Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94467B25D0111F0851B73C5DAE4EC9C.roa
File: C94467B25D0111F0851B73C5DAE4EC9C.roa (raw, json)
Hash identifier: v3Q8w/+jDT2iACwtwjppBFB2VwcoWIC2ScdQ9c3g5rY=
Subject key identifier: A9:58:B1:4F:EC:83:37:B9:F5:E5:48:0A:8D:B1:D5:23:31:9B:15:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94467B25D0111F0851B73C5DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 20:17:51 +0000
ROA not before: Wed 09 Jul 2025 20:17:45 +0000
ROA not after: Sun 24 Aug 2025 20:17:45 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101646 (0x18d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 20:17:45 2025 GMT
Not After : Aug 24 20:17:45 2025 GMT
Subject: CN=686ece6e-4ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:24:2d:75:82:5e:a8:20:5c:f9:02:53:f7:
ea:72:e3:11:83:70:0e:d0:2f:5d:d0:8a:d2:51:f6:
e8:84:eb:4d:d5:62:31:37:82:fe:7f:af:69:67:b0:
4e:f6:28:56:73:28:5c:c8:8a:d9:99:45:de:d7:e3:
a2:fc:70:40:78:81:1e:6a:bc:fe:b6:8b:b5:12:9c:
d9:cd:ab:24:9d:91:bd:7c:75:42:8f:f4:b6:40:e3:
73:f8:97:40:fc:ce:c3:c4:14:49:58:a6:9e:6a:a9:
32:eb:f5:66:04:d5:3d:6e:f7:f4:40:64:f6:a6:4b:
66:9b:b2:bb:26:bf:f6:b5:9c:08:a2:41:4f:42:06:
2e:e5:b9:fa:f7:81:30:7c:2d:dc:28:e7:2f:05:c6:
7a:70:5e:69:de:d1:3b:06:0e:1b:e9:9d:cf:c7:dc:
8f:82:96:86:44:0d:ff:93:68:2f:00:60:fa:33:82:
a6:ba:8b:a6:96:1f:f1:ff:99:cb:23:36:df:e1:8f:
5b:be:f0:4f:94:64:16:7d:49:59:61:72:41:5e:38:
5e:66:85:db:d0:6e:c6:f5:16:38:51:fc:e2:8e:04:
83:cc:3b:49:68:71:f0:01:f6:f9:db:b5:a8:17:e6:
d6:ca:7c:5c:72:c9:26:be:f0:63:73:23:42:25:30:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:58:B1:4F:EC:83:37:B9:F5:E5:48:0A:8D:B1:D5:23:31:9B:15:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94467B25D0111F0851B73C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6a:c3:6b:c5:6b:31:56:6f:01:6a:31:44:cf:41:10:42:86:
14:5a:a1:eb:cc:7d:e2:01:76:bb:18:0b:2a:88:5e:fc:62:c8:
e3:1c:86:a0:b2:57:88:01:1a:95:5c:97:9b:51:e2:18:cd:71:
b4:bf:c7:21:c3:4f:e3:11:90:d2:3b:5e:e7:4a:4c:e5:8c:95:
82:1b:d4:46:81:ff:19:7b:fb:3b:80:8f:44:d2:2a:66:6a:66:
93:ff:02:81:0b:cb:a3:b1:bf:54:f0:5b:37:a3:4a:b3:8f:86:
ec:4d:34:5f:44:13:96:ca:bd:8a:29:3a:d6:cd:8a:9c:91:7e:
68:bd:e4:df:39:df:41:98:94:c4:dc:e7:c8:c4:e4:c7:68:ac:
bd:4e:ac:2b:0b:9f:1f:48:b7:b8:1f:bc:19:8e:d0:91:50:d1:
66:a8:39:b0:32:41:be:95:9a:97:75:82:c4:d8:fc:85:55:94:
87:87:8d:1c:cd:bd:f7:6c:32:83:2a:6b:3f:bf:9e:7a:6e:4b:
00:a9:ea:85:58:71:82:91:a0:81:52:3b:61:fb:3f:cf:f8:ae:
52:ce:6b:6d:c2:73:51:b0:7b:6c:bd:31:02:43:11:ff:d7:97:
15:6c:94:e6:fc:ce:31:f3:8c:fd:b5:28:07:62:7c:d7:06:28:
c6:51:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:11 2025 by rpki-client