Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAD6EB8409111F0AFB0B5A7DAE4EC9C.roa
File: 3AAD6EB8409111F0AFB0B5A7DAE4EC9C.roa (raw, json)
Hash identifier: jWcJPQ5GudSwRjF9cDyKqLFypAfAEKzRWhL3tvr+mFc=
Subject key identifier: 54:FA:96:A6:1E:3B:98:DF:85:3F:0D:1E:60:75:C5:E9:A5:72:2E:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAD6EB8409111F0AFB0B5A7DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 15:41:35 +0000
ROA not before: Tue 03 Jun 2025 15:41:30 +0000
ROA not after: Tue 13 Jan 2026 15:41:30 +0000
asID: 273147
IP address blocks: 154.197.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99503 (0x184af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 15:41:30 2025 GMT
Not After : Jan 13 15:41:30 2026 GMT
Subject: CN=683f17af-88b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:0b:cf:9b:30:dc:eb:2e:ce:e8:36:78:ca:
b8:eb:ff:69:58:25:9e:a2:48:04:89:7f:d4:f2:c7:
17:0a:5f:83:7a:eb:e0:fb:e2:c2:28:e0:b3:b1:31:
75:0c:6a:be:e4:a9:e0:22:30:f3:f1:aa:c4:42:4d:
8b:64:4f:ca:fa:30:9e:d1:16:d1:15:45:8d:28:b2:
e9:c3:2e:50:bc:f0:58:eb:af:5d:03:87:14:00:a3:
7b:e3:c8:c0:a5:f8:d5:1f:2c:0e:46:f6:89:3b:d4:
e1:39:cb:b4:74:5c:07:84:b2:8d:c1:cd:1b:e4:93:
c1:a1:7e:4e:7d:bd:16:29:bf:c6:0e:84:b6:e4:28:
b8:33:86:60:e5:85:54:d5:b7:54:dc:20:fa:00:98:
7b:46:eb:60:95:9c:83:6a:ed:66:27:c3:c8:ee:c1:
6e:0a:f0:61:88:bf:c3:77:68:99:dc:5f:b6:e8:c5:
fc:1d:3c:1f:ef:55:0f:c5:bf:9b:30:c7:1f:6f:b7:
71:09:aa:60:62:c2:d1:27:80:19:76:f5:91:fb:f7:
e9:57:57:8b:7c:b3:f8:c1:4a:19:f2:0b:29:56:da:
0f:37:12:72:8b:b1:c0:f7:83:cd:58:7d:d9:69:c8:
fb:43:1b:f6:4a:eb:f9:36:c8:3e:87:4e:70:07:20:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FA:96:A6:1E:3B:98:DF:85:3F:0D:1E:60:75:C5:E9:A5:72:2E:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAD6EB8409111F0AFB0B5A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c1:83:b8:f8:a5:7d:a3:b1:c0:d7:1d:6d:39:89:e6:c7:9e:
74:5a:ee:95:1f:8f:02:41:d0:19:01:54:ad:cd:fa:85:c5:94:
25:55:c2:0c:06:df:92:96:69:5e:74:91:9b:1c:77:6c:9c:89:
6c:c9:a8:0b:e3:93:8b:be:80:8b:14:9d:7b:ac:50:ef:5b:f0:
41:20:9c:9c:45:60:5b:73:7f:5b:0a:d1:f5:ba:4d:d8:da:ff:
6b:2d:e9:9d:1e:4f:8c:dc:62:4d:f1:b9:b4:b2:73:6d:d7:d0:
40:1f:8b:d2:7e:2a:ea:54:c8:6b:c9:a1:bf:2a:6a:64:e9:f7:
8d:8f:a4:a8:93:76:03:79:cc:49:31:e6:f4:88:ea:a4:ae:c1:
05:f9:23:12:fc:11:9a:64:81:5b:dd:dc:64:f9:d6:46:4a:a9:
54:a8:9a:e4:77:f9:ff:cc:4f:3b:aa:5e:7d:7e:be:8f:8b:9b:
2f:da:19:bf:b7:91:af:3e:20:13:e2:a2:16:3a:2a:4d:25:9f:
a4:fe:9d:86:4e:5a:13:cf:50:4f:c0:58:f7:74:b3:d9:93:30:
22:ae:fc:69:02:90:6b:8f:30:f9:f0:47:58:ad:a9:55:7a:a2:
cf:fb:34:3c:fe:bf:1d:fc:13:5f:0c:8a:8d:4e:ec:dd:d0:95:
da:55:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:20 2025 by rpki-client