Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1C24A125B7611F09C2229B8DAE4EC9C.roa
File: D1C24A125B7611F09C2229B8DAE4EC9C.roa (raw, json)
Hash identifier: 0amCShDoZ1EzxQ5tXkcCzKVOSbFQqs4LfvXDWhid7wQ=
Subject key identifier: 44:23:7C:22:10:DE:91:69:A7:F0:41:37:7A:B5:CE:5D:D2:76:34:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1C24A125B7611F09C2229B8DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 21:10:34 +0000
ROA not before: Mon 07 Jul 2025 21:10:28 +0000
ROA not after: Thu 04 Sep 2025 21:10:28 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101484 (0x18c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 21:10:28 2025 GMT
Not After : Sep 4 21:10:28 2025 GMT
Subject: CN=686c37ca-c86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:b8:41:f0:75:e9:e4:15:6f:e9:7e:8a:3a:
c6:c2:97:ec:2e:20:61:a2:62:85:87:e9:09:fb:12:
be:7c:7e:34:cc:f9:bc:f4:c6:7d:9a:93:c2:a7:b7:
1f:63:35:0e:e8:06:10:16:e0:45:c9:44:d6:70:f8:
82:19:2d:30:c8:c5:4e:53:4c:8b:b2:f2:0d:1c:f3:
50:f5:85:9d:37:3d:fd:d9:b0:09:1e:13:7c:d4:2a:
be:ba:c6:10:3d:da:68:da:7b:06:13:14:bc:a9:a2:
4a:2b:19:e2:0a:0c:32:c3:29:81:25:33:f6:e6:93:
08:f3:4a:8b:13:a1:ac:ce:fc:ec:3c:bc:a9:0b:1a:
fb:08:4d:5a:53:27:4d:91:78:c2:70:8c:bd:58:d6:
06:51:49:98:59:8f:99:01:f1:c8:9d:a3:4b:4d:48:
77:ce:47:69:22:cf:73:87:72:6f:fd:89:da:7a:9d:
57:35:d0:04:e5:cb:05:29:21:61:55:3d:28:82:06:
6d:6d:83:58:04:2f:c0:b1:c0:c6:4c:62:89:3d:b0:
03:09:c5:ef:0e:cc:cc:78:18:25:12:81:55:e7:0c:
5e:8d:13:19:eb:3b:97:af:e6:e6:5b:1e:f8:c7:71:
e9:68:5c:e5:8b:e9:96:08:10:2a:11:f4:b7:57:d3:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:7C:22:10:DE:91:69:A7:F0:41:37:7A:B5:CE:5D:D2:76:34:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1C24A125B7611F09C2229B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
94:1f:9e:de:fe:09:9d:30:03:97:59:6f:b2:13:72:8a:9e:f9:
ce:4a:db:59:85:39:30:32:d2:07:cc:9c:e9:76:2a:97:55:b4:
47:ab:87:8b:0e:d9:05:a8:96:16:9a:cc:3d:28:aa:c1:06:54:
25:5e:af:33:9f:07:9d:a0:3f:cd:8b:3f:7d:bf:f1:00:20:3c:
60:50:49:5b:53:b4:85:01:f4:ed:ca:e7:bc:1c:8e:2a:4f:72:
8d:cf:5e:9c:58:75:a1:58:ad:3f:54:54:a3:80:b2:c7:3c:06:
25:4c:a0:bb:62:2d:e5:c9:5b:0f:5c:9a:2d:e0:03:ad:50:d7:
03:37:b8:93:8d:77:d2:92:d9:a7:73:71:7f:ef:61:66:6d:61:
e5:aa:8d:25:e2:b5:ba:b9:d4:a6:ec:1f:df:e5:08:91:ed:99:
92:e5:69:83:39:ad:d4:4d:b3:70:2e:b1:db:65:36:e7:2e:2e:
98:82:10:36:54:72:47:a4:40:4d:c2:1a:fa:f8:c9:c1:53:d6:
e8:95:e7:a8:b5:53:8e:ea:c7:0c:a8:d5:9d:86:77:f1:f4:48:
a6:2b:4e:43:39:8c:d6:8f:a2:5f:7b:eb:5c:ea:fc:78:1a:c9:
81:f7:e1:32:1c:5e:fb:9a:fc:8c:c2:79:6d:9c:e1:f2:ea:a0:
c7:4c:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:37 2025 by rpki-client