Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EA05A5A9511F0B1131E7EDAE4EC9C.roa
File: 993EA05A5A9511F0B1131E7EDAE4EC9C.roa (raw, json)
Hash identifier: nvXjdKrFH41I5yHhvXVfAYWwBGeLM/cdPLk9hBBXBCI=
Subject key identifier: DF:1B:75:6C:7A:81:27:5F:09:B8:0C:3C:54:A3:D1:B6:3D:FD:A4:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EA05A5A9511F0B1131E7EDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 18:18:22 +0000
ROA not before: Sun 06 Jul 2025 18:18:17 +0000
ROA not after: Fri 15 Aug 2025 18:18:17 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101284 (0x18ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 18:18:17 2025 GMT
Not After : Aug 15 18:18:17 2025 GMT
Subject: CN=686abdee-4c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:ca:58:8f:39:0f:10:58:24:c9:19:98:74:
6b:af:b1:71:dd:c5:e9:a5:0a:1a:47:21:51:0d:d4:
da:ed:0e:c9:92:ad:ea:14:67:f4:6b:82:53:04:16:
a6:db:04:d0:30:04:b7:2a:db:7e:7a:1d:9b:ca:c8:
62:72:35:77:4a:9b:88:0f:d6:6e:62:f8:3d:f7:74:
62:e9:38:32:67:f4:88:c8:cd:6a:e4:19:82:d4:9b:
9d:1f:17:11:e5:d4:0a:f2:67:c4:1a:5a:da:7b:07:
e2:0e:40:e1:5c:70:7b:fe:11:6d:ac:79:d3:1b:f3:
7e:d1:7b:99:ba:67:f5:c5:c6:50:99:6f:54:25:77:
35:62:1c:63:b0:03:8b:b3:d0:e2:ee:98:15:ae:f6:
39:1b:60:c7:da:d3:31:db:f4:36:4a:c1:8d:f3:83:
b5:c4:7e:fd:31:63:e2:01:ed:e0:c0:0e:f3:14:f7:
72:7d:0e:be:6d:c1:0a:c0:49:4c:4d:6d:ea:66:1f:
e8:40:a7:b9:cd:dd:46:ed:a6:08:0b:9b:8f:8e:29:
ba:55:b7:c2:35:d8:70:2e:0d:1d:79:90:32:81:0b:
a7:c4:64:b1:5b:1c:a9:65:d9:08:5c:92:75:72:fb:
df:1d:5d:7e:d8:46:d4:4a:46:48:60:cf:19:53:c0:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:75:6C:7A:81:27:5F:09:B8:0C:3C:54:A3:D1:B6:3D:FD:A4:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EA05A5A9511F0B1131E7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ae:ca:03:06:1b:7b:54:79:53:e9:67:39:c2:c7:e5:d7:c5:
69:dd:a3:dc:da:a4:5d:87:ad:07:0a:7c:96:ff:73:5f:2a:89:
e6:bd:5d:1a:b4:bf:9c:34:36:23:97:7a:4e:b9:ec:ae:0e:f3:
a3:f3:ca:22:af:80:f0:ab:68:d0:79:c9:00:f3:42:15:d2:c5:
8d:73:6b:a1:45:f3:cb:6c:d4:a8:36:e8:40:fb:96:da:f2:6f:
27:8e:cc:c4:1c:9a:f2:8a:f1:be:8b:b8:d9:ba:e8:5c:44:2f:
74:8c:0e:2a:23:d7:ba:4f:a6:5b:fa:5e:03:f7:4e:33:b1:a4:
4b:7b:df:cc:28:01:76:23:c4:0d:e3:fa:57:c0:b2:4f:9e:d8:
c3:a6:3c:96:6d:16:ba:dd:9a:4a:e0:3b:17:19:b6:9d:8b:b3:
53:78:57:ab:e4:b9:fe:c1:d0:5d:5c:d4:04:29:ee:87:ad:f3:
9b:8b:55:09:79:b7:81:2a:08:e1:50:d3:93:d5:1e:70:c7:10:
72:4b:fe:39:bc:82:3e:69:d9:5a:41:94:d8:6d:c8:d5:34:c2:
c8:13:d4:c9:12:56:6f:bd:b0:db:e0:8f:7f:37:33:f0:0c:7f:
57:dd:f7:45:80:43:52:1b:e1:cc:a3:1f:33:8c:c5:0c:e8:d0:
0e:73:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:42:21 2025 by rpki-client