Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1570BE4B8111F0A8A5C6DBDAE4EC9C.roa
File: FC1570BE4B8111F0A8A5C6DBDAE4EC9C.roa (raw, json)
Hash identifier: zwJpCsoJadpV2255IBxrTwm2vycnvKn4WceAgOJP3n8=
Subject key identifier: D6:F4:8E:BC:66:B8:84:DD:72:F7:16:73:81:E3:66:6B:7C:88:56:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018729
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1570BE4B8111F0A8A5C6DBDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:50:11 +0000
ROA not before: Tue 17 Jun 2025 13:50:04 +0000
ROA not after: Fri 12 Sep 2025 13:50:04 +0000
asID: 398823
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100137 (0x18729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 13:50:04 2025 GMT
Not After : Sep 12 13:50:04 2025 GMT
Subject: CN=68517293-59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:d9:ac:54:31:9d:40:65:ca:3a:cf:86:c9:
31:d3:9c:be:7b:f9:c1:9b:79:f2:b5:26:71:86:ae:
5c:db:a5:72:3a:27:11:a1:76:1b:3c:79:be:65:b0:
45:21:e0:89:f9:82:05:0c:7e:cc:c8:f9:06:7c:5b:
67:d4:54:74:43:7f:5e:30:22:b2:95:68:5c:d9:e5:
82:f0:e3:69:56:c7:9c:2a:b3:fb:cb:ed:af:94:f8:
88:dd:c1:98:a6:37:c0:c8:07:01:81:34:41:23:dd:
8b:52:f7:7d:35:8d:d4:5a:a0:52:8b:ae:15:91:1a:
39:46:11:aa:04:b5:bc:64:1a:77:99:f3:09:5b:7b:
12:9d:12:ed:6f:cd:99:88:0b:0e:6d:50:20:e2:5a:
77:e9:2e:56:52:fc:da:46:f2:70:59:37:e0:39:86:
20:a8:0b:ce:74:48:e6:dc:2a:80:90:e8:19:c5:c3:
f2:bf:bc:b3:6f:ae:03:d8:6b:81:3f:03:d5:d0:75:
e5:8a:1c:3b:a8:50:6c:5a:13:20:38:d5:19:d7:d8:
01:ab:b3:49:70:75:14:2a:25:01:b0:54:a1:58:7a:
3e:8f:5d:3d:91:12:ae:69:63:59:ce:fa:96:6e:cf:
9a:7e:43:11:4f:48:4f:e8:a4:5e:0d:58:28:fa:e8:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:8E:BC:66:B8:84:DD:72:F7:16:73:81:E3:66:6B:7C:88:56:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1570BE4B8111F0A8A5C6DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
aa:61:e1:3c:c4:64:8c:13:a2:a3:ec:9f:a6:01:ad:62:7a:ce:
05:b6:21:ac:6f:c4:a0:b0:4a:3e:05:bc:2f:78:2e:66:a6:34:
78:4d:24:28:46:6c:53:d7:eb:ea:7f:ce:40:d9:23:d1:fe:d8:
d8:dc:7d:25:4f:48:d4:4d:4a:e1:b0:d6:d7:6d:97:bd:5f:9a:
e7:9a:77:cc:21:56:3c:34:98:03:ce:79:dd:bb:81:b1:97:2a:
4b:a4:c2:ee:8a:c3:8f:5e:41:90:1c:79:3a:25:c0:bb:07:eb:
e9:9c:ef:b3:4d:ee:a3:8f:55:e2:92:b4:f5:b9:ed:3b:04:8b:
27:27:ec:e8:f7:03:4b:41:5d:44:30:52:3c:88:e0:d1:21:d3:
11:ef:c5:b1:7c:47:93:4b:32:8f:bc:e2:33:06:a0:e2:04:32:
55:71:61:1c:e1:39:2d:95:69:93:d7:b6:9d:92:a2:d1:91:f4:
69:74:b9:7b:f1:f0:3d:46:85:4f:45:6a:73:91:a5:b8:f1:b2:
2e:67:72:b8:38:e8:5d:66:e0:c7:eb:db:96:c6:7e:ad:9e:e8:
3f:69:f8:30:2c:1a:64:b0:4d:7e:61:fe:39:b1:87:fd:93:5c:
08:d0:fe:1e:7a:af:0c:5f:70:b8:51:28:94:85:05:50:e1:63:
eb:7d:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:30:15 2025 by rpki-client