Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849AB25659D211F0B846068CDAE4EC9C.roa
File: 849AB25659D211F0B846068CDAE4EC9C.roa (raw, json)
Hash identifier: RijwgpFhE2F0Q4JaZud9UxFaXF148MGEADIQ6WMmvsE=
Subject key identifier: 85:C2:75:9A:3D:93:2C:50:6F:A4:11:47:D8:7C:5B:CD:D7:82:BE:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849AB25659D211F0B846068CDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 19:01:56 +0000
ROA not before: Sat 05 Jul 2025 19:01:51 +0000
ROA not after: Thu 04 Sep 2025 19:01:51 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101188 (0x18b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 19:01:51 2025 GMT
Not After : Sep 4 19:01:51 2025 GMT
Subject: CN=686976a3-2d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:c6:7f:50:3d:fd:32:26:74:20:30:a2:17:
80:37:d4:5e:e7:2e:a8:af:45:e5:c7:53:43:f1:5b:
5f:0d:5e:c6:1c:7e:0c:f0:1e:15:b3:b6:6d:28:3e:
41:32:cb:4a:63:15:4d:62:39:7f:bb:55:88:4d:85:
86:81:f6:c4:9a:bd:23:16:67:30:23:e2:61:ba:f2:
8a:23:c6:48:62:01:11:b7:da:04:ec:35:f5:9a:e8:
83:a8:cc:c9:72:ee:41:ca:f3:b1:86:77:6b:99:23:
5e:14:26:18:0a:d7:16:40:dc:bf:77:6f:26:7e:cb:
90:da:73:f7:d7:b9:dc:c3:7b:c0:71:39:e2:8f:7f:
09:e0:83:f8:3e:88:3a:9e:c0:e2:07:3a:0e:1a:f1:
b1:f8:f3:c9:65:a1:b3:7d:bf:28:5a:7b:b1:b0:90:
8f:91:ab:82:68:2b:6f:db:50:c4:5c:c5:27:f6:a8:
f6:1a:cd:c2:55:6a:3d:55:2b:aa:4e:86:97:26:e2:
27:f4:cd:7c:01:5b:3d:8b:9b:e0:e7:4c:30:c2:80:
7a:9a:75:8b:3e:50:24:17:48:1c:58:c7:27:63:ac:
1b:a9:24:0a:66:9b:27:25:f9:ad:72:37:eb:64:53:
68:93:dc:58:a1:ec:ea:8d:b4:dd:77:d2:d0:9c:02:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C2:75:9A:3D:93:2C:50:6F:A4:11:47:D8:7C:5B:CD:D7:82:BE:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849AB25659D211F0B846068CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:7b:93:12:e0:d9:00:99:31:5b:ed:9d:de:85:f9:66:3f:42:
4a:a2:d0:af:f3:e2:f8:9c:4f:1b:f0:48:3f:9c:ac:19:8c:ed:
f2:49:a0:33:d9:cd:96:77:86:40:85:e4:b7:ed:81:6a:d9:29:
5f:f5:93:6e:08:e5:f7:e4:bb:b4:ef:98:b7:8f:c5:1b:c2:70:
68:c9:d8:02:df:3f:ef:0f:54:8f:59:ba:91:d5:95:9e:b3:80:
38:2e:fe:1d:ce:7d:56:77:1a:f9:d2:af:26:87:fa:92:f1:a6:
a4:ef:29:86:14:1d:78:94:fc:27:f8:da:9f:db:28:e9:1f:8c:
6d:e6:fa:60:e3:34:88:74:a8:75:60:b4:e9:9f:43:bd:d9:b5:
87:f3:6d:d9:d5:8b:ab:0b:58:dc:24:8b:28:6e:22:e0:cf:77:
93:f7:17:4d:30:75:66:55:89:33:48:ec:9b:5d:f4:f9:b1:ea:
c5:eb:15:75:a4:66:c8:c9:a1:d8:9c:87:d5:2f:39:b1:86:1f:
8f:cc:33:cf:be:51:60:df:7f:8b:da:d2:21:47:91:d5:d1:ab:
8c:4c:d3:8f:33:df:35:53:c1:08:75:e2:f0:6d:e1:11:83:c5:
bf:4c:f2:59:8e:d7:e2:92:65:12:3c:e9:8b:5f:2e:da:d0:76:
44:ea:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:40:21 2025 by rpki-client