Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B97B1E67A511F0B41DD0F5DAE4EC9C.roa
File: 30B97B1E67A511F0B41DD0F5DAE4EC9C.roa (raw, json)
Hash identifier: yDamDj0+ue019uEYz7BIRAdkbr26TVxHmQRmCJiij6Q=
Subject key identifier: 0A:6D:9A:32:9B:99:8B:C2:04:D6:F1:4D:CF:8C:9E:78:AF:47:85:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B97B1E67A511F0B41DD0F5DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 09:12:44 +0000
ROA not before: Wed 23 Jul 2025 09:12:39 +0000
ROA not after: Fri 29 Aug 2025 09:12:39 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
154.206.4.0/22 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.72.0/22 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.222.74.0/23 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.222.84.0/23 maxlen: 24
154.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102131 (0x18ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 09:12:39 2025 GMT
Not After : Aug 29 09:12:39 2025 GMT
Subject: CN=6880a78c-3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:6a:b9:7d:b3:ab:cb:64:fe:ba:51:b1:90:
b9:57:b0:da:d7:c7:40:98:5f:b3:61:ad:8a:22:9e:
d9:e9:44:88:7b:23:5b:47:48:f4:c9:3a:d7:c2:06:
f0:ff:e5:4b:db:4c:0b:d3:dd:d0:49:bc:1f:7d:07:
b2:53:ba:90:40:aa:89:02:69:20:39:f7:3f:b6:62:
f9:7d:1d:c1:c8:07:00:0d:73:4a:39:4f:17:a5:45:
df:b6:f4:80:f9:7c:0e:f7:c6:20:52:b0:8a:8c:b9:
b6:7e:d4:84:2d:21:41:73:45:59:a4:ab:69:2e:76:
63:5b:c8:5d:1c:5c:2f:fe:0c:c4:b6:14:10:5f:26:
e1:ee:19:25:d0:e3:9e:f5:2e:db:2b:a9:1e:e0:dd:
3c:a6:04:de:04:01:36:5a:bf:2b:32:4a:14:5e:63:
bb:9f:87:ab:b7:b2:67:72:cb:38:aa:42:88:b1:11:
34:02:39:54:7d:31:bf:96:ea:39:1c:40:e5:6b:0c:
8f:17:ef:04:39:d0:79:6a:67:53:73:7f:e1:af:4c:
fc:67:12:42:61:2a:e3:3b:eb:4a:6e:95:a8:42:1c:
0a:72:be:52:07:a5:17:fa:c3:de:cf:8e:2b:ed:57:
56:5b:e1:6e:bb:db:3f:b9:ea:fa:75:2d:54:31:89:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:9A:32:9B:99:8B:C2:04:D6:F1:4D:CF:8C:9E:78:AF:47:85:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B97B1E67A511F0B41DD0F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.200.72.0/21
154.200.109.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.205.248.0/22
154.206.4.0/22
154.206.11.0/24
154.208.72.0/22
154.208.88.0/22
154.222.72.0/22
154.222.80.0-154.222.85.255
154.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:5b:2f:86:50:58:1e:08:f5:a5:e1:7a:f3:c5:c2:63:f8:83:
8c:84:93:0e:4d:dc:d8:98:b4:36:0a:4f:42:c1:47:aa:fe:3d:
58:6e:a8:8a:c3:74:60:13:98:0e:d9:bc:3f:76:40:72:5d:71:
ff:8a:a1:03:bf:ba:71:60:08:43:b9:8e:a0:d9:f3:52:3f:6b:
50:41:b3:e5:5a:8c:32:fe:ae:ad:26:a8:42:f5:9e:51:bc:79:
a2:be:30:28:ea:34:9d:3b:bc:b9:92:6f:6a:63:37:28:58:54:
ce:0d:21:ea:08:9d:49:20:a0:ac:09:c6:fd:ea:33:f8:df:72:
39:35:93:e8:20:a0:0a:e1:9f:c5:73:fb:81:f4:21:43:b0:4a:
b6:b1:b9:3c:f0:27:e7:87:b2:0c:5f:0a:09:ce:35:ee:19:d3:
f1:7a:7b:57:53:dc:95:ea:ce:8d:d5:f2:75:cf:fc:90:4a:cd:
8b:af:bc:ae:df:96:a3:b5:81:ba:e0:62:d2:1b:6e:af:90:dc:
68:46:28:60:ec:9f:c5:89:b3:15:38:fe:22:91:09:d5:94:03:
d0:84:cc:c8:9b:a2:f2:db:21:0b:a2:35:47:7b:00:e5:96:88:
99:38:a1:91:79:7c:0c:c8:bc:e0:b4:04:bc:fe:0f:c5:5e:82:
0c:7b:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:01 2025 by rpki-client