Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F8B56E5A7D11F0836A37E2DAE4EC9C.roa
File: 46F8B56E5A7D11F0836A37E2DAE4EC9C.roa (raw, json)
Hash identifier: H0CvMJri0xbIm4D2+yPS6KaBmkW3Yd68hhWXSW6eJuw=
Subject key identifier: 30:A2:1C:D8:34:1D:43:2F:71:E6:E3:A3:2E:A7:1B:20:E8:93:AA:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F8B56E5A7D11F0836A37E2DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:24:16 +0000
ROA not before: Sun 06 Jul 2025 15:24:10 +0000
ROA not after: Thu 21 Aug 2025 15:24:10 +0000
asID: 203020
IP address blocks: 154.85.28.0/22 maxlen: 24
154.90.192.0/19 maxlen: 24
154.94.128.0/18 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101252 (0x18b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 15:24:10 2025 GMT
Not After : Aug 21 15:24:10 2025 GMT
Subject: CN=686a9520-483f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:78:93:50:1c:ef:d8:e2:6d:bd:dd:3e:a8:
a3:ee:48:3d:9f:cb:84:08:d0:80:c4:c2:f8:25:ec:
91:dd:14:59:d3:83:d7:03:63:a7:d8:f1:12:9b:ca:
51:4b:c0:c8:c7:44:50:49:22:f9:57:77:d4:35:8f:
86:44:1f:70:20:45:34:ae:88:18:0d:12:4a:03:9e:
7a:e9:74:c7:b9:64:a2:ec:55:69:6b:9d:97:5a:8b:
0d:d6:99:da:84:d8:23:d6:e1:ee:c5:3b:13:f0:23:
52:1c:23:f1:1f:56:f2:2d:d6:21:8d:50:e5:86:7f:
82:41:6d:78:c9:8c:3c:3c:a1:41:16:a7:7c:f1:2c:
b6:c6:82:74:cb:c9:76:fe:42:42:97:cc:15:ff:1f:
92:1f:ac:11:3c:e4:0b:fe:e5:ff:78:8b:39:9e:1e:
be:df:51:b9:c2:6e:3a:f6:f5:66:19:63:c1:2b:e2:
45:0b:47:25:5b:10:44:c6:89:bc:82:a7:1d:aa:a1:
88:db:72:2a:a2:c0:8c:b7:6c:a6:36:39:d1:2a:dc:
cf:11:a6:66:b6:11:9e:67:e0:e4:8e:46:cc:29:a3:
af:43:bb:be:a8:b4:ff:f2:e5:d6:e6:fb:cc:16:29:
62:a8:e6:5d:46:6d:f4:cd:7d:f5:47:f0:42:13:9f:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:1C:D8:34:1D:43:2F:71:E6:E3:A3:2E:A7:1B:20:E8:93:AA:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F8B56E5A7D11F0836A37E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.28.0/22
154.90.192.0/19
154.94.128.0/18
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:3b:a6:cb:d6:bf:b1:86:61:bd:3e:41:de:6f:3b:59:5a:e6:
d9:4c:f9:d4:4d:84:58:b6:59:f8:a8:d8:0b:36:29:16:b2:f1:
63:b5:6b:5b:0e:e1:49:6d:92:10:91:78:68:4d:18:37:18:ee:
51:de:b7:f8:e6:f7:0c:67:5b:a9:44:14:ba:f2:b2:b1:68:db:
d8:35:93:5d:22:de:0e:02:39:ec:f0:d4:f0:b7:9e:cf:55:ca:
ae:de:df:e9:41:fa:e2:3b:38:dc:bf:5e:d1:44:1a:b0:61:9c:
64:f3:dd:7c:fc:fc:3d:a9:22:a5:a3:35:8b:94:a0:44:43:3e:
43:9b:ac:61:f7:79:d1:22:36:fb:cd:21:f1:fc:89:eb:b2:96:
71:d5:04:09:ea:64:a3:61:c2:42:60:69:eb:06:c5:98:0d:54:
49:f8:70:37:97:0b:fb:36:d6:01:8d:3a:58:91:10:00:62:7e:
15:e1:5e:0e:7f:e8:fd:dd:3f:28:5f:53:99:49:d2:5d:5a:8e:
11:36:78:2c:b8:e3:bd:db:ec:71:f9:82:bd:c8:1b:a1:0d:a7:
81:86:78:6c:0e:69:e9:6e:59:c6:60:d0:56:c2:31:13:ec:92:
bd:42:8f:d3:35:b7:d3:3c:4b:28:b6:8b:74:dc:59:e7:55:44:
de:f7:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:48:58 2025 by rpki-client