Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1143BDC067CE11F092672A7FDAE4EC9C.roa
File: 1143BDC067CE11F092672A7FDAE4EC9C.roa (raw, json)
Hash identifier: 3rkC9Y7cLcpuQaEl8puRSBdneACpLFgahD+TJd+ysFc=
Subject key identifier: 7E:F6:D7:AD:E8:B2:76:F3:CF:8B:62:CF:92:83:4E:5A:92:ED:F3:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1143BDC067CE11F092672A7FDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 14:05:20 +0000
ROA not before: Wed 23 Jul 2025 14:05:15 +0000
ROA not after: Mon 15 Sep 2025 14:05:15 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102190 (0x18f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 14:05:15 2025 GMT
Not After : Sep 15 14:05:15 2025 GMT
Subject: CN=6880ec20-02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:b3:09:f5:c9:0c:b1:f3:f9:5d:f9:a0:33:
cc:91:be:4b:f8:42:9b:46:b4:f4:31:75:42:a0:17:
c7:7a:6c:c5:b7:8d:b6:b7:34:14:12:4d:8b:05:ad:
ff:fa:9f:f2:4f:0a:28:fe:db:62:04:96:36:f5:bc:
dc:9e:24:fc:d2:22:9d:18:15:26:c3:b7:6f:0d:70:
9e:be:0f:c6:4e:45:29:ae:e6:27:46:49:af:9c:ad:
ed:22:6e:7c:1d:7f:9a:57:a9:5f:f1:30:6f:4a:20:
af:c6:f3:20:f1:d0:1a:c2:5c:b2:42:79:48:64:2d:
a3:84:d1:9c:56:e3:21:e3:15:8d:6f:62:f0:5d:62:
2c:7e:1f:a6:6e:13:4f:c3:98:2e:ab:8d:0b:27:fb:
0b:30:68:6d:7b:32:38:54:97:38:49:18:6a:84:ed:
3d:74:03:bc:d9:a9:5c:b4:da:03:20:b4:2d:c5:ae:
b5:e4:7b:cb:4e:87:d9:9a:93:6c:f9:93:d6:e5:02:
a5:99:cd:ac:38:ad:98:62:f3:0e:7b:34:eb:94:be:
68:9b:e5:3c:91:92:2e:45:08:ca:de:de:ed:33:f8:
57:91:b9:6b:55:2b:2c:a3:6c:c4:6d:a4:08:19:8a:
7c:37:93:2b:04:55:5e:78:cb:72:89:1e:94:33:a1:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:D7:AD:E8:B2:76:F3:CF:8B:62:CF:92:83:4E:5A:92:ED:F3:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1143BDC067CE11F092672A7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.132.255
154.203.136.0/23
154.203.144.0/23
154.203.148.0-154.203.152.255
154.206.80.0-154.206.89.255
154.206.112.0/21
Signature Algorithm: sha256WithRSAEncryption
87:c9:bd:71:6b:a5:71:12:e7:4d:96:dd:ac:b3:01:81:91:78:
ad:4e:9c:5a:c7:b9:7b:64:5d:12:0e:4b:f6:da:b9:6d:a6:48:
0c:0a:1c:06:56:b9:ff:d6:fe:f7:4b:c0:6c:cf:3b:d8:a3:dd:
9d:3a:67:d5:73:a9:00:14:95:6c:7f:f9:ab:03:19:5f:c4:b7:
e0:e8:4c:b0:57:3d:1f:b1:23:b7:3b:74:dd:ed:bc:03:d1:48:
85:0b:75:98:f7:22:92:69:0f:00:5f:f1:73:99:c5:55:8c:18:
3c:94:f9:16:9b:d7:42:c8:47:ff:08:28:3f:53:98:8a:57:11:
81:b8:1d:66:5f:51:57:9b:2c:d8:38:35:14:55:47:8d:01:9d:
ab:33:b7:fe:3a:83:f5:e6:39:d4:93:d1:84:b1:72:1f:9b:c2:
4d:89:6c:e2:be:40:4e:96:43:5c:c6:3d:03:6a:13:48:c4:45:
02:04:97:d4:87:64:a8:83:1b:bc:ea:f8:fe:b5:d6:c3:3f:64:
06:2b:e5:33:e2:0d:9c:0a:e0:b6:63:c9:1d:7a:dd:b9:da:c2:
f5:48:38:5f:fd:cd:b8:56:f0:a1:b5:e6:50:1e:3d:15:46:5f:
77:7e:10:49:a1:40:bd:be:ea:ed:3f:32:8f:1a:75:eb:76:ed:
4b:99:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:13 2025 by rpki-client