Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F86BDC5AA811F08A74BE78DAE4EC9C.roa
File: B5F86BDC5AA811F08A74BE78DAE4EC9C.roa (raw, json)
Hash identifier: V7OhLZT9JlCWeU88yV3DTnU2RToUb2buJYU3HHbeRuk=
Subject key identifier: 2A:67:D4:0A:DE:6D:FF:F0:95:5F:92:23:CB:0B:A1:13:94:18:92:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F86BDC5AA811F08A74BE78DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 20:35:11 +0000
ROA not before: Sun 06 Jul 2025 20:35:05 +0000
ROA not after: Sun 24 Aug 2025 20:35:05 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101306 (0x18bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 20:35:05 2025 GMT
Not After : Aug 24 20:35:05 2025 GMT
Subject: CN=686addfe-3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:03:c5:58:2b:45:4b:78:7c:b6:9b:d7:ff:
57:88:0c:33:1b:84:85:fe:a1:5f:9d:89:22:b4:82:
6f:2d:52:f2:01:5d:a1:0a:55:e6:40:9c:79:5b:12:
5d:d8:8f:f0:82:06:9e:89:90:85:08:0d:ac:13:e2:
66:b5:57:05:c0:01:38:f9:c0:c5:94:29:79:71:6c:
25:ff:bc:30:eb:b8:35:98:f3:0c:99:05:62:2f:ad:
ca:0d:29:db:ee:3c:10:b9:20:15:86:d8:70:36:d9:
21:42:17:9c:2a:32:df:da:03:bb:f9:93:2d:38:49:
ae:e1:cd:dd:ec:1f:ea:cd:cd:4c:3a:dd:f9:46:ef:
25:6a:d5:01:67:2d:37:0e:14:af:98:68:2b:a4:c7:
ad:81:4d:97:11:4c:c5:d0:90:98:64:d7:48:27:ca:
aa:3b:c4:a7:73:4b:f2:62:52:53:24:7d:96:92:ae:
14:22:5e:a1:21:61:ba:e2:ff:82:f1:4e:c8:14:82:
c4:bb:68:f4:65:5c:41:30:50:2f:d2:18:5d:b7:1c:
6a:88:5a:27:d5:1e:6c:0c:14:4a:3c:e5:ec:38:82:
0d:ae:86:50:40:4d:fd:bc:42:b0:a7:7f:4f:d4:5d:
b9:81:b6:eb:02:94:4f:e1:f8:ad:74:c5:32:65:89:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:67:D4:0A:DE:6D:FF:F0:95:5F:92:23:CB:0B:A1:13:94:18:92:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F86BDC5AA811F08A74BE78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:33:6a:6a:78:d1:66:43:20:d6:1e:e0:8b:f6:84:9d:40:f8:
04:46:54:5e:87:69:45:05:7b:46:f3:60:56:42:50:7d:28:53:
35:b8:81:d5:43:3e:70:35:da:40:86:e9:cb:bb:7f:21:b5:37:
80:5f:88:fe:f0:ce:8f:0a:09:e0:62:ac:c4:b3:4b:14:1a:83:
96:ba:f2:4f:af:72:ee:87:7b:7e:f8:48:b5:bf:e1:49:7c:60:
32:1b:10:e8:ad:5a:b0:02:fa:4e:de:56:1e:a4:38:ac:8c:76:
7f:20:f1:62:48:94:0c:5e:2f:91:27:fc:c8:70:22:1d:c0:36:
36:83:c0:89:e2:5d:29:26:b3:b7:4d:1a:52:84:c1:9e:de:dd:
64:d6:36:84:ec:83:f1:b6:95:6d:8e:4f:b0:30:2a:2e:33:86:
a3:b8:3a:b2:e2:53:26:14:24:2a:02:c1:65:59:79:9d:19:7f:
2e:c2:c6:7d:15:61:ec:69:3a:64:de:d2:1f:01:7f:5c:d7:8f:
48:c8:4f:6e:1d:15:09:e6:09:64:24:2c:70:38:09:2b:5a:75:
93:72:f1:2b:8c:90:f1:16:e4:f0:67:95:91:c1:5e:27:89:d4:
fb:c1:a2:45:2b:a6:8d:05:8c:a8:79:4f:67:6f:ba:5f:5d:bd:
d4:b8:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:11:18 2025 by rpki-client