Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E4FDD066D311F0A2E9C9A2DAE4EC9C.roa
File: 93E4FDD066D311F0A2E9C9A2DAE4EC9C.roa (raw, json)
Hash identifier: 2PnpaH0vXiFG5meGg+XxLUVNMdYuBEun2TLZr+XS2Hg=
Subject key identifier: A3:12:F4:E4:61:06:50:FB:F0:8D:CF:A6:09:DE:DD:E9:77:54:F0:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E4FDD066D311F0A2E9C9A2DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 08:12:16 +0000
ROA not before: Tue 22 Jul 2025 08:12:11 +0000
ROA not after: Fri 29 Aug 2025 08:12:11 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
154.200.33.0/24 maxlen: 24
154.200.35.0/24 maxlen: 24
154.200.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Jul 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102084 (0x18ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 08:12:11 2025 GMT
Not After : Aug 29 08:12:11 2025 GMT
Subject: CN=687f47e0-789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:02:50:0a:cd:06:05:3f:9f:94:50:f7:98:
46:58:a8:ea:d4:6b:8e:57:b9:22:17:e8:a1:aa:76:
99:ed:39:a4:8d:d2:f3:a7:7d:94:52:50:f7:2b:3c:
5c:76:09:2a:a4:ce:1b:f6:ca:5e:7b:e7:09:0f:19:
bc:3e:fa:8f:e5:d7:8e:db:75:51:98:d5:40:61:1a:
59:a7:ae:3c:10:24:60:c2:ac:0a:1c:4d:45:8e:e4:
84:28:95:8a:5a:b7:9f:1f:c2:82:f1:2e:4d:69:a6:
5b:32:35:41:16:0a:aa:aa:2f:8d:91:ba:8a:bf:0b:
63:a2:2f:3f:a4:da:cd:9d:f7:11:99:f4:2c:65:5a:
d7:e1:0c:2e:17:2f:c6:4e:18:b5:e4:c4:d8:56:d2:
a7:b2:d9:09:fe:91:a8:7c:4c:25:a8:8c:18:9d:b5:
4a:0b:42:15:6f:d8:4a:6b:17:65:91:c0:e2:55:b2:
a9:04:9b:d3:64:44:6b:22:db:58:44:e0:68:f5:72:
8d:f2:a6:ce:63:c5:8f:41:86:b0:16:b8:ad:f2:b2:
55:50:6c:6d:7a:19:e5:35:c5:09:c3:f7:a5:16:68:
43:22:2a:94:85:58:19:53:b7:45:83:89:de:1f:5f:
d6:22:fd:8a:ee:27:2b:2e:1c:03:a2:ba:b0:18:e8:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:F4:E4:61:06:50:FB:F0:8D:CF:A6:09:DE:DD:E9:77:54:F0:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93E4FDD066D311F0A2E9C9A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
154.200.35.0-154.200.36.255
Signature Algorithm: sha256WithRSAEncryption
c8:a1:fb:12:6a:3c:3c:20:f3:06:cd:1c:e6:67:64:9c:c8:0f:
f4:3b:3a:e0:0a:64:42:fc:75:44:66:ee:be:c7:17:73:93:01:
54:a2:b5:74:99:5c:5d:f6:62:b0:0e:f1:90:ae:80:ea:c8:87:
e4:36:7e:53:8f:c3:c2:d6:4f:28:b6:ea:99:11:a8:5a:f0:2e:
f8:71:cf:04:4a:33:fa:4e:4a:5f:b8:f9:5a:de:a6:4f:8f:1e:
4a:65:5a:c3:5f:29:ba:5b:35:4d:04:08:af:c9:8a:07:90:7b:
75:cd:f4:12:7c:c1:56:30:2f:72:84:1d:ab:fb:3c:8b:1f:32:
e7:99:ee:46:8e:62:b2:70:5a:2f:fa:ae:68:9e:d4:bb:f7:1f:
82:9c:5a:e6:b4:bb:e9:01:bb:f1:d3:7a:ec:47:8b:2c:31:59:
0a:a3:1f:33:5d:de:b4:20:04:e2:6d:62:87:d1:e7:16:5f:9b:
ec:71:ce:4f:9a:e9:5c:16:6b:26:f1:a7:a5:c5:fb:a5:23:6c:
5e:44:c5:af:5d:87:c1:5b:91:e2:fa:bb:0d:21:84:67:9c:6e:
32:8e:63:43:3d:de:dc:2a:67:c9:8a:a7:10:73:b6:26:e7:e9:
db:52:d3:23:c7:aa:9f:b8:f2:20:b0:c7:aa:be:1c:9c:d3:70:
9a:dd:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:09:47 2025 by rpki-client