Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491B92A4692211F0AC8675AFDAE4EC9C.roa
File: 491B92A4692211F0AC8675AFDAE4EC9C.roa (raw, json)
Hash identifier: DXAvh7Z7bMaNbv7t6HsRlMXzvv6qp95vNSdWFSPFHi4=
Subject key identifier: F2:5A:06:9A:23:C7:C5:C6:1E:7B:21:7F:A1:FA:62:9C:FE:0A:07:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491B92A4692211F0AC8675AFDAE4EC9C.roa
Signing time: Fri 25 Jul 2025 06:40:43 +0000
ROA not before: Fri 25 Jul 2025 06:40:38 +0000
ROA not after: Sun 24 Aug 2025 06:40:38 +0000
asID: 203020
IP address blocks: 154.86.64.0/20 maxlen: 24
154.86.80.0/20 maxlen: 24
154.86.96.0/20 maxlen: 24
154.89.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102307 (0x18fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 06:40:38 2025 GMT
Not After : Aug 24 06:40:38 2025 GMT
Subject: CN=688326eb-f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:83:fc:c9:1f:e0:c3:b3:f8:f7:8b:a1:a2:
1c:36:c6:48:32:1c:d3:02:58:b5:cc:34:82:1d:8c:
d9:05:04:09:3a:25:31:b7:29:71:31:5c:95:d1:7d:
45:93:7a:5d:b3:34:0d:ef:43:a7:bc:22:c6:7e:a2:
c5:b4:02:1d:67:70:dd:c8:c3:71:27:b4:83:5e:3e:
31:ef:13:42:ff:88:73:2a:27:e1:fd:5c:5f:bd:01:
d4:52:d7:69:2d:1f:c0:61:87:31:8f:a8:7b:fa:9d:
1c:49:85:06:25:a2:47:2e:42:13:da:1f:3d:cc:ed:
c0:b6:44:51:56:54:35:42:cb:91:17:be:2d:fe:9e:
ff:fa:14:63:38:56:2d:66:b6:4c:9b:9f:fd:24:f8:
a7:d8:2d:70:27:11:7f:c4:84:d2:6b:b6:03:ff:7d:
33:89:80:de:52:9c:17:9e:45:f3:ca:e6:14:94:9d:
eb:27:e9:9f:09:87:16:ee:43:ce:94:79:b5:01:f4:
5a:40:5f:2c:13:c6:81:e3:38:cf:be:03:d5:ac:31:
5d:a1:bd:47:f1:0b:a6:2a:07:2c:ef:c4:aa:54:68:
76:20:6f:4c:43:d7:7f:9c:87:2a:9e:5d:69:9c:30:
b7:f0:5a:bb:8a:0a:48:c0:90:eb:17:e3:88:76:02:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:06:9A:23:C7:C5:C6:1E:7B:21:7F:A1:FA:62:9C:FE:0A:07:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491B92A4692211F0AC8675AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.64.0-154.86.111.255
154.89.208.0/20
Signature Algorithm: sha256WithRSAEncryption
d0:48:10:73:5b:22:2f:57:69:b0:85:08:d1:f6:4c:f2:25:72:
51:d2:9f:53:81:14:75:4a:74:89:19:b4:9c:45:06:c5:02:d5:
79:59:ca:83:7d:32:73:bb:0d:ed:a3:28:eb:91:e9:69:23:38:
7d:00:db:eb:17:fe:d5:c1:e7:42:c5:06:f6:a5:e4:99:0a:52:
a9:fc:9f:d3:d1:48:37:69:c3:4f:20:db:31:84:7b:0b:68:24:
1c:c3:8b:ad:70:79:64:96:29:cb:e7:19:5d:cb:26:4b:76:f6:
64:a9:86:ef:d8:c1:69:c7:41:27:85:0f:84:e5:5d:42:bd:d7:
24:15:09:41:1d:88:ff:c7:9e:01:1e:12:a5:68:09:74:43:49:
3e:fd:32:6f:e3:29:8d:d0:f4:58:81:77:ba:60:94:aa:4f:ef:
d6:d6:a1:c5:dc:cb:71:83:b3:d9:89:89:bf:34:c2:89:8d:bd:
e7:37:4c:0f:ec:6c:8a:c5:84:3a:ff:de:60:f2:43:13:9e:2b:
32:e3:8d:a2:e1:b5:cc:45:a3:fd:8c:2d:0a:16:87:e6:dd:1d:
04:2a:07:99:9e:85:89:79:c3:c3:68:d3:99:6c:85:ae:34:04:
ff:5a:dc:1d:7c:4e:22:55:b1:79:af:e2:bb:66:5d:2f:4a:32:
3d:13:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:08 2025 by rpki-client