Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7FF45858CF11F09DC989F5DAE4EC9C.roa
File: 3C7FF45858CF11F09DC989F5DAE4EC9C.roa (raw, json)
Hash identifier: evMD1j9w5VceYyWvvVirWbHB4qfwhVCYKRGhk75Dfx8=
Subject key identifier: 2E:F6:08:C1:9D:35:33:A4:C4:25:68:6A:BD:7D:7C:10:00:06:D1:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7FF45858CF11F09DC989F5DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:05:55 +0000
ROA not before: Fri 04 Jul 2025 12:05:49 +0000
ROA not after: Thu 21 Aug 2025 12:05:49 +0000
asID: 203020
IP address blocks: 154.85.28.0/22 maxlen: 24
154.90.192.0/19 maxlen: 24
154.94.128.0/18 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100942 (0x18a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:05:49 2025 GMT
Not After : Aug 21 12:05:49 2025 GMT
Subject: CN=6867c3a3-a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:58:5b:00:2c:43:75:ac:61:21:dd:59:13:
56:0c:17:1d:88:6b:3a:6b:bd:9d:1d:e4:1d:4c:fd:
26:b0:b1:53:19:fb:49:59:1a:6d:34:07:5f:6b:e9:
60:ee:15:08:9e:39:80:cd:f5:0f:27:4a:84:cb:c8:
9f:ee:8b:f6:2a:ba:95:4f:6a:4f:d6:65:39:4d:5a:
cc:c4:d6:5e:5b:98:91:bc:09:72:a8:a9:a1:92:1f:
8c:26:4a:63:f5:81:2a:82:91:70:ad:d8:c6:b5:c4:
78:09:71:f5:4f:d3:da:74:af:24:2f:57:5c:55:2f:
f7:5e:42:c8:57:54:c0:7f:e3:29:b6:d3:b4:6e:09:
58:32:cb:1e:80:f4:74:46:8c:8e:f3:63:4d:b8:79:
2f:52:05:3d:24:e8:6c:b1:76:32:3f:72:65:2a:bd:
fd:44:d4:99:ac:78:86:a3:f0:72:b4:f0:20:b2:6c:
c0:42:00:59:fc:69:c8:a6:d6:b7:4b:da:ea:36:a0:
b6:74:56:7f:39:3b:80:1c:67:85:6a:8e:96:22:1e:
de:61:c0:f8:f4:53:95:ce:53:e6:bc:02:7d:f1:5f:
60:27:e6:9f:f3:b1:bd:e5:6c:d2:dd:4e:09:8b:7d:
b7:88:16:9a:6b:41:9f:59:13:18:8a:31:0a:f1:3f:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:08:C1:9D:35:33:A4:C4:25:68:6A:BD:7D:7C:10:00:06:D1:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7FF45858CF11F09DC989F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.28.0/22
154.90.192.0/19
154.94.128.0/18
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:86:99:2a:5d:a3:b6:be:bd:37:e5:02:13:5e:6b:99:e6:a4:
4a:3b:54:8a:47:64:ff:e5:83:e5:05:bf:ef:96:cf:80:a7:99:
7f:e8:d0:a7:4e:f9:6f:61:0d:03:80:01:0b:94:00:9d:78:4a:
ae:36:04:85:2d:e1:dc:1d:01:e0:ce:c7:2c:09:0a:7e:9e:68:
b3:3c:15:68:14:1d:e6:00:76:0e:74:6c:79:53:6f:15:6c:1d:
6e:55:af:05:53:3c:8f:63:f5:8a:91:39:ad:50:16:df:cf:11:
9b:e3:21:ac:92:1c:4c:4d:63:51:6c:66:41:6f:03:68:71:8f:
9b:75:eb:9e:00:5a:c8:d5:c6:cc:f0:42:4c:6e:54:65:87:fd:
be:5b:62:98:4e:76:4d:e6:c8:00:94:7e:49:77:76:1f:44:85:
df:03:06:92:6c:97:64:8c:1f:72:2e:68:e2:8c:41:41:97:07:
b8:3a:c3:9a:62:c4:3a:a2:b9:e0:dc:3d:b8:06:64:a9:b5:71:
f5:c8:d5:1f:f8:b0:86:fb:59:63:7f:5f:89:d7:2b:87:21:6f:
82:6f:8d:79:24:25:4f:05:26:99:30:94:20:e4:a4:36:de:de:
89:1f:78:03:07:a7:2b:c5:15:b7:ea:14:d1:86:9e:b1:c5:3f:
4f:a0:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:08 2025 by rpki-client