Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/528EA88459D811F0A5851FAFDAE4EC9C.roa
File: 528EA88459D811F0A5851FAFDAE4EC9C.roa (raw, json)
Hash identifier: VSEfGv4KsDafGMslfwAnkK5C74IHGNwdUZ1O+RiOJek=
Subject key identifier: D7:F5:76:1B:C6:A7:02:4E:A2:67:FA:02:CE:D3:79:16:E4:96:FA:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/528EA88459D811F0A5851FAFDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 19:43:28 +0000
ROA not before: Sat 05 Jul 2025 19:43:23 +0000
ROA not after: Sat 13 Sep 2025 19:43:23 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101196 (0x18b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 19:43:23 2025 GMT
Not After : Sep 13 19:43:23 2025 GMT
Subject: CN=68698060-dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:cd:1a:5b:b8:df:44:84:57:0c:63:df:b3:
eb:cb:bf:8d:0b:7a:05:15:67:5b:dc:b5:a3:fe:ba:
80:f4:50:7d:ff:15:a4:fd:f3:0d:32:a8:62:38:4c:
22:53:2e:a3:23:17:57:c1:a6:9d:79:53:12:2e:7a:
e9:47:bf:80:e0:82:21:91:ad:71:aa:62:2a:a1:76:
bd:7a:26:19:07:0e:dd:94:19:57:ae:d5:14:19:0f:
49:ea:41:d7:0a:ca:42:5a:e7:9e:4c:7d:50:4a:98:
43:b4:56:25:07:ac:da:78:37:4b:16:40:60:b9:82:
44:ef:ad:99:f7:89:a4:ee:61:d3:0e:9d:16:ca:b9:
34:9b:c5:31:ae:08:4c:64:33:be:53:1d:48:a4:f2:
d7:c0:ec:98:23:89:82:3e:55:06:15:3f:a1:0b:e2:
52:0d:6e:5f:a3:b1:80:cf:44:73:68:4d:64:1a:ad:
8d:a0:07:4e:7b:9b:9e:4f:cd:66:ff:7c:07:d0:e1:
2f:b1:46:15:28:29:67:dc:f9:c4:19:f2:0a:93:8c:
d1:96:1e:7b:54:cb:78:94:24:69:cd:91:74:dc:25:
66:af:61:0d:19:0a:24:e8:7a:54:33:10:94:53:06:
77:28:95:1a:c5:34:f7:70:d1:45:94:24:e2:71:d0:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:76:1B:C6:A7:02:4E:A2:67:FA:02:CE:D3:79:16:E4:96:FA:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/528EA88459D811F0A5851FAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
49:ac:5f:d9:1d:ba:57:37:60:6c:97:32:b0:4d:dd:f8:50:0b:
a2:38:0b:fc:a6:35:85:cb:b8:38:9e:c1:21:ed:04:71:30:5f:
09:04:cc:b4:fb:64:3f:fa:7c:f8:56:5e:aa:16:f3:ad:a6:6f:
57:af:c3:d5:0f:d1:84:1a:38:41:43:0c:95:8c:a5:e1:48:b2:
bd:3f:37:3b:ba:6f:ed:0b:43:e3:ad:6b:00:84:a8:ad:64:0d:
1d:89:2a:9a:a5:fd:2c:49:91:f5:1a:92:9e:8c:1c:80:e7:e2:
35:7e:ca:f5:35:a6:ce:46:15:9c:bc:1c:51:17:ea:c3:b7:1a:
d1:35:fb:67:ad:38:2e:37:c1:b8:97:10:e0:a8:ed:ef:4e:e3:
b2:bd:2b:d0:e8:37:75:76:76:50:f2:e3:6e:de:24:39:58:69:
f0:9d:9d:fb:26:21:b2:2f:ec:e5:97:f9:b2:47:e6:87:58:b6:
e6:b2:20:e7:67:2e:a0:93:90:4b:5e:40:e6:c1:15:3a:5d:e6:
07:b0:94:99:5a:cf:56:20:90:5d:2e:66:b3:08:59:e2:69:1b:
7d:ac:12:4b:40:b0:64:c3:c3:8c:78:f4:a4:c3:72:c2:b2:1c:
26:6f:96:a9:09:5c:3c:79:ab:4b:90:31:fb:86:36:69:f8:0a:
52:fa:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:47:33 2025 by rpki-client