Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAEF3F245CF511F0ABBEE67ADAE4EC9C.roa
File: EAEF3F245CF511F0ABBEE67ADAE4EC9C.roa (raw, json)
Hash identifier: Y3qHpJowZASL3lmppd+WZuV8P8q5PB/5xPfRfEhhJdo=
Subject key identifier: 2B:44:22:72:DB:55:EB:0D:41:4A:BB:77:E0:92:64:30:69:38:84:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAEF3F245CF511F0ABBEE67ADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:52:53 +0000
ROA not before: Wed 09 Jul 2025 18:52:48 +0000
ROA not after: Sat 16 Aug 2025 18:52:48 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101638 (0x18d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:52:48 2025 GMT
Not After : Aug 16 18:52:48 2025 GMT
Subject: CN=686eba85-f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:8f:46:f8:a2:ac:fb:d0:ef:b9:01:d5:0d:
ed:9a:73:8e:bd:cd:38:62:6e:c5:2d:c6:93:8c:9d:
5d:aa:32:ad:2f:12:41:77:13:c6:62:f6:20:4e:77:
18:7f:fb:c9:d9:4f:f3:19:48:3e:2d:04:87:54:19:
7e:68:c7:f9:fb:b4:dd:79:4e:1f:f5:4a:79:9a:38:
b5:b3:4f:de:0b:31:c5:2f:93:d4:56:a7:4f:fb:56:
99:f7:94:b2:20:8b:1e:19:16:a3:fe:b0:2a:57:06:
05:d1:7f:d2:02:32:2e:23:30:4d:e4:e1:e4:f0:a3:
83:a8:7e:a8:9d:2f:27:61:e3:d1:e6:9a:83:e7:43:
0e:89:f1:79:40:2f:d9:a1:8e:62:7d:08:32:c0:94:
91:b5:5e:d5:f5:88:b0:33:5e:d9:fb:b4:5f:a7:98:
bc:62:d0:39:27:6b:ec:1f:dc:87:8e:ba:e0:bb:e0:
39:b1:0a:51:6a:ed:8c:76:52:c8:d4:88:a4:94:9b:
df:e8:6b:5b:a4:56:c3:25:7b:d8:6a:84:17:82:5f:
91:2a:e8:8c:71:29:91:ba:ab:33:32:ad:96:ff:d6:
25:59:d2:f9:e6:54:da:db:1f:5a:c3:20:54:d9:6b:
c8:c7:34:ed:1f:c1:04:55:08:25:c6:fb:28:5e:4e:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:22:72:DB:55:EB:0D:41:4A:BB:77:E0:92:64:30:69:38:84:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAEF3F245CF511F0ABBEE67ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
42:75:d3:0f:47:ed:68:8b:5e:66:25:dd:98:5a:f7:e8:c1:27:
90:bb:a8:fe:99:58:e5:ce:ed:4c:4c:51:81:d5:d5:6f:2c:9f:
0a:1c:06:36:59:18:40:37:41:07:a6:06:9b:ce:29:1e:5d:1f:
d7:c0:8f:94:65:1f:58:71:86:a0:00:e9:85:e7:ac:3b:b3:04:
17:3e:fd:4f:e1:ee:dc:0f:fe:12:96:bd:5e:9d:9d:be:04:6a:
c7:1c:64:cc:66:18:7b:9b:4c:be:99:b9:73:e7:3c:ff:28:14:
02:d3:51:48:f9:c0:64:22:9e:95:63:77:3e:4e:c9:84:de:09:
b9:8c:53:58:d8:de:53:be:c8:96:57:4e:17:50:d0:ef:7b:56:
90:20:eb:87:c8:25:98:ca:0e:fe:08:c7:11:5a:61:40:41:81:
11:66:9c:03:b5:74:84:17:d6:52:39:b4:e6:bb:49:23:de:82:
3b:79:01:0c:90:48:d1:fb:0c:9d:8e:5a:e7:a9:4d:5d:3b:74:
28:72:97:59:96:d1:49:11:bf:ed:5d:b8:6e:10:3d:7f:60:f3:
73:47:5a:d6:80:b6:9c:05:d9:c0:5b:02:6b:13:47:33:6b:20:
0e:57:6c:50:ee:c9:2c:82:20:8b:57:65:92:8d:66:26:f9:25:
48:69:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:17 2025 by rpki-client