Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAAD798408011F0A504CEBDDAE4EC9C.roa
File: 9BAAD798408011F0A504CEBDDAE4EC9C.roa (raw, json)
Hash identifier: ls1eq/LUpCw6jEmFK+HFyBo9r0Ts36dWctp5OA8ERTo=
Subject key identifier: 79:18:AF:95:59:8D:08:48:83:AA:BD:2F:E6:36:BD:46:23:17:40:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018489
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAAD798408011F0A504CEBDDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 13:42:36 +0000
ROA not before: Tue 03 Jun 2025 13:42:31 +0000
ROA not after: Sun 03 Aug 2025 13:42:31 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.92.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99465 (0x18489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 13:42:31 2025 GMT
Not After : Aug 3 13:42:31 2025 GMT
Subject: CN=683efbcc-c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:20:1a:42:b3:e2:5c:40:5a:7d:95:e8:55:
e9:80:2d:24:d5:e7:df:27:7c:7d:d5:33:3f:97:05:
39:77:ca:b6:93:6a:df:56:00:bc:8e:c9:8a:3e:a6:
21:33:8c:67:44:01:8f:b5:18:52:76:51:8c:26:6a:
91:14:57:cc:55:c3:3a:94:b9:cc:9f:91:19:19:2c:
c7:63:85:69:de:57:5d:6f:f1:f2:53:9a:3e:45:1c:
05:2a:51:f0:95:bf:61:8b:84:21:85:0c:bf:11:7c:
6f:fb:a8:90:b5:fb:4b:76:72:f4:4d:f2:29:9c:49:
01:05:b8:51:63:3d:78:55:2e:ea:d4:11:29:0c:73:
20:0b:54:33:e2:8f:89:39:c3:0d:f2:ed:53:5d:1c:
25:66:4a:a3:40:b0:f5:db:ad:5b:97:15:7d:5d:28:
9f:9c:36:03:25:1e:4e:60:d1:99:2c:9e:3f:b7:c5:
9e:21:4d:7e:e0:7d:5e:e6:c5:46:43:59:61:e4:91:
49:12:75:e2:b2:77:fb:d2:99:13:7a:b3:b9:71:25:
ff:a0:24:31:fd:2e:af:fe:a0:81:dd:5b:6a:3e:78:
a3:65:7c:8c:12:5f:28:86:b1:4a:b9:98:11:7f:87:
09:12:05:14:9c:3c:d8:46:3a:25:68:36:4d:2a:69:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:AF:95:59:8D:08:48:83:AA:BD:2F:E6:36:BD:46:23:17:40:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAAD798408011F0A504CEBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
154.93.86.0/24
154.93.92.0/23
154.93.96.0/23
154.93.102.0/23
154.93.106.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:4a:04:a8:82:e9:ba:cf:d6:ea:79:e4:57:92:f7:18:28:b0:
4b:20:5b:bf:a9:c6:8a:cb:cc:cb:3d:20:11:42:d8:14:f1:fe:
f6:31:f8:f6:3c:48:d3:75:a1:45:cb:88:bf:ba:d6:10:11:6d:
ad:14:0a:b0:7e:80:d0:d1:87:8a:2f:cd:6c:4d:ac:39:34:af:
01:4a:cc:73:7e:b1:b2:fb:ef:27:51:87:88:2c:3e:35:38:26:
e7:91:e3:19:3a:98:30:35:62:b6:38:fb:63:b2:bc:92:cc:07:
62:9b:37:86:91:71:4f:9e:1b:39:fd:12:a3:cc:9d:5d:5e:6d:
bf:0f:e5:94:5e:10:ca:f2:54:f7:63:ec:b5:ee:df:c5:b1:a5:
9b:4c:70:20:a8:c4:32:d5:f3:ff:72:3f:75:e2:f7:67:30:39:
18:91:1f:77:54:45:4d:8a:8e:0e:f6:63:80:92:f0:e2:67:45:
17:f2:f7:87:b1:26:2a:b8:f9:69:00:2b:60:b7:15:60:6a:8e:
69:fd:2b:9e:43:4c:ea:af:a4:ec:16:56:5b:77:81:7d:76:46:
92:44:21:0a:35:58:0a:a4:04:5b:08:d0:31:cb:a3:96:ee:9e:
89:cd:bd:ce:9a:d3:04:1e:1a:52:c3:a6:90:10:95:bb:e9:af:
3f:6e:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:33 2025 by rpki-client