Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13666687F11F0AD0E5A82DAE4EC9C.roa
File: 2CC13666687F11F0AD0E5A82DAE4EC9C.roa (raw, json)
Hash identifier: ma64SaUBg1P/y7MmP3mlbeUSX0mcb8k4TdwIpzG8Tv0=
Subject key identifier: 6B:03:79:F5:3F:EF:77:4C:99:96:D4:06:86:53:F6:6B:E1:30:CD:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13666687F11F0AD0E5A82DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:13:07 +0000
ROA not before: Thu 24 Jul 2025 11:13:02 +0000
ROA not after: Mon 01 Sep 2025 11:13:02 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102247 (0x18f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 11:13:02 2025 GMT
Not After : Sep 1 11:13:02 2025 GMT
Subject: CN=68821543-14c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:4c:0e:c1:da:7c:cc:c5:5a:8c:13:32:60:
7d:8a:79:91:66:8a:8f:99:8d:52:74:96:c9:fc:e7:
f5:3b:ef:cf:11:08:af:2c:f7:d4:61:25:34:de:25:
74:89:89:c0:83:8f:19:66:35:17:a9:69:8f:aa:6d:
42:78:18:12:0d:f1:c0:23:6b:6b:47:f1:a1:56:45:
69:f8:3f:55:7d:52:e9:04:3c:85:39:06:a8:32:77:
33:df:ee:3b:60:8c:ae:88:ca:fd:f9:6a:f5:06:af:
a3:df:0b:09:21:9d:40:5c:ae:2c:d5:fa:d1:68:db:
09:d8:a5:9d:ec:1f:6c:b4:a5:24:3a:fb:f1:c2:4d:
97:f9:8a:02:6a:ed:d4:db:a3:94:27:d4:86:e6:25:
0c:51:bf:4b:6d:0b:6a:2c:69:c0:b8:00:b4:30:03:
26:79:a4:c5:e7:8b:31:6b:88:f7:eb:96:95:96:25:
6e:df:65:16:94:6a:62:21:95:82:88:29:5b:39:9b:
2a:f0:a0:17:09:0a:a4:8b:05:e9:34:56:e4:f5:d7:
e1:51:c1:78:cb:dc:0e:b8:ba:85:0f:5d:78:fa:76:
84:2b:58:d6:00:21:77:f6:da:0f:03:cc:80:2f:ef:
8f:3e:e9:d7:17:ff:b3:8e:d9:e3:2d:14:6b:75:e6:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:79:F5:3F:EF:77:4C:99:96:D4:06:86:53:F6:6B:E1:30:CD:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13666687F11F0AD0E5A82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
19:66:0e:6a:de:f3:82:58:b1:7c:47:34:21:56:56:df:e5:73:
b8:e6:40:08:58:b5:d4:5b:e6:18:98:1f:da:e7:0f:75:1b:b2:
e9:4a:0c:8f:84:b5:c4:b8:8e:80:52:3c:07:36:f3:54:b3:06:
4a:75:b3:9d:a7:d4:5c:7a:d8:57:f8:f6:37:86:23:f3:74:1f:
6e:5c:c9:83:58:80:c0:7d:8a:67:ab:a3:bf:14:02:97:48:d7:
42:e7:ff:e9:48:2a:c0:96:7c:e5:5e:4d:d5:c2:3b:80:61:36:
02:64:e0:af:16:b6:a5:87:e2:d1:c6:c9:dc:82:49:48:3e:99:
0c:55:65:78:64:48:f3:a6:38:85:68:78:d0:32:dc:8c:6d:ca:
c6:25:48:37:4b:a6:5a:7c:a0:24:57:88:39:96:92:9e:de:40:
d4:4f:45:2f:03:df:bd:d7:99:73:46:59:cd:2e:f4:57:ef:4b:
03:0d:c0:59:f5:26:e5:af:75:cc:91:ae:74:fa:6f:62:df:09:
46:ab:75:a6:c5:ed:bb:82:0e:46:b8:53:59:42:06:3f:bf:3c:
f4:44:52:b0:3b:2f:1c:b8:de:a9:90:20:25:ae:1c:f8:df:7c:
94:2b:7b:87:6d:78:c4:e9:39:ca:c3:f4:46:65:1c:bc:85:11:
6b:5f:c0:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:17 2025 by rpki-client