Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A8E97C519911F0808AB497DAE4EC9C.roa
File: F5A8E97C519911F0808AB497DAE4EC9C.roa (raw, json)
Hash identifier: DqVg3vJ6H9vuNVDdQc1dmqw9LetSIt+AalphOGs6YM4=
Subject key identifier: CD:1B:C2:BC:7D:BF:5D:25:56:58:1D:AC:70:E4:75:C9:97:9B:81:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A8E97C519911F0808AB497DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:56:54 +0000
ROA not before: Wed 25 Jun 2025 07:56:50 +0000
ROA not after: Thu 31 Jul 2025 07:56:50 +0000
asID: 20326
IP address blocks: 154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100597 (0x188f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:56:50 2025 GMT
Not After : Jul 31 07:56:50 2025 GMT
Subject: CN=685babc6-2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:8d:59:ce:17:b5:a8:11:c7:ac:92:ea:ae:
c1:36:90:bd:27:98:65:a6:3e:bc:c9:76:71:e2:95:
e0:a9:2d:ea:cf:17:c4:7e:66:1b:52:26:d1:a9:1d:
17:9d:81:e3:30:ae:a1:16:c9:40:6e:e2:88:7e:38:
09:48:48:45:ed:14:12:19:6f:18:a4:22:12:43:49:
8a:30:6e:df:82:c0:4b:e4:e2:34:c7:3b:28:1b:aa:
ee:86:53:92:3a:20:67:1d:b8:a3:ec:d3:00:71:de:
d1:f7:65:38:6a:ee:a3:f1:3a:1c:6f:0a:eb:63:14:
c0:50:9e:d6:42:30:23:87:21:ef:96:ea:dc:1a:bd:
d9:63:80:4e:88:3c:6b:f9:50:86:3e:6e:e4:d7:91:
40:f2:1e:c7:85:24:b1:7b:33:3f:e9:ab:fb:db:29:
0e:fc:05:3a:25:7b:36:b8:df:ba:68:17:ce:97:d7:
62:ba:f1:53:16:49:25:0d:87:70:0d:26:0a:bf:84:
72:53:79:06:0b:fc:e7:f6:2d:f2:0f:e7:70:d5:e9:
f4:47:ef:34:6f:d5:64:c9:d3:f9:7d:e0:9b:8d:4e:
03:c0:9e:3d:21:00:ce:aa:7b:4a:1a:17:a2:6c:75:
74:0d:5c:0d:91:68:20:e7:48:86:4e:ef:ab:20:46:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:C2:BC:7D:BF:5D:25:56:58:1D:AC:70:E4:75:C9:97:9B:81:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A8E97C519911F0808AB497DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:c0:bf:39:db:24:ee:23:ce:96:a8:cd:3c:d0:e4:01:c6:80:
29:b8:db:c8:87:d9:0f:92:96:93:35:34:c7:53:be:de:32:a4:
d0:0c:a4:a6:b7:6a:be:8c:d8:f0:3b:87:39:27:07:69:a3:2e:
f8:4b:96:06:10:f3:cc:27:1b:87:e6:da:a7:5d:72:9d:96:09:
7b:28:5d:97:e2:5a:34:57:ad:aa:dd:29:5f:09:36:90:69:65:
5f:54:51:91:ca:62:ef:69:1e:92:e3:cd:7b:4f:30:36:c6:1d:
78:6b:5a:73:b8:a3:33:ff:23:c5:b3:d2:a4:87:03:d9:d0:98:
44:d8:b6:15:2c:7c:60:67:0d:a9:6b:e4:6f:01:9c:e2:ce:ec:
bd:58:09:89:d6:2b:85:e6:72:78:eb:10:a0:c6:5f:5f:5c:43:
76:fb:ae:d2:69:dd:77:3e:75:49:27:49:9c:48:21:9d:45:d6:
e9:62:37:b5:59:05:cb:1a:8d:30:62:b4:6a:4e:36:48:a2:3a:
1d:e9:04:1d:a5:42:69:ef:5d:99:2d:f2:18:4c:10:5d:f3:29:
7a:1b:bc:c7:ef:ec:30:73:81:a6:48:7f:24:dc:54:1e:89:84:
59:64:f0:69:8f:38:07:32:1e:22:d3:be:d8:dc:27:7c:38:4b:
90:fb:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:49 2025 by rpki-client