Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1769AEBE689911F0B2674FA9DAE4EC9C.roa
File: 1769AEBE689911F0B2674FA9DAE4EC9C.roa (raw, json)
Hash identifier: h7jv6G+dYsmUAQ+gFQZV3J27DQlinv2aKXkGBx+OIeE=
Subject key identifier: 3C:27:8E:B7:36:4A:67:87:42:D5:5D:FC:39:A9:D1:9F:2E:FD:2A:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1769AEBE689911F0B2674FA9DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:18:38 +0000
ROA not before: Thu 24 Jul 2025 14:18:34 +0000
ROA not after: Fri 05 Sep 2025 14:18:34 +0000
asID: 202656
IP address blocks: 154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 04:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102284 (0x18f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 14:18:34 2025 GMT
Not After : Sep 5 14:18:34 2025 GMT
Subject: CN=688240be-e937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:49:6a:97:90:a5:d4:12:05:b3:6f:7d:93:
1b:71:e1:80:5b:5a:44:cd:e1:1c:1e:be:fe:3c:03:
18:37:1f:d8:18:80:d0:41:2a:c7:78:89:57:47:1b:
62:3c:13:ed:63:7c:11:a7:d7:6e:fa:ef:1d:06:1b:
64:dd:3a:81:8d:5d:26:41:e6:a5:89:34:6e:d1:b8:
fc:83:bb:60:1b:a9:ba:e7:7b:62:85:d5:87:a1:75:
d3:8c:77:13:ec:d4:c1:fe:ff:17:ee:ec:06:bb:ad:
c6:5f:d9:77:9a:12:35:3a:87:81:5e:52:c4:a9:4d:
ca:f2:a5:e1:45:ba:e6:a8:57:b9:72:5d:a6:f5:5c:
0a:f9:6a:79:06:bf:b0:d1:fd:fa:ce:b5:a2:99:fc:
5e:77:fb:4f:e4:c5:1e:f0:61:2c:45:5f:00:0c:6b:
b4:f4:ad:65:bb:76:0b:fb:d8:4e:6a:56:ae:1d:ed:
e1:8a:80:82:0e:9a:5a:7e:c3:72:e2:ae:ec:24:3c:
9d:ff:b0:f2:d7:83:8a:a1:cd:79:65:3c:c6:83:eb:
68:1d:b7:90:fd:2d:82:c4:ba:fb:33:b1:e8:56:da:
b6:6f:11:06:f7:22:06:c2:58:c7:49:40:fc:bf:0b:
97:2d:b3:90:a9:84:00:03:2f:11:4d:db:53:b6:60:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:8E:B7:36:4A:67:87:42:D5:5D:FC:39:A9:D1:9F:2E:FD:2A:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1769AEBE689911F0B2674FA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.217.0-154.219.221.255
154.219.223.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5f:3e:0f:c5:74:57:94:da:af:3e:b5:66:4c:3a:f4:46:11:
9f:79:39:72:7f:49:f1:9f:56:b1:e7:35:8b:54:10:83:2e:6e:
1b:6f:e5:2b:96:b6:97:a2:62:75:69:cf:d8:56:26:74:59:5b:
34:9f:2f:bd:69:52:36:c2:c9:89:08:97:d5:d0:44:0d:26:6f:
28:23:55:e4:3c:26:c0:7e:ab:d0:4b:78:d1:ca:eb:0e:bb:a2:
14:87:c7:7e:e5:86:90:1c:ba:93:87:2b:72:79:5e:68:6e:de:
90:3a:f6:f9:e8:b4:93:ba:2d:37:59:c9:ff:88:41:5a:90:82:
a9:09:fd:20:25:fb:00:35:b8:6d:29:8d:7b:b5:f0:51:09:36:
d1:7d:a8:d9:73:b3:90:24:55:cc:11:e0:c5:9f:f8:de:3e:58:
37:06:92:4f:3e:1c:af:05:70:29:42:0b:b2:fa:ea:08:b7:2d:
c1:46:b6:f5:4c:d3:d5:eb:d2:1e:56:57:75:91:bc:77:90:86:
82:2b:32:c4:93:97:7f:70:ff:71:02:6d:51:73:7e:b1:e5:16:
ad:ea:8f:67:1d:1f:31:7a:12:72:c2:f2:dc:d4:e3:68:24:d7:
34:cc:11:85:44:f1:9f:57:39:0b:08:cd:7e:b8:c9:81:60:0f:
1b:12:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:59 2025 by rpki-client