Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB10A7423D5D11F0BFDA89D9DAE4EC9C.roa
File: AB10A7423D5D11F0BFDA89D9DAE4EC9C.roa (raw, json)
Hash identifier: AhLhZJ6wconYdLKeZw0KZPS66mL0p6rqqb+MW/KSOV4=
Subject key identifier: B6:CE:22:50:EC:52:F3:D1:89:62:1A:63:CC:92:27:A3:A3:33:76:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB10A7423D5D11F0BFDA89D9DAE4EC9C.roa
Signing time: Fri 30 May 2025 13:54:56 +0000
ROA not before: Fri 30 May 2025 13:54:52 +0000
ROA not after: Mon 09 Jun 2025 13:54:52 +0000
asID: 400619
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99303 (0x183e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 13:54:52 2025 GMT
Not After : Jun 9 13:54:52 2025 GMT
Subject: CN=6839b8b0-feb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:d1:2b:4b:c7:78:a1:01:9c:90:a2:32:0d:
1f:92:10:fb:3a:7d:0e:9e:84:ea:cb:ca:c5:67:06:
14:5b:08:b9:4f:de:83:c6:74:25:7f:18:d6:6a:0b:
3a:3e:54:07:a6:17:86:3b:9f:4b:c2:86:f1:e3:1b:
21:00:a6:96:7e:f7:cb:8a:76:05:85:7b:04:6d:2d:
83:81:62:a9:c5:fb:84:7b:04:e3:e1:16:6f:91:62:
1a:11:01:96:69:a8:c2:2b:fb:72:c9:8e:90:16:f7:
39:e8:77:57:20:d8:dd:16:b4:3c:92:90:87:27:e3:
a8:5f:58:f9:34:4c:7d:65:21:64:cd:ba:ff:d1:02:
14:46:eb:41:5f:21:a6:da:e5:43:19:d5:22:6e:2c:
9d:a4:ab:fc:81:b5:73:66:38:c5:84:1a:06:77:f4:
92:b6:6c:5e:c4:63:0f:1a:cf:38:e9:d7:a3:7a:89:
58:c1:bb:49:c9:76:3d:91:a0:49:92:69:e7:fc:bc:
6f:31:61:31:df:1d:48:81:28:8c:58:f3:d3:61:5e:
38:ce:f8:e1:2d:e1:64:90:36:ad:a2:4d:dc:9c:aa:
30:f3:f5:48:05:a0:2e:29:4f:88:7f:6f:e9:64:28:
50:37:48:cf:5e:f8:af:42:86:83:93:25:bb:03:1b:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:22:50:EC:52:F3:D1:89:62:1A:63:CC:92:27:A3:A3:33:76:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB10A7423D5D11F0BFDA89D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
23:e2:dc:c2:e0:b8:01:29:97:95:6c:86:8c:ba:5f:5d:7e:28:
2c:3f:b9:0e:ef:81:e7:c7:5c:a7:23:87:71:10:52:1a:2b:08:
a9:f9:57:7f:47:51:fe:e0:44:2b:14:23:4c:d8:80:8e:e8:25:
49:6f:7a:13:50:3e:c8:37:59:1b:50:af:78:27:e7:44:80:ae:
96:a5:2a:ca:98:07:25:ba:22:ac:39:14:9c:5a:fc:45:a4:11:
99:8e:01:8f:f2:f7:45:74:ad:98:54:44:13:ed:65:3d:ee:ff:
81:39:ba:3d:b7:95:c5:25:4d:95:2e:b0:04:2c:3f:44:bb:ca:
17:80:ef:04:1f:6e:f8:3d:da:b0:24:a3:66:81:d0:02:44:51:
43:0e:84:c8:01:ef:95:0b:b9:2d:b9:f9:dd:ba:f9:fe:f3:b5:
3a:ab:92:8a:fe:78:ff:90:83:e8:5a:ed:85:dc:23:1f:a0:46:
20:d9:38:2c:d9:14:eb:7e:29:90:57:01:e0:c0:17:a0:a2:77:
f8:28:64:20:67:77:65:e3:d2:80:2b:50:6b:eb:9a:ac:f2:72:
b4:6b:cb:7d:49:ba:32:4c:71:e3:1a:4c:64:55:bc:0b:77:ec:
ca:7d:c7:ea:59:21:47:62:43:5c:44:92:91:2d:55:ad:84:7d:
53:b7:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:04 2025 by rpki-client