Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63EE7C625B8111F096C0677CDAE4EC9C.roa
File: 63EE7C625B8111F096C0677CDAE4EC9C.roa (raw, json)
Hash identifier: pmcGjRSaVGaQ5Kc+bnQwyvME45qCrIiQQAr3S/WfU60=
Subject key identifier: C0:ED:84:14:80:24:D9:16:2C:40:35:39:62:29:CA:36:0C:2E:AF:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63EE7C625B8111F096C0677CDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 22:26:14 +0000
ROA not before: Mon 07 Jul 2025 22:26:08 +0000
ROA not after: Tue 09 Sep 2025 22:26:08 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101494 (0x18c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 22:26:08 2025 GMT
Not After : Sep 9 22:26:08 2025 GMT
Subject: CN=686c4986-f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:0e:95:fe:b4:da:0f:09:9e:fc:63:99:53:
0d:6a:4d:aa:37:c9:65:b5:df:cd:f6:8e:39:3b:f2:
73:a9:23:7e:56:b7:89:02:02:ee:3e:25:95:d6:06:
20:f8:12:c3:c7:58:58:1c:d5:8f:2b:55:67:d8:4a:
aa:32:dd:1f:ae:75:f5:10:a8:f2:4c:21:13:fa:e0:
96:0c:37:eb:02:a1:8f:36:33:f2:2d:e8:9a:09:0e:
d8:64:0e:63:96:2a:f0:76:e5:6f:53:a9:72:d5:1b:
8c:32:99:08:93:79:40:6f:97:90:87:94:8d:a6:95:
2b:2f:91:a1:3f:80:2a:50:47:7b:d0:3f:ec:08:77:
5f:1e:ab:75:44:e7:79:97:3d:35:06:f3:da:e8:3b:
27:25:a3:04:9f:b5:73:4a:7f:36:18:ae:99:c5:83:
1d:b5:c9:ee:53:4e:48:62:59:78:17:c7:64:08:0c:
db:e9:4b:13:76:dc:d6:f0:2f:34:5e:a7:62:7b:3f:
30:d1:8d:f1:0d:1d:3e:95:68:63:8c:16:36:b9:64:
f8:09:3b:2b:34:0f:69:c1:38:f2:21:ce:9b:08:38:
1b:3a:ad:e7:43:99:f9:21:eb:76:b2:48:f7:8b:72:
ff:27:57:8f:32:6d:33:51:94:20:e7:2e:d8:cd:1f:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:84:14:80:24:D9:16:2C:40:35:39:62:29:CA:36:0C:2E:AF:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63EE7C625B8111F096C0677CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:e8:f8:66:9f:52:35:f8:3b:af:b9:e3:9d:18:9b:cc:e8:
3a:3f:f9:58:9c:4c:56:0a:da:42:02:75:5b:01:62:b1:85:12:
23:0a:8a:91:82:f9:f5:c4:e7:f5:00:cb:37:cc:48:b7:9f:f7:
6f:77:24:b1:68:8e:66:02:3f:6c:33:59:ee:dc:0e:c1:0d:93:
3e:15:12:8f:1c:0f:ce:ff:f2:bf:63:c5:d0:4b:db:19:f3:fb:
f5:ab:b3:ec:f7:39:9f:ca:9b:d0:d9:75:c4:38:c1:d7:2a:e1:
05:99:fa:05:eb:68:8e:fe:5f:f7:13:fb:5e:94:71:8d:90:72:
27:a6:0a:13:94:5c:81:46:82:73:ed:4e:ac:0a:56:4f:96:62:
21:cc:49:c0:cd:5d:09:a9:94:47:3e:17:9a:ff:d1:63:1b:e0:
ab:fd:52:9e:0d:99:26:da:6d:12:a7:2e:a6:71:e6:c8:9d:2a:
66:12:98:7d:24:9b:99:ec:65:dc:14:a3:eb:8d:13:b8:c4:0f:
c6:95:60:6f:88:f7:d3:83:28:f0:3a:44:a1:4f:d2:8d:4c:74:
6d:85:7e:5c:a6:80:b6:5b:1c:b7:cd:93:2e:af:de:5b:e9:cd:
bf:ea:a3:a1:56:75:2d:e8:79:ea:74:a2:cd:be:85:00:c7:2f:
97:89:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:32 2025 by rpki-client