Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524AB9A8693C11F0871101D5DAE4EC9C.roa
File: 524AB9A8693C11F0871101D5DAE4EC9C.roa (raw, json)
Hash identifier: iFfuwGIUpWJgErbE1iLK+USteuHdFPTOcxUJJPbzQmQ=
Subject key identifier: FF:09:D1:1C:24:5D:0F:05:7D:06:DA:84:38:19:5A:74:97:4A:BB:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524AB9A8693C11F0871101D5DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:47:05 +0000
ROA not before: Fri 25 Jul 2025 09:47:00 +0000
ROA not after: Sun 31 Aug 2025 09:47:00 +0000
asID: 203020
IP address blocks: 154.86.64.0/20 maxlen: 24
154.86.80.0/20 maxlen: 24
154.86.96.0/20 maxlen: 24
154.89.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102317 (0x18fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:47:00 2025 GMT
Not After : Aug 31 09:47:00 2025 GMT
Subject: CN=68835299-f3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:68:1c:74:14:94:ef:58:4f:72:fc:f2:e6:
44:3d:ec:a1:06:8c:bf:01:50:e0:8d:6e:1e:27:e5:
c2:8d:55:c3:f7:b9:b9:15:49:87:20:9d:de:aa:35:
90:e3:21:3a:58:6a:ce:7c:5e:5c:a6:ac:be:4b:03:
ab:da:0f:5c:df:6c:0e:23:e0:c2:64:2a:8f:d1:ea:
9f:9f:a9:d2:23:56:96:28:b4:16:ac:ad:dd:99:fe:
62:e0:40:9c:1e:d5:35:7e:ab:07:69:16:8f:43:1c:
f6:cc:17:0a:c7:38:a8:d0:60:52:48:59:00:93:5d:
24:81:ad:cd:87:f3:f7:de:13:64:b4:23:89:b8:e2:
1e:b3:67:b2:dd:f1:a3:88:fa:47:9a:d9:5c:d0:2d:
8b:e5:a2:9f:22:8b:fe:21:7d:36:9c:cb:07:14:17:
0a:22:4b:c2:fe:5c:7d:d8:d0:b7:f8:23:a5:6b:31:
8d:0e:a4:b0:f4:57:b5:92:6f:52:8d:39:0c:b6:7b:
93:23:64:dc:3b:d3:7d:7d:d0:f6:d0:3b:42:09:c3:
36:5a:3b:63:b1:fa:f5:51:ed:1e:f3:be:ef:e0:fb:
a9:af:0c:77:3c:0f:6b:38:26:6d:f5:83:4d:81:ee:
2a:cc:52:76:c8:1c:44:34:23:54:db:b2:26:4e:b8:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:09:D1:1C:24:5D:0F:05:7D:06:DA:84:38:19:5A:74:97:4A:BB:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524AB9A8693C11F0871101D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.64.0-154.86.111.255
154.89.208.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:5d:44:81:47:30:b2:69:f6:f2:b0:f3:f4:09:06:e1:be:8d:
a9:50:ad:72:51:e4:7a:3b:8b:c6:d1:f5:b7:c1:37:2b:7f:f5:
56:aa:71:97:79:29:06:a6:b9:a2:07:69:62:7b:b0:49:71:79:
4e:c5:36:ca:e7:19:83:e0:c4:82:6e:a0:7e:27:7b:6a:47:8c:
54:f9:6a:40:e1:63:10:c6:ac:87:a3:d3:38:c1:a8:80:26:4c:
d2:5f:1c:0c:1e:ba:a2:d4:35:4e:e0:e1:d0:11:8d:61:19:98:
b1:fe:2d:76:29:13:32:ef:1d:6f:04:f8:a1:cc:ae:e0:37:f5:
a4:44:52:43:46:81:12:0f:ad:3d:31:be:25:98:a5:90:93:53:
be:ca:9b:48:37:62:1b:0f:ed:95:a9:2f:5c:1b:a3:e0:ba:3d:
84:79:d2:8a:30:cd:09:5a:f1:39:9a:35:66:91:7d:2c:53:64:
31:3e:fa:a0:ff:46:ae:ad:05:f6:98:a4:d7:77:83:12:d4:6e:
78:27:eb:eb:01:1a:d1:29:ae:3c:a4:7e:98:44:fa:ab:89:b7:
b2:e6:82:5d:f2:e1:1c:a3:86:99:93:95:4f:1b:84:a5:b8:39:
00:48:fc:9b:0c:bd:e0:64:9e:7b:b3:82:2a:16:0c:c2:48:d6:
98:83:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:13 2025 by rpki-client