Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B04FFD867CF11F092F89D87DAE4EC9C.roa
File: 3B04FFD867CF11F092F89D87DAE4EC9C.roa (raw, json)
Hash identifier: Nskp6frQ/4fwrUVUdYbpPLBeWGNZjkmaFU0IK8p4NPs=
Subject key identifier: 7E:B9:05:21:D2:EC:E9:99:FA:DC:25:40:E9:9F:C7:60:7F:B9:A0:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B04FFD867CF11F092F89D87DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 14:13:40 +0000
ROA not before: Wed 23 Jul 2025 14:13:35 +0000
ROA not after: Wed 17 Sep 2025 14:13:35 +0000
asID: 138915
IP address blocks: 154.203.143.0/24 maxlen: 24
154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102192 (0x18f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 14:13:35 2025 GMT
Not After : Sep 17 14:13:35 2025 GMT
Subject: CN=6880ee14-4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:c7:17:18:41:2b:42:d3:36:81:3a:d4:78:
a3:72:a8:93:92:14:42:a7:14:23:e5:a0:4e:1d:93:
9e:f6:cf:11:7a:a2:5b:33:40:bf:16:8e:14:5b:1e:
6e:8d:cf:87:35:a4:f9:1b:bb:96:7d:35:89:c5:6b:
93:f2:d0:fa:e0:b0:f3:0e:6f:91:32:c1:ec:2d:b9:
2c:77:c4:4c:d1:8d:25:c4:a2:50:52:9b:ac:5c:bf:
af:9c:91:73:44:74:85:91:96:09:c5:46:b9:66:57:
26:54:2b:42:23:2e:ef:94:0f:6a:67:7f:e3:2a:3b:
75:4d:2f:41:75:a8:bd:30:57:e9:b0:8a:c6:f2:dd:
53:5d:91:62:fc:ef:4c:69:6e:a3:bc:5e:3f:33:16:
f3:fc:16:4f:10:ee:f1:33:94:8e:21:be:60:75:eb:
5b:63:39:9e:e4:a3:ff:2a:e0:10:eb:d8:e5:66:3e:
a0:9b:9c:b0:c8:80:9e:e6:d7:99:15:bc:50:d5:69:
af:a7:2f:d1:d5:0b:09:db:e4:8d:81:ab:94:7a:b2:
c3:27:56:7b:c1:de:c0:d3:bb:06:a9:2d:89:33:f5:
67:a9:5b:c9:33:6e:1b:ad:1c:ed:17:48:ca:ac:33:
ef:6b:35:f2:c2:a1:bb:66:79:d1:4f:6b:f8:0f:21:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:05:21:D2:EC:E9:99:FA:DC:25:40:E9:9F:C7:60:7F:B9:A0:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B04FFD867CF11F092F89D87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.143.0/24
154.206.64.0-154.206.78.255
154.206.90.0-154.206.95.255
154.206.98.0/23
154.206.102.0-154.206.106.255
154.206.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:a6:c1:d0:1b:07:6c:f9:00:ac:e5:ff:d0:4d:08:13:f9:7b:
5d:87:a6:1f:71:94:70:af:bb:90:38:89:15:38:5a:7e:06:b3:
c7:de:cb:53:7a:64:71:4d:9e:4a:39:0a:0d:fe:1f:38:b8:0b:
37:8d:4e:56:0c:de:15:bd:7b:a3:7f:d5:91:e2:1a:5b:d2:8c:
63:97:9c:a2:66:9d:fa:de:7d:0a:13:f7:b4:50:32:b6:3c:9a:
93:1e:f3:2a:57:b9:87:32:30:0b:f8:81:97:17:b1:75:98:ed:
87:eb:63:55:90:af:4c:dd:0f:fd:5f:d1:68:b7:1e:3c:99:fd:
5a:6a:b1:65:a3:3e:9d:2c:20:3d:b7:0b:9e:33:51:3a:6a:73:
6c:07:9a:88:ac:68:be:4e:6a:c7:3e:c7:98:c8:e4:3a:7c:e1:
df:6f:03:e8:b5:99:75:25:4c:f3:a5:b7:c8:86:31:cd:2d:ef:
78:45:f8:00:6e:6b:52:da:85:3b:77:98:da:50:f2:64:8c:cb:
9f:26:d5:3c:46:a9:f8:53:5f:7a:02:96:97:6e:38:56:8a:f4:
89:03:cc:96:26:fc:25:04:c1:cb:22:80:d4:51:dc:ad:e2:da:
78:50:34:6f:de:91:df:c3:83:ce:8c:d2:9b:ab:be:41:03:e0:
9b:14:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:32 2025 by rpki-client