Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18B0835859C911F0BC6537CCDAE4EC9C.roa
File: 18B0835859C911F0BC6537CCDAE4EC9C.roa (raw, json)
Hash identifier: elV/pCLTNiAGlsSBO5ZeytTe+PcmXMCiZM7HOlcQdHs=
Subject key identifier: D9:31:CE:D7:93:EC:E0:9F:99:FC:57:5C:4E:C2:9B:70:DC:E4:34:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18B0835859C911F0BC6537CCDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 17:54:29 +0000
ROA not before: Sat 05 Jul 2025 17:54:24 +0000
ROA not after: Thu 04 Sep 2025 17:54:24 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101178 (0x18b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 17:54:24 2025 GMT
Not After : Sep 4 17:54:24 2025 GMT
Subject: CN=686966d5-9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:c4:8c:18:f2:45:c0:04:41:fc:d6:20:c6:
82:e7:f6:8b:fa:28:d6:f8:ab:f6:d8:fc:17:d7:2d:
34:c1:1e:c7:7f:a6:5e:c7:2a:d9:c7:b9:78:32:b9:
a7:51:59:cb:d4:00:b0:f5:c8:f4:9e:f8:9f:83:68:
7c:8c:3d:ce:e6:17:c1:34:30:7d:ea:59:96:74:cb:
ad:a4:7f:61:39:88:ef:1d:ee:1e:f5:75:62:89:23:
ba:c2:b1:c5:06:c5:46:00:c5:dd:9e:a0:d0:83:82:
4f:21:fb:71:c5:b4:9d:38:58:5c:f3:50:43:a8:6a:
6f:cd:e0:cb:0f:06:a2:bb:e7:7f:fd:79:bf:9b:40:
be:4f:02:0b:0a:e8:28:60:81:57:f8:26:f8:01:9d:
40:4f:f9:30:c3:26:8d:7e:d9:71:e4:af:0c:b0:b6:
47:d2:c8:27:83:6b:e9:9b:b8:1f:7a:f5:b1:91:69:
ba:0d:0e:2e:bf:dc:83:85:1a:04:97:56:5c:44:ae:
d1:3c:81:dd:08:1e:7d:e3:04:30:e0:c5:0c:2b:69:
23:e4:51:3a:f6:22:db:52:a1:2f:1c:41:e4:26:13:
55:d3:3b:9d:42:38:07:7b:89:1d:48:c6:4e:56:c2:
b8:ea:65:81:bc:c6:28:74:2e:35:5d:ca:f9:ac:29:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:CE:D7:93:EC:E0:9F:99:FC:57:5C:4E:C2:9B:70:DC:E4:34:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18B0835859C911F0BC6537CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
55:ac:4c:d5:d2:8c:48:19:70:6a:58:2f:32:8d:a6:f0:fc:f4:
c4:fe:a5:d7:80:91:e4:09:b7:7c:0f:fb:dc:01:94:4b:70:21:
84:c5:52:52:60:a8:c7:8a:d3:6a:6e:25:0b:62:70:94:cb:5a:
26:f2:97:5d:b8:eb:3b:4d:c5:70:d0:f4:57:4f:af:17:6f:42:
11:ff:65:13:4d:28:d0:f6:0e:b8:d6:92:70:ec:9a:de:f7:e5:
65:61:b0:83:4e:75:e0:1d:2c:91:7e:60:f1:67:b9:0a:a9:d1:
54:06:21:07:3f:03:9b:cf:69:5a:37:4b:67:ba:6a:17:06:03:
b8:6a:ee:7c:e4:33:4d:c8:82:11:ea:d0:ed:a1:6a:49:26:44:
d7:66:4e:e2:d2:ee:53:df:88:de:d3:15:60:2a:8d:54:3d:58:
fa:3f:b5:f4:f1:51:84:6c:88:5f:69:73:6c:11:c1:8c:aa:d4:
4a:37:c4:f8:46:86:84:57:0c:ec:a1:a5:04:5d:04:68:9e:31:
ae:2f:5e:fb:f5:47:e2:af:35:e5:d1:2e:ea:e0:f1:98:f7:99:
b1:0e:a1:8e:63:0c:ec:da:f5:10:41:f1:66:fc:fa:8a:39:9e:
26:1b:96:92:82:f2:3e:3a:c7:13:96:48:a0:ec:fa:84:be:13:
9a:d9:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:49 2025 by rpki-client