Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E1DE905CF311F0BAB2D0EBDAE4EC9C.roa
File: 94E1DE905CF311F0BAB2D0EBDAE4EC9C.roa (raw, json)
Hash identifier: B8buZqzTw2siKNBlcq561tT/9UqaIiNkkS+tJqNKeGg=
Subject key identifier: E7:61:30:6E:0D:7C:1A:9F:C5:48:D1:7A:50:EE:96:2D:37:9E:5D:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E1DE905CF311F0BAB2D0EBDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:36:10 +0000
ROA not before: Wed 09 Jul 2025 18:36:05 +0000
ROA not after: Sat 16 Aug 2025 18:36:05 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101632 (0x18d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:36:05 2025 GMT
Not After : Aug 16 18:36:05 2025 GMT
Subject: CN=686eb69a-ed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:aa:76:7f:e7:3b:01:2a:2d:79:23:cb:52:
39:91:e5:87:5f:85:3a:b2:19:c0:14:7e:6e:fd:70:
cf:5e:ed:cc:22:16:23:33:af:6d:bc:48:8b:02:b6:
27:26:06:45:ce:72:a7:ed:f4:2a:dd:f7:e6:12:e0:
15:fe:b3:36:9a:f1:12:2c:bd:1b:4f:2a:02:cf:05:
5a:20:fa:cf:fc:99:86:57:9e:27:ea:c7:0f:1e:d1:
b6:cb:cb:dc:ab:9b:84:16:cf:0b:2c:85:9a:8b:8e:
35:43:21:8c:cd:31:ab:52:ab:51:69:20:db:e1:28:
c2:4a:a8:dc:36:3b:38:e7:ea:33:c3:3e:f7:1d:f6:
66:39:4b:4d:f6:98:59:c0:f6:ea:1a:a0:de:eb:10:
30:72:12:ae:f6:23:16:76:24:29:66:5a:46:05:d7:
5e:f0:52:ae:98:ce:d9:fb:44:ff:ae:48:45:a7:d8:
a3:7c:60:78:f3:bd:d3:15:30:63:fa:be:03:66:ec:
a9:57:4c:ad:c6:e8:0d:e5:0d:13:2e:69:70:7f:74:
52:64:4d:92:30:06:a6:25:42:e4:e2:8a:0f:95:1e:
ce:9b:d8:6f:b7:15:40:ff:d7:79:a8:45:ad:fe:00:
9d:41:4d:c5:a5:61:29:7e:71:db:5d:1c:a2:df:24:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:30:6E:0D:7C:1A:9F:C5:48:D1:7A:50:EE:96:2D:37:9E:5D:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E1DE905CF311F0BAB2D0EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
01:23:80:73:f3:12:7c:13:0f:d6:10:32:bd:21:92:74:09:6a:
24:04:81:e7:98:16:ba:78:30:a6:9f:26:a6:1b:02:86:9e:97:
6a:68:a4:bf:7a:e9:c6:c2:f9:d3:53:c0:aa:d4:be:da:3d:89:
ba:a6:6c:02:b7:e1:c5:7e:d5:1c:5a:93:78:68:6b:b7:b7:43:
c8:ea:c5:04:f3:d5:98:e2:5a:a2:cf:d3:40:11:ff:ff:d7:bc:
46:c7:63:fb:fb:3e:52:4a:35:9f:46:ad:a3:e6:62:7c:95:fb:
f5:33:d8:f1:3d:2e:94:1c:d1:e8:64:a7:2a:a9:52:0e:f6:4a:
f0:8a:9d:e9:e9:72:55:b4:77:56:ce:cd:bf:c8:42:8e:7b:5c:
13:09:7f:2a:51:e2:17:ff:d5:bd:4d:22:e1:f4:b8:42:3d:8a:
4d:48:57:6e:2c:b7:e7:8a:4e:2e:09:8a:75:d7:72:c3:eb:c9:
38:82:87:4c:e0:f3:9a:08:1f:0c:2d:42:9a:eb:0a:8a:a1:ad:
64:40:07:18:0f:26:c6:6b:9f:77:3c:f6:41:89:d2:41:90:70:
df:07:9c:64:69:97:ff:54:73:29:0c:51:3d:6f:a4:3f:89:72:
3d:b1:3c:18:ab:5d:9e:89:4f:91:bc:fa:d7:d6:60:dd:8e:f0:
3f:c1:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:56 2025 by rpki-client