Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63152350526111F09826B1AADAE4EC9C.roa
File: 63152350526111F09826B1AADAE4EC9C.roa (raw, json)
Hash identifier: k1ZMsjvNROaDYfy15V2uorpGqrE8zTYppdHNF7MYHCA=
Subject key identifier: 85:0C:46:87:84:28:9D:A0:D8:66:C4:FD:81:8B:1E:D0:5E:D7:2F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018923
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63152350526111F09826B1AADAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:44:28 +0000
ROA not before: Thu 26 Jun 2025 07:44:23 +0000
ROA not after: Sat 02 Aug 2025 07:44:23 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100643 (0x18923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:44:23 2025 GMT
Not After : Aug 2 07:44:23 2025 GMT
Subject: CN=685cfa5c-6a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:d5:6a:c2:f0:02:a0:9a:dd:46:37:f1:88:
7c:5a:94:b3:ee:76:81:53:08:a5:53:35:75:99:83:
e9:7f:5c:a5:27:05:46:7a:05:a8:c0:5c:53:de:31:
94:d1:33:41:0c:62:c8:ee:4e:14:8a:84:8d:c5:90:
4e:da:d9:3e:14:9c:02:6a:69:b2:99:00:0a:e5:a8:
4e:88:91:1f:b3:c4:41:13:a6:9f:87:3d:10:e0:1d:
25:75:64:6f:85:21:66:8c:36:5f:cf:f9:9d:08:71:
ed:f9:6c:e0:6b:de:76:7f:40:3c:e3:00:b0:31:8c:
cd:91:de:65:e8:c7:b5:73:12:d9:33:75:5f:2d:23:
07:a0:7c:1f:b5:97:2a:23:73:fe:b7:38:18:31:38:
dc:12:1e:47:8b:a6:d4:d6:ea:d9:c6:94:35:64:76:
03:97:a2:c4:af:c1:2a:01:15:38:f4:38:6f:81:bc:
03:5c:cf:dd:7d:52:9c:4b:bb:f5:44:ae:76:e2:55:
9f:12:d5:44:dd:a6:5f:8a:46:6e:3d:c1:e2:bc:61:
82:fa:02:8d:8f:32:e8:6c:2f:43:7d:79:d9:dc:ec:
fe:7c:5c:b6:d5:de:a4:ab:15:b1:84:7e:2d:a8:41:
4d:07:c0:44:f8:63:64:94:46:02:a8:7a:92:cc:4a:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:46:87:84:28:9D:A0:D8:66:C4:FD:81:8B:1E:D0:5E:D7:2F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63152350526111F09826B1AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0f:26:c7:5c:d4:b6:e3:ac:d4:27:8f:8b:bb:c9:6d:2a:be:
16:7a:09:19:25:a9:23:2a:1a:af:52:09:44:2e:18:d9:40:59:
3a:bd:5c:7a:61:b9:fd:15:28:b2:be:6a:68:8c:19:4b:01:99:
81:02:b6:1a:87:37:3b:c8:00:24:f5:b7:9a:bb:a2:90:92:0b:
f6:fd:9f:70:eb:b5:84:fc:b7:38:ce:07:3a:13:a5:79:4a:90:
70:cf:cb:e6:12:4b:4f:6d:37:1e:77:21:a2:54:17:6f:b5:9f:
6e:d4:45:6a:9a:f3:30:94:a9:77:9d:6e:ab:b6:9a:69:f3:b9:
63:3e:e5:64:61:fa:3d:8e:2d:05:b0:46:b8:d8:5d:2a:aa:21:
c6:16:fd:cc:37:9e:91:08:7b:60:a5:4a:3f:90:13:07:59:02:
9b:6d:5a:b9:61:f8:96:b7:0c:90:89:08:dd:46:6d:b3:4d:1b:
aa:78:38:2c:ff:2e:b0:8f:1a:55:17:e0:54:7d:c0:60:10:58:
6f:83:61:ed:de:28:c0:d1:00:2c:96:d1:a9:29:21:18:6c:5b:
da:12:b3:9f:bf:f0:80:7f:f7:c5:a1:80:05:bb:31:49:5d:fc:
01:f8:d8:ee:38:e8:57:b2:2b:96:34:73:2c:66:5c:fd:26:de:
fc:79:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:02:34 2025 by rpki-client