Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5713369867D111F0A202B294DAE4EC9C.roa
File: 5713369867D111F0A202B294DAE4EC9C.roa (raw, json)
Hash identifier: tJDfuVN8/Jm8J0siR2yaFsik/cvGDpJTco3//Fifo98=
Subject key identifier: 24:FE:DB:F8:59:1F:7B:90:9C:81:B4:2E:0D:56:F3:DE:8A:7D:47:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5713369867D111F0A202B294DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 14:28:46 +0000
ROA not before: Wed 23 Jul 2025 14:28:41 +0000
ROA not after: Tue 09 Sep 2025 14:28:41 +0000
asID: 138915
IP address blocks: 154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
154.93.58.0/24 maxlen: 24
154.93.59.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.62.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102196 (0x18f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 14:28:41 2025 GMT
Not After : Sep 9 14:28:41 2025 GMT
Subject: CN=6880f19e-b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:9a:55:21:3e:da:91:f9:14:e4:ce:25:0f:
f3:e4:eb:f0:ff:43:4d:19:21:8e:b2:13:a1:ba:16:
56:58:2d:cd:57:60:9c:11:07:6b:cf:dd:96:11:71:
6b:a5:a1:74:9b:0c:f0:c6:cf:59:b9:95:54:b0:dd:
9f:2f:59:35:6d:4c:e0:bd:51:7a:07:21:79:f6:8b:
20:6c:20:4b:c2:5b:25:ca:4b:dd:41:48:70:09:33:
b3:90:67:da:2b:bf:dc:50:fc:dd:d0:9a:bc:7b:cc:
1d:43:54:15:52:10:b5:94:62:3a:7d:be:a4:d4:ee:
77:a6:27:d6:13:39:55:01:b9:a8:4e:63:a4:3c:13:
26:a0:6d:cb:20:5c:34:cd:64:04:02:96:9e:e1:b5:
aa:e1:8b:62:a7:35:34:e7:7c:db:56:ff:d1:0d:65:
c3:4d:c7:bc:cd:9d:5c:40:eb:ec:b8:4e:14:8c:fe:
7b:0f:c3:d0:12:9c:56:cc:e4:9a:a5:b9:48:7b:90:
71:a9:8a:2f:e1:e2:f4:8d:e3:89:89:4d:70:84:84:
c5:56:95:0f:11:3e:fb:13:ef:b3:f4:b8:7f:4c:b8:
f7:b7:7a:77:1f:13:01:d8:4d:95:5c:56:6f:25:07:
f9:25:53:37:41:c0:84:36:57:0f:d8:73:53:79:89:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:DB:F8:59:1F:7B:90:9C:81:B4:2E:0D:56:F3:DE:8A:7D:47:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5713369867D111F0A202B294DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.32.0/23
154.93.42.0-154.93.63.255
Signature Algorithm: sha256WithRSAEncryption
bd:bd:14:ff:c2:8d:be:c7:d3:48:44:32:02:35:7e:ad:52:2a:
8c:cd:f9:0e:20:21:ab:27:19:d8:d2:3e:1a:45:73:10:f4:ce:
c1:62:a6:fc:6c:d4:bc:dc:27:52:aa:a7:80:52:5b:f2:5d:03:
cc:dc:e5:65:96:91:41:47:1d:bb:c4:88:df:92:2e:d4:25:c8:
ad:17:b4:7f:57:78:f9:bb:13:5f:b5:ad:d7:11:b3:83:b6:d9:
ad:40:c3:6d:5f:b4:d5:c2:0b:24:76:9c:59:2a:97:49:fa:51:
20:60:d4:21:dc:dd:d9:57:da:e7:1f:dd:05:5a:a5:4e:2e:7b:
60:5e:0a:2e:d5:ea:36:e6:e8:2b:43:3e:e9:16:b3:39:55:f8:
10:da:0c:71:47:62:9e:13:99:3f:f5:b1:a9:12:71:2b:9b:e9:
d2:f8:6b:43:6a:ce:23:c5:06:ad:7e:12:fb:ec:91:95:07:9b:
f9:85:91:33:b9:35:d3:65:ff:0a:bd:2f:90:47:1c:e7:26:a1:
a1:2c:a7:e9:2d:bb:61:4d:bd:58:b5:d0:74:c2:ab:98:2b:6b:
81:f3:5a:0e:96:4d:ef:85:34:6d:86:20:36:c6:94:e1:d0:c5:
0d:b9:6c:31:ac:8f:12:9a:d8:95:80:ba:42:ed:ec:5d:2f:e1:
63:bc:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:50 2025 by rpki-client