Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F1C56E599011F089C3DCE6DAE4EC9C.roa
File: D0F1C56E599011F089C3DCE6DAE4EC9C.roa (raw, json)
Hash identifier: Fot5Ryq90ZsdX4qwyI4zL2HM1qG6LN3tKzP9MPpsEoM=
Subject key identifier: 38:34:52:EE:B9:72:3E:E5:A5:01:9B:51:93:B1:BA:BD:24:D1:7D:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F1C56E599011F089C3DCE6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 11:11:37 +0000
ROA not before: Sat 05 Jul 2025 11:11:32 +0000
ROA not after: Mon 11 Aug 2025 11:11:32 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101090 (0x18ae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 11:11:32 2025 GMT
Not After : Aug 11 11:11:32 2025 GMT
Subject: CN=68690869-3b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:6d:fd:d4:bd:ba:91:1e:52:b8:2e:8e:ad:
91:80:d2:27:f9:e5:c3:ee:61:27:59:48:20:df:cc:
c2:98:f7:8e:9e:b0:1e:ec:cd:13:85:10:7e:f6:aa:
f5:93:fa:42:f7:1e:90:42:25:b6:d9:15:10:d6:f9:
b6:db:cd:14:30:ab:d2:f1:e3:0e:c4:93:96:63:e5:
d9:26:b4:c5:4a:17:da:46:14:1d:03:35:bc:ab:92:
7b:d6:fc:a8:da:01:a5:f1:20:c4:66:dc:f0:80:12:
91:80:95:09:ef:cb:04:2b:38:00:b8:06:c3:41:59:
36:85:f5:19:7c:88:b0:ab:31:a7:a2:78:9e:e6:ab:
22:32:7f:79:64:2b:c8:45:2a:f7:a5:e4:7b:f8:a3:
cc:8e:95:dc:87:86:b6:76:2c:1c:8d:36:25:20:b4:
ff:60:56:37:2e:13:be:e8:d4:b8:c3:63:d0:32:c5:
a2:e0:2a:7a:53:8b:3b:81:43:0f:68:05:7e:45:a7:
47:40:c6:bb:47:04:db:34:94:a3:0d:bf:80:40:df:
57:74:6e:38:6c:ee:7f:20:b1:9a:1c:f9:f9:49:56:
23:99:ec:06:09:06:0c:8e:59:96:4b:12:31:87:5d:
8c:85:a0:e5:5e:29:f9:54:1a:ad:81:62:c4:7b:30:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:52:EE:B9:72:3E:E5:A5:01:9B:51:93:B1:BA:BD:24:D1:7D:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F1C56E599011F089C3DCE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ed:99:21:e3:86:d2:83:14:d8:f1:b2:16:65:b6:59:04:cf:
49:b5:91:68:1d:d5:87:7f:20:5c:51:45:b0:66:5c:09:f9:ba:
f8:9a:8b:68:a1:07:42:9c:1f:10:6d:f3:0e:fc:87:fb:0e:1f:
a7:bd:74:25:0a:2b:cf:c2:6f:30:36:a9:15:13:26:1f:15:e9:
f8:52:13:56:4d:2e:4f:4b:fa:51:04:b0:ad:84:99:fa:02:40:
7a:13:78:89:5a:66:22:30:56:a0:8e:5f:39:2a:5b:58:4f:1d:
b4:21:72:58:26:aa:34:4f:0a:e0:93:16:94:58:00:89:71:62:
31:e4:ba:22:ae:52:a7:58:3e:5c:7f:f4:a3:09:a7:cf:f3:c0:
b7:13:d2:a0:db:24:bc:17:2a:98:93:3f:8f:1b:b3:3e:02:f3:
f3:31:db:2f:d4:d5:27:6f:ad:77:4a:09:2c:94:e6:e2:eb:21:
f3:ae:69:a3:5b:ab:fe:22:07:c3:9c:04:16:0e:bc:ea:0b:10:
ae:4d:03:8b:97:a7:f2:46:ab:bf:c7:33:19:ad:1f:95:e7:c0:
32:fd:2f:7d:22:17:05:45:3c:81:3b:d7:8b:a7:f8:e4:75:63:
d3:ee:10:f2:b4:cd:1f:b4:14:32:d9:33:8e:e0:d0:d2:85:8c:
ef:cf:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:40:04 2025 by rpki-client