d0:54:7d:b1:ae:92:ca:c3:4f:ea:8a:5d:c4:75:5b:
08:1d:24:78:54:8c:de:25:1e:e2:e2:de:f0:e9:bd:
2c:43:d9:31:65:02:85:5b:13:39:9a:69:de:e7:ce:
a7:70:4d:9f:f5:a3:71:bc:c1:ef:b2:16:bf:f3:44:
7a:7b:9c:8c:2d:d9:c4:b0:ad:87:92:51:b2:e0:80:
a5:bf:f7:85:fa:20:b4:77:1e:5e:54:01:29:11:1c:
c7:08:0a:e0:6c:d2:42:90:f1:88:65:0c:3d:95:9b:
47:71:25:67:04:48:86:49:78:2e:3c:a1:69:18:45:
eb:3a:6d:13:87:03:8b:4c:9b:ff:c7:35:e8:ec:8a:
fd:ab:d7:5b:8d:f3:9b:13:b7:5a:c0:60:2a:2c:13:
44:2b:63:ef:86:8c:1f:e7:d1:ad:70:73:1d:3f:1f:
9d:91:ae:f8:39:ef:0e:f8:11:25:86:b2:4e:fb:84:
e5:14:48:08:11:26:f9:b5:51:e2:3d:00:58:2a:56:
6d:91:8e:a4:a0:c1:13:0c:0a:da:04:37:8b:d9:23:
0d:55:41:02:c1:ca:00:77:c4:19:e7:8a:4f:f1:77:
0d:c2:87:e6:c2:eb:b7:d6:6e:53:04:d2:9e:bf:bd:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:96:AD:AE:6C:5D:E3:E5:C1:35:AF:A8:A8:7A:46:61:0A:8F:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADB5404501C11F0B85968E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.20.0/23
154.91.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b2:0e:ee:9d:30:7e:72:61:2d:f4:2a:a8:44:7d:2e:97:26:
81:34:88:86:b0:ee:f8:48:b8:71:19:f4:5b:53:12:02:d2:91:
c7:4f:55:bb:e2:e9:3c:72:cd:50:9b:b6:b0:1c:9d:bb:59:78:
6a:0c:83:1c:71:3f:80:a5:54:9e:28:17:53:be:06:40:5b:10:
c1:e8:ef:45:ff:13:bb:4b:3a:a8:86:81:60:a0:46:d6:b2:bb:
c0:48:e0:79:d4:48:47:b8:c9:69:ed:27:b2:7c:f4:5f:11:ab:
fc:fa:6d:79:9b:e6:f7:f4:d0:44:f7:55:ac:19:3d:69:00:33:
13:3b:8f:44:70:04:db:c6:40:4b:71:51:bc:8c:4c:0f:35:f3:
dc:11:f4:3a:74:64:a9:0d:e0:54:d8:42:3e:d0:89:ee:3a:1a:
e6:9a:a8:96:89:75:f6:e9:e5:3e:82:36:97:33:fd:b8:75:9d:
39:ea:68:cc:ea:09:29:f1:75:dd:49:ae:08:71:7e:0b:ae:cd:
9b:7c:e5:e5:d2:6d:b6:df:eb:8b:47:21:2b:16:43:5f:37:08:
9e:c4:f1:6e:5d:b8:b4:9c:c0:23:18:83:1e:ec:ef:c1:b9:48:
18:3e:66:72:c7:09:8e:22:a5:78:4f:3c:1a:b8:36:49:a2:62:
66:14:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:46 2025 by rpki-client