Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161B326C6F9211F0B2FA6093DAE4EC9C.roa
File: 161B326C6F9211F0B2FA6093DAE4EC9C.roa (raw, json)
Hash identifier: Uk4yxO1tO0sk1huhkMXwRbewJUSwJgRO1I1VK/jfWDM=
Subject key identifier: 45:40:5E:E0:AD:CA:AE:8B:B2:C5:ED:78:FC:B1:3F:F6:76:27:8E:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019026
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161B326C6F9211F0B2FA6093DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:16:08 +0000
ROA not before: Sat 02 Aug 2025 11:16:03 +0000
ROA not after: Sat 06 Sep 2025 11:16:03 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102438 (0x19026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:16:03 2025 GMT
Not After : Sep 6 11:16:03 2025 GMT
Subject: CN=688df378-1b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:c6:48:c7:4b:36:32:82:f0:fa:a6:d6:13:
9d:1b:e0:50:4e:70:34:68:40:3e:cd:04:ab:4c:de:
50:44:28:6c:4d:4a:26:3c:4b:31:f6:46:2b:58:9b:
21:25:52:64:73:15:36:dc:80:88:78:63:24:15:20:
bc:07:2d:88:8a:09:64:32:6a:8a:06:67:3b:d6:36:
f6:35:6d:7a:76:a9:40:10:81:84:15:b5:d2:bc:c3:
91:b0:2f:f5:d1:8b:9d:c1:a1:fa:55:e4:8f:c4:d8:
39:f2:bc:81:0b:22:e9:ea:7a:a8:00:3c:26:76:b3:
d6:ba:37:d5:bb:3b:a2:6d:23:d3:79:8e:71:c8:f0:
57:c7:3a:7c:a7:ed:f4:2e:9b:ba:fc:68:45:d6:c6:
7c:12:8c:ee:54:77:9c:07:66:16:da:57:f8:ab:fb:
3d:2a:8a:25:94:31:8c:9f:13:d7:d8:c3:40:92:76:
ec:ff:94:ff:33:ab:d6:2e:63:3b:8c:43:64:92:77:
29:95:f7:1c:4c:95:65:eb:1d:87:f4:4e:20:3e:3e:
39:0d:2d:3c:78:62:41:50:84:df:1e:81:b7:5d:98:
3b:03:1c:80:04:2d:31:a0:13:00:eb:9a:83:f3:03:
a5:b2:a2:f1:3e:7c:67:93:76:0e:a4:ed:b6:01:95:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:5E:E0:AD:CA:AE:8B:B2:C5:ED:78:FC:B1:3F:F6:76:27:8E:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161B326C6F9211F0B2FA6093DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8d:01:f7:23:f1:ef:5f:23:61:6e:e5:21:7a:07:a7:12:15:
8d:d1:29:6f:6d:55:27:e0:b5:97:5a:59:e9:fa:1e:dd:17:3b:
52:44:d1:0e:2a:61:a7:06:12:e4:72:48:64:a9:8f:a6:6a:18:
43:ed:5a:1d:e3:6b:7c:16:15:fa:f9:79:0d:c3:af:cf:f0:a6:
a6:13:4e:58:79:16:9f:b0:b8:8f:34:85:9a:ee:9b:bf:2f:96:
bb:71:c1:2c:b7:c1:a9:93:16:49:d2:06:73:55:0d:0b:77:b3:
ad:c6:7f:29:09:ed:3a:83:45:73:18:c0:d8:df:7d:c1:aa:c3:
66:87:83:5d:09:a5:32:16:1c:3d:f4:38:52:fd:24:1f:eb:2c:
ba:83:a5:f5:d9:c7:cd:02:65:61:1f:c4:f5:ec:7e:05:b0:3e:
23:66:9c:43:a2:99:0a:ad:27:36:7f:7b:ec:e1:00:1f:65:67:
16:54:63:7e:10:b8:1d:f8:0e:7c:9c:8a:ff:5b:1d:d3:6b:fc:
c6:4e:2b:18:73:f6:06:0b:43:29:db:d1:b3:fa:3d:d4:d6:f8:
87:f1:c6:08:24:73:d1:3a:03:39:fd:5c:87:0f:cb:6e:ba:d5:
06:85:6d:44:b3:7f:90:99:a3:98:64:1d:56:60:44:64:9c:dd:
6b:4f:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:10 2025 by rpki-client