Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F54A65E6452D11F0A38F1AA5DAE4EC9C.roa
File: F54A65E6452D11F0A38F1AA5DAE4EC9C.roa (raw, json)
Hash identifier: OVE1OOUkA1a2OCFYF2BEmJTqVS/CSAgY0zyJKQFbP4s=
Subject key identifier: 88:83:EF:84:FF:C2:FF:7E:4B:1F:17:A9:21:D5:26:53:D2:10:69:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01859A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F54A65E6452D11F0A38F1AA5DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 12:33:34 +0000
ROA not before: Mon 09 Jun 2025 12:33:30 +0000
ROA not after: Tue 11 Nov 2025 12:33:30 +0000
asID: 139923
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99738 (0x1859a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 12:33:30 2025 GMT
Not After : Nov 11 12:33:30 2025 GMT
Subject: CN=6846d49e-ed98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:c8:70:57:99:a5:9a:99:69:eb:9c:10:56:
42:9a:48:70:5a:2c:00:57:fb:47:8d:56:88:88:ca:
35:3c:6e:5b:ab:3d:10:10:3d:d7:2b:8d:7a:46:36:
35:b5:c5:6e:e8:39:94:0a:8f:55:45:7f:62:80:f3:
07:81:33:1a:2c:42:68:c2:50:1b:d4:a0:ea:58:34:
af:a9:8d:dc:45:23:2b:56:b2:5d:64:16:a6:02:c6:
d7:1b:75:ee:a7:af:70:bc:9d:c4:23:15:7f:b1:d1:
27:a7:55:00:3c:d0:b1:a0:5a:f9:fc:e5:43:72:b5:
d5:c9:85:67:c6:c4:31:65:8b:0e:dd:53:cd:b4:eb:
84:a4:c0:e7:30:94:a7:b7:aa:d6:46:66:83:d1:43:
46:e3:ef:7f:32:06:ad:51:64:2f:f0:e0:ca:cc:7d:
b5:82:c7:d9:0b:3a:29:79:e0:95:99:98:b1:36:51:
13:7b:75:99:5e:55:55:fd:45:8a:aa:64:97:c7:7e:
86:ea:25:84:7d:1b:81:76:61:10:96:af:58:11:21:
c7:94:d3:7c:0a:26:47:c1:38:cc:35:01:6f:a0:0f:
d3:c4:38:11:ec:73:8b:8c:d9:5c:7e:4f:1f:62:0c:
3b:2f:0c:5e:dd:3a:d4:3b:46:f0:ed:5d:6a:da:be:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:EF:84:FF:C2:FF:7E:4B:1F:17:A9:21:D5:26:53:D2:10:69:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F54A65E6452D11F0A38F1AA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:d8:69:a4:3d:7a:f1:e5:82:22:c5:b0:2e:1a:dd:22:5c:e5:
6c:82:4c:bc:16:88:0c:82:80:47:19:e5:43:bc:a0:25:98:ef:
a9:b4:2e:90:a9:6c:f4:28:23:96:4a:ac:ad:24:99:03:4a:83:
bb:86:2c:23:53:f5:86:0a:8d:8d:3a:e3:1a:a7:08:76:77:9f:
25:be:1a:40:b4:05:39:05:38:7b:8e:c3:1e:86:09:8d:f0:65:
95:58:16:a5:e8:09:7a:31:2c:c9:fa:e0:26:63:2e:71:3c:b7:
ed:f0:86:3c:90:1f:31:cc:d9:75:8f:5a:f8:17:0a:ae:94:4f:
3a:7a:42:13:c6:55:7a:f9:03:ec:e0:5b:0b:5c:51:e5:3e:87:
e7:f5:a3:03:f2:b6:45:7d:fb:9b:c2:05:b3:af:ad:f0:9b:98:
37:07:6d:47:f9:df:a3:77:49:87:c0:bf:a4:dd:f0:3c:92:db:
6d:d2:67:ca:bc:74:14:38:93:aa:d6:fa:2b:e2:6d:a7:da:95:
91:b7:72:f8:16:8f:cf:ff:71:95:df:5b:cd:b3:f9:ae:39:b9:
81:70:32:d2:bf:00:af:86:b5:c3:b8:51:30:36:36:06:fa:a4:
13:f2:a3:3a:26:b3:b8:c1:8a:61:84:53:22:5c:66:15:10:1d:
14:53:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:27:37 2025 by rpki-client